$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/770c614f-fc57-3c52-8bae-3ebe33802a8d.roa File: 770c614f-fc57-3c52-8bae-3ebe33802a8d.roa (raw, json) Hash identifier: 3JZpyWeRBA8wSnM/lKxVvNGsIAc/M2UHJMUOCNxSSMY= Subject key identifier: A0:7F:46:2C:3E:E4:A8:D4:29:85:CE:44:76:DC:E3:81:F4:2A:76:29 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B583C7EFE73A50AC8ED6EC680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/770c614f-fc57-3c52-8bae-3ebe33802a8d.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 208.38.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7e:fe:73:a5:0a:c8:ed:6e:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=585dec1c-92a6-4a41-adbf-b65e92895737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:bb:ad:71:0e:6b:d8:58:94:01:60:39:40: 09:05:7f:ce:ad:28:43:1a:77:4d:f8:8e:6e:45:e3: ab:cb:bf:06:5b:28:4f:f3:d9:85:33:a1:d1:d4:65: d7:5b:da:30:fb:f3:60:83:86:58:c5:eb:9d:1d:19: 24:86:7e:24:5a:23:87:93:03:54:d3:89:87:0c:42: 69:7f:b4:4d:72:a9:7a:0c:f3:c1:27:9e:25:c4:81: 1d:0e:6c:e2:4a:f9:a3:84:7e:fe:95:38:0d:4c:55: ee:42:bf:45:59:6b:9c:85:c5:24:b3:01:52:ff:45: 6c:d1:b4:c3:98:29:6a:55:a6:9b:15:e6:3e:5e:fc: de:c4:d4:aa:a3:23:3e:5d:bd:62:ec:1a:64:d8:09: b9:65:4a:ac:78:1a:8b:19:02:1d:9c:f2:25:48:9a: 49:60:c4:55:db:6d:6b:6b:e6:ca:7d:4c:71:87:9d: a0:66:02:0c:9b:22:fd:51:92:12:ee:6d:93:59:c8: b3:fa:d4:49:3e:2f:ed:57:c9:4c:78:83:49:69:fe: 12:3c:54:5f:55:6c:60:68:aa:26:a2:14:11:17:64: 3d:99:73:2d:ab:4f:c3:8c:5e:1a:5b:96:36:38:28: db:01:84:b4:3a:77:6d:0a:96:81:f0:e1:0a:3a:c6: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7F:46:2C:3E:E4:A8:D4:29:85:CE:44:76:DC:E3:81:F4:2A:76:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/770c614f-fc57-3c52-8bae-3ebe33802a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.38.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:66:68:7f:07:f7:b9:a5:71:98:df:ba:e8:f2:a2:e6:18:75: 12:69:69:5c:5a:14:22:d6:49:42:31:2c:ba:99:2b:79:90:c9: ae:07:b9:36:83:17:25:55:6f:25:4e:b7:da:48:26:c8:a3:b6: c8:2c:5b:68:d0:b9:8b:23:b2:43:98:b9:b5:5a:62:75:f6:80: 2b:e5:bf:c4:da:fc:8d:0b:6a:53:90:cf:83:1b:95:5d:0b:cf: 3f:88:cc:b1:d5:7a:b5:c0:9c:f9:4f:e5:2b:f6:ce:d6:2a:d1: d4:0a:7d:dd:d2:e6:5a:89:a3:23:71:93:16:40:ba:33:30:cd: c5:19:21:fa:f0:a9:d4:b2:47:bb:1b:b8:99:ae:88:33:17:fe: f4:c3:dc:bd:71:87:8c:0b:9a:f2:47:d5:7b:40:4a:90:98:ce: d0:9a:58:53:af:4d:4d:12:d1:f4:cb:a6:fb:7e:bb:72:f5:5f: 4d:65:c9:9d:e4:73:79:6c:2e:d0:19:1a:d0:91:8b:e8:1c:a9: c4:c1:25:28:94:6b:26:78:47:8b:cb:4b:25:3e:99:72:97:20: b1:5a:25:fc:56:66:8c:4f:26:32:ad:e7:ac:03:31:30:b0:02: e9:0c:fa:9d:02:2f:f9:bb:46:3a:56:6d:23:80:90:54:b8:f2: 61:d5:d0:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPH7+c6UKyO1uxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NTg1ZGVjMWMtOTJhNi00YTQxLWFkYmYtYjY1ZTkyODk1NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH+7rXEOa9hYlAFgOUAJBX/OrShDGndN+I5u ReOry78GWyhP89mFM6HR1GXXW9ow+/Ngg4ZYxeudHRkkhn4kWiOHkwNU04mHDEJp f7RNcql6DPPBJ54lxIEdDmziSvmjhH7+lTgNTFXuQr9FWWuchcUkswFS/0Vs0bTD mClqVaabFeY+XvzexNSqoyM+Xb1i7Bpk2Am5ZUqseBqLGQIdnPIlSJpJYMRV221r a+bKfUxxh52gZgIMmyL9UZIS7m2TWciz+tRJPi/tV8lMeINJaf4SPFRfVWxgaKom ohQRF2Q9mXMtq0/DjF4aW5Y2OCjbAYS0OndtCpaB8OEKOsbcUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB/Riw+5KjUKYXORHbc44H0KnYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzcwYzYxNGYtZmM1Ny0z YzUyLThiYWUtM2ViZTMzODAyYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0CYuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1maH8H97mlcZjfuujyouYYdRJpaVxaFCLWSUIxLLqZK3mQya4HuTaD FyVVbyVOt9pIJsijtsgsW2jQuYsjskOYubVaYnX2gCvlv8Ta/I0LalOQz4MblV0L zz+IzLHVerXAnPlP5Sv2ztYq0dQKfd3S5lqJoyNxkxZAujMwzcUZIfrwqdSyR7sb uJmuiDMX/vTD3L1xh4wLmvJH1XtASpCYztCaWFOvTU0S0fTLpvt+u3L1X01lyZ3k c3lsLtAZGtCRi+gcqcTBJSiUayZ4R4vLSyU+mXKXILFaJfxWZoxPJjKt56wDMTCw AukM+p0CL/m7RjpWbSOAkFS48mHV0KY= -----END CERTIFICATE-----Generated at Sun Oct 19 20:16:44 2025 by rpki-client