$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa File: 6d40050b-c5d1-338c-9a5a-fd493e776beb.roa (raw, json) Hash identifier: 2sjbm1bdbPa33H6pe1X0aFquJDQ1OCigwoLiV/7g6Mo= Subject key identifier: 10:CF:36:4D:E6:F6:F4:60:DD:35:65:5A:EB:BB:70:6A:FA:C9:38:C7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5DD1E353EA5B753FEE1E0C08 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 852 IP address blocks: 216.123.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e3:53:ea:5b:75:3f:ee:1e:0c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=e5cc3dfa-b6b7-4d3e-aa1c-7535544bd1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:3b:9e:7d:69:64:b2:eb:c7:4a:40:29:ea: b4:e4:b5:0e:12:86:18:a6:ff:02:5e:15:d4:03:bc: 9a:7c:db:67:50:3f:f9:4e:01:42:6b:3e:eb:0e:a8: ca:b0:31:a6:e6:a1:54:32:46:98:6e:d1:cc:53:47: ac:33:59:6d:b1:47:66:ae:e8:8b:75:1f:01:66:d1: 03:9d:a1:a0:90:b7:e3:06:b5:75:b9:52:59:81:9d: 58:26:37:d8:92:8b:f5:bc:f6:ba:89:53:7f:dc:38: 9c:41:b9:14:bc:2d:e2:2b:aa:2e:07:37:d8:f1:94: 1c:a5:3b:ce:cf:81:61:1a:e6:34:26:8f:7c:7b:c5: 76:90:cf:d8:40:2d:aa:b7:eb:21:ca:b4:31:7e:41: fd:4c:0f:11:bf:be:1c:74:77:53:09:27:03:fc:0f: 48:d9:9a:f8:93:9c:22:1d:4a:8f:06:35:75:ce:49: 51:34:97:3b:bb:c4:78:a7:8b:d0:91:d8:a5:1f:90: 9e:d8:3a:2e:14:b0:c9:26:6e:b5:6a:77:ba:eb:74: 75:b2:ab:44:5d:78:69:55:00:95:d3:03:1a:af:8a: 33:30:64:6f:70:c9:21:c6:6f:d0:d8:04:d6:87:7b: 65:53:3c:d6:82:73:83:fa:20:a2:02:e4:b5:bd:f9: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:36:4D:E6:F6:F4:60:DD:35:65:5A:EB:BB:70:6A:FA:C9:38:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.123.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4a:31:d5:b6:5a:51:3c:99:33:1e:93:1f:05:be:73:e7:b2: aa:d9:50:91:93:ca:97:c1:09:d0:c9:70:70:88:51:28:b6:ee: 37:f3:dd:47:3c:31:b4:37:97:68:2e:a4:52:95:30:03:b4:84: 61:ff:c2:45:95:e4:6a:a4:df:12:c1:24:1d:52:51:74:db:58: 88:ee:fc:56:48:20:aa:b1:15:2f:72:83:22:42:5a:6d:b4:f2: 51:53:68:1e:4c:61:d3:dd:b2:76:dc:56:5a:c4:33:99:3a:eb: 7c:6f:4c:31:83:06:df:23:e6:27:ab:ab:12:5e:ad:57:5c:f4: d7:24:8e:6f:a0:62:e3:3f:c3:1c:db:d5:40:0d:54:76:fd:89: c4:3c:0c:43:c1:68:ec:37:44:92:67:91:f4:80:78:0f:d6:31: c1:5c:5c:a0:38:2c:ad:e8:b1:01:b5:d8:6b:36:9c:69:4a:f4: 5b:eb:85:c9:48:a9:f0:82:d0:24:fe:57:e8:2b:f5:99:7f:82: 31:7b:2d:a5:7e:27:80:49:62:d6:fb:75:cb:bc:90:46:32:f4: f7:25:58:f9:56:32:b7:36:cd:ec:3c:95:4a:0b:10:37:17:6a: 87:d3:e6:b6:fe:b3:f9:6e:b6:1a:f8:19:8d:24:d7:0e:85:40: 6c:d4:2e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eNT6lt1P+4eDAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZTVjYzNkZmEtYjZiNy00ZDNlLWFhMWMtNzUzNTU0NGJkMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvA7nn1pZLLrx0pAKeq05LUOEoYYpv8CXhXU A7yafNtnUD/5TgFCaz7rDqjKsDGm5qFUMkaYbtHMU0esM1ltsUdmruiLdR8BZtED naGgkLfjBrV1uVJZgZ1YJjfYkov1vPa6iVN/3DicQbkUvC3iK6ouBzfY8ZQcpTvO z4FhGuY0Jo98e8V2kM/YQC2qt+shyrQxfkH9TA8Rv74cdHdTCScD/A9I2Zr4k5wi HUqPBjV1zklRNJc7u8R4p4vQkdilH5Ce2DouFLDJJm61ane663R1sqtEXXhpVQCV 0wMar4ozMGRvcMkhxm/Q2ATWh3tlUzzWgnOD+iCiAuS1vfl1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDPNk3m9vRg3TVlWuu7cGr6yTjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmQ0MDA1MGItYzVkMS0z MzhjLTlhNWEtZmQ0OTNlNzc2YmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJKMdW2WlE8mTMekx8FvnPnsqrZUJGTypfBCdDJcHCIUSi27jfz3Uc8 MbQ3l2gupFKVMAO0hGH/wkWV5Gqk3xLBJB1SUXTbWIju/FZIIKqxFS9ygyJCWm20 8lFTaB5MYdPdsnbcVlrEM5k663xvTDGDBt8j5ierqxJerVdc9Nckjm+gYuM/wxzb 1UANVHb9icQ8DEPBaOw3RJJnkfSAeA/WMcFcXKA4LK3osQG12Gs2nGlK9FvrhclI qfCC0CT+V+gr9Zl/gjF7LaV+J4BJYtb7dcu8kEYy9PclWPlWMrc2zew8lUoLEDcX aofT5rb+s/luthr4GY0k1w6FQGzULrw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:49 2025 by rpki-client