$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa File: 645d7b37-8474-3720-a5a3-bd3189eb639a.roa (raw, json) Hash identifier: FwXgLhX+SLh2ctiSG0gwT3ZSu26D98Zo5thZqjKYseo= Subject key identifier: 08:69:37:29:B9:77:5A:E3:03:94:0A:2C:5E:18:9C:5F:48:AC:FC:37 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B78574B672B023E6A1BB57D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 20115 IP address blocks: 142.173.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:4b:67:2b:02:3e:6a:1b:b5:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=fd0ab435-f2ba-48d8-81cf-019f37678504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:aa:25:52:59:81:3f:5c:a8:28:83:7b:0d: ec:0f:7c:ca:24:21:0b:6e:03:13:04:f7:34:4e:16: 0d:4e:bb:78:f0:13:9a:1d:70:08:ae:51:69:96:2e: 90:15:a3:11:24:30:25:30:57:63:61:08:74:6e:62: 3c:a7:46:89:75:07:95:ad:a0:37:9e:43:de:c7:dc: 94:00:d8:88:1a:8e:35:4a:ad:b2:7f:39:29:49:5a: 5e:13:98:da:f8:b9:d7:10:47:cf:c1:d6:70:53:ae: 42:96:3c:eb:01:54:a3:ef:83:53:45:54:b3:41:28: fe:b3:e3:37:41:96:ae:82:2e:d8:ee:df:7c:f4:ae: ae:3a:db:dc:66:09:de:cf:29:24:a8:e1:dd:2e:39: fa:10:2d:1a:cd:cd:8d:59:21:82:08:92:c4:02:b3: c9:d8:73:f0:0e:0b:e0:4c:49:58:22:d4:83:83:89: 14:19:8c:29:80:ae:37:3b:81:e8:f3:5c:bf:fe:fb: 5e:85:a8:c1:e2:ae:7e:79:18:a2:46:ae:e1:3d:72: f3:2c:87:4f:4c:e5:dd:90:12:4d:34:cb:cf:1c:f8: 54:5a:bb:4d:b2:a0:c3:5b:25:89:a9:a4:db:72:0f: 08:55:ef:33:0a:e8:93:c5:57:a6:d7:0e:b0:4b:c2: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:69:37:29:B9:77:5A:E3:03:94:0A:2C:5E:18:9C:5F:48:AC:FC:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.173.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8b:1e:71:92:8a:46:db:c3:1d:24:05:b5:4c:89:55:55:93: 5c:82:5d:1e:32:9a:6a:62:cf:34:10:fa:3d:19:7c:f5:6e:23: 52:ad:0c:66:9c:82:e8:74:86:df:49:22:a7:b9:83:5a:36:8d: 89:0c:7e:71:25:60:44:ef:6e:07:42:65:68:b5:be:35:33:09: 5b:60:de:de:9b:b2:ae:7f:55:56:6b:4e:21:44:4f:e7:7a:ef: ec:ff:d0:8c:88:ec:f0:ea:5a:d9:cf:dd:54:2d:87:1a:ff:9d: 95:81:7d:f4:31:17:fb:7a:30:51:ae:e1:42:06:2b:88:ef:00: a3:7f:94:f1:4f:45:14:c4:42:14:11:dc:66:30:87:ff:0d:23: 33:d3:6b:81:ba:21:0e:8a:d5:f5:92:ef:f1:eb:5f:64:e2:7d: d4:fe:2f:cc:20:e3:5d:23:92:ce:88:bb:25:69:ce:4a:c8:58: 40:cd:83:bd:f6:61:b1:61:27:8a:b2:64:de:b8:ee:32:5d:6e: ed:39:72:90:27:c8:5b:ac:2a:8a:50:bf:7f:27:c3:71:5f:b5: 86:c3:22:6a:b2:a8:5c:8b:d7:af:fe:71:20:18:57:dd:a0:f4: 51:62:f4:2d:31:54:c3:76:c8:f5:95:81:5d:e6:1a:07:bc:e1: a0:d0:c8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0tnKwI+ahu1fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ZmQwYWI0MzUtZjJiYS00OGQ4LTgxY2YtMDE5ZjM3Njc4NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8KqJVJZgT9cqCiDew3sD3zKJCELbgMTBPc0 ThYNTrt48BOaHXAIrlFpli6QFaMRJDAlMFdjYQh0bmI8p0aJdQeVraA3nkPex9yU ANiIGo41Sq2yfzkpSVpeE5ja+LnXEEfPwdZwU65CljzrAVSj74NTRVSzQSj+s+M3 QZaugi7Y7t989K6uOtvcZgnezykkqOHdLjn6EC0azc2NWSGCCJLEArPJ2HPwDgvg TElYItSDg4kUGYwpgK43O4Ho81y//vtehajB4q5+eRiiRq7hPXLzLIdPTOXdkBJN NMvPHPhUWrtNsqDDWyWJqaTbcg8IVe8zCuiTxVem1w6wS8IApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhpNym5d1rjA5QKLF4YnF9IrPw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjQ1ZDdiMzctODQ3NC0z NzIwLWE1YTMtYmQzMTg5ZWI2MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjq2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCLHnGSikbbwx0kBbVMiVVVk1yCXR4ymmpizzQQ+j0ZfPVuI1KtDGac guh0ht9JIqe5g1o2jYkMfnElYETvbgdCZWi1vjUzCVtg3t6bsq5/VVZrTiFET+d6 7+z/0IyI7PDqWtnP3VQthxr/nZWBffQxF/t6MFGu4UIGK4jvAKN/lPFPRRTEQhQR 3GYwh/8NIzPTa4G6IQ6K1fWS7/HrX2TifdT+L8wg410jks6IuyVpzkrIWEDNg732 YbFhJ4qyZN647jJdbu05cpAnyFusKopQv38nw3FftYbDImqyqFyL16/+cSAYV92g 9FFi9C0xVMN2yPWVgV3mGge84aDQyOU= -----END CERTIFICATE-----Generated at Sun Oct 19 22:45:56 2025 by rpki-client