$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6b302538-4d2d-3c28-9037-656a331e4950.roa File: 6b302538-4d2d-3c28-9037-656a331e4950.roa (raw, json) Hash identifier: Yx9GewfYSK3jquT81Z85y26otDSvXrN6mfRicQC3wNI= Subject key identifier: 3D:9B:3B:F4:39:5A:4F:38:69:28:92:60:AA:44:42:15:85:C0:53:C7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11CE0A713E38A3E9BE3440 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6b302538-4d2d-3c28-9037-656a331e4950.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 1633 IP address blocks: 208.38.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ce:0a:71:3e:38:a3:e9:be:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=c9304169-44b2-4856-bd64-ea0e2c6a0c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:d2:27:b5:29:37:43:d1:64:32:f2:ad:95: fe:7f:b6:f2:a3:61:14:07:f6:9e:e3:aa:d0:9b:94: db:5a:c2:28:c2:67:46:f2:bd:1e:df:a0:49:91:95: 67:2c:71:81:4f:b0:b6:ab:40:21:59:99:e8:77:eb: 86:3d:25:3f:88:55:9f:a8:f4:d3:bb:9e:ad:18:28: 6e:cd:c6:1e:27:7e:09:38:db:08:61:8b:1d:a7:c2: b9:b5:a1:29:7d:15:24:51:c3:5e:87:4c:1b:fb:85: 92:ef:67:22:1d:5a:d9:0a:14:85:08:61:ff:92:2d: 38:83:c2:d6:c5:76:bd:98:0d:32:e4:33:d7:11:01: 41:ae:45:4b:51:78:75:5f:ba:10:54:0e:b0:59:c3: eb:09:10:63:44:ef:ca:b7:6e:9c:ee:9a:57:1d:3d: b7:81:cc:c5:58:b0:d4:e2:a0:28:8d:8e:cb:69:a6: 13:9c:ac:a4:71:df:b8:91:9a:94:f3:da:1d:e2:8b: 95:64:16:8d:2d:6c:86:ef:8a:8c:1c:7a:67:c9:f8: ad:ec:32:17:91:f4:de:2b:dd:f9:bf:30:94:fe:62: f0:96:44:b5:28:00:93:43:63:88:9b:7f:4d:38:3e: bc:81:f2:05:2e:25:93:42:84:1d:62:eb:96:fd:75: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9B:3B:F4:39:5A:4F:38:69:28:92:60:AA:44:42:15:85:C0:53:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6b302538-4d2d-3c28-9037-656a331e4950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.38.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:aa:35:17:4a:b1:c0:0b:de:d6:78:c1:cf:98:af:dc:7c:ed: 44:3d:90:7c:8c:ab:01:53:b5:e3:0c:d9:8a:b4:1e:ad:12:4d: 87:32:ec:09:78:4b:f3:1a:61:2e:99:a2:ed:95:7d:85:d9:ff: 41:7b:5c:20:79:59:10:29:24:35:04:4a:61:f7:27:0a:56:df: c8:6b:d8:a4:d8:29:9a:4e:ce:57:8c:ea:bf:b8:75:83:9f:14: 8b:a6:94:a4:29:87:8c:9b:c8:df:6e:17:f1:54:9a:cc:a2:63: 96:5b:a2:9e:cb:f4:2d:c9:77:12:59:22:53:6d:6a:34:14:3f: 36:8f:9a:60:d6:2f:e8:5f:06:79:15:93:6c:15:bf:67:6c:14: a4:3e:44:d8:42:bc:5c:6a:f3:3c:50:93:a7:b5:7d:e6:62:76: 89:d6:06:a9:08:15:5d:3b:f0:d8:d0:97:44:ce:a5:bb:45:12: 5d:1d:bf:21:eb:6b:05:f1:4e:1d:58:ca:f5:d9:4e:7b:2f:5d: c5:9f:2e:bf:6b:8f:87:ee:e3:ea:8d:34:b3:ca:72:39:e3:8d: 3a:79:86:e3:f6:64:c8:70:72:ac:f6:d0:51:05:23:9a:0d:36: f8:2d:43:cf:19:c8:3f:ae:df:fd:59:1a:5d:99:50:d0:3d:64: 4b:59:ba:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEc4KcT44o+m+NEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YzkzMDQxNjktNDRiMi00ODU2LWJkNjQtZWEwZTJjNmEwYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgljSJ7UpN0PRZDLyrZX+f7byo2EUB/ae46rQ m5TbWsIowmdG8r0e36BJkZVnLHGBT7C2q0AhWZnod+uGPSU/iFWfqPTTu56tGChu zcYeJ34JONsIYYsdp8K5taEpfRUkUcNeh0wb+4WS72ciHVrZChSFCGH/ki04g8LW xXa9mA0y5DPXEQFBrkVLUXh1X7oQVA6wWcPrCRBjRO/Kt26c7ppXHT23gczFWLDU 4qAojY7LaaYTnKykcd+4kZqU89od4ouVZBaNLWyG74qMHHpnyfit7DIXkfTeK935 vzCU/mLwlkS1KACTQ2OIm39NOD68gfIFLiWTQoQdYuuW/XVTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2bO/Q5Wk84aSiSYKpEQhWFwFPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmIzMDI1MzgtNGQyZC0z YzI4LTkwMzctNjU2YTMzMWU0OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0CYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGqNRdKscAL3tZ4wc+Yr9x87UQ9kHyMqwFTteMM2Yq0Hq0STYcy7Al4 S/MaYS6Zou2VfYXZ/0F7XCB5WRApJDUESmH3JwpW38hr2KTYKZpOzleM6r+4dYOf FIumlKQph4ybyN9uF/FUmsyiY5Zbop7L9C3JdxJZIlNtajQUPzaPmmDWL+hfBnkV k2wVv2dsFKQ+RNhCvFxq8zxQk6e1feZidonWBqkIFV078NjQl0TOpbtFEl0dvyHr awXxTh1YyvXZTnsvXcWfLr9rj4fu4+qNNLPKcjnjjTp5huP2ZMhwcqz20FEFI5oN NvgtQ88ZyD+u3/1ZGl2ZUNA9ZEtZujE= -----END CERTIFICATE-----Generated at Mon Oct 20 01:23:18 2025 by rpki-client