$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa File: 85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa (raw, json) Hash identifier: 9decaA/SVMEOph1L2yihromoYCaR+lG6bP3b1nq3h6k= Subject key identifier: 4D:07:D8:30:41:99:68:97:E6:01:28:9C:18:61:88:DA:63:7D:DD:F5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B583C8334204B99F13ADED0A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 207.102.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:83:34:20:4b:99:f1:3a:de:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=e75e8c58-242c-4814-ba3c-b80acf9ad7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:7e:35:f1:d6:88:bf:a5:37:8c:77:de:72: a7:11:fc:d1:9d:87:99:8b:b6:a3:76:f1:4f:0e:93: 81:39:ad:76:a9:62:0e:60:b9:43:81:f6:4b:0c:d6: 75:6f:97:47:57:c4:c6:69:42:44:67:d3:a2:1d:83: 57:3a:86:94:67:15:7b:77:23:0d:24:64:18:27:69: eb:f4:67:2f:39:a0:d6:c7:f4:b9:3a:e9:f1:a0:c1: c1:b3:1c:25:c1:d2:56:cc:80:b4:89:dc:a5:cb:1c: 75:1f:29:6c:43:e4:cb:f3:4b:ac:16:3f:7f:c9:e2: 15:72:9e:68:03:80:b1:f9:42:87:26:8d:b3:96:b1: 9f:46:d8:08:d0:fc:c9:48:31:6d:94:b7:a5:76:08: d6:3e:06:19:51:be:31:db:da:c8:00:81:b6:53:bb: f9:24:fa:dd:3f:d7:ad:cc:5a:16:c6:43:bb:24:98: 34:8b:5d:ad:00:fa:8c:19:39:53:c5:15:de:95:1c: a4:d9:eb:9f:bd:db:7e:b1:cb:96:d8:57:d7:d8:c7: f3:60:f7:5d:c0:11:e0:f1:a0:ed:4a:7c:53:01:6d: e4:d8:82:9d:df:76:34:75:19:53:77:e3:c8:cb:bb: 08:a0:ae:3b:2b:e2:bb:6a:f7:2a:89:44:80:08:4c: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:07:D8:30:41:99:68:97:E6:01:28:9C:18:61:88:DA:63:7D:DD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/85abb860-c083-3a65-9d48-1d91bbe6a3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.102.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3c:b0:c4:75:e2:47:13:42:01:d5:bc:9b:37:3c:e2:d8:f7: 61:62:a7:bc:19:1c:cf:82:21:99:23:e3:51:64:97:8a:33:af: d6:73:16:8d:5e:cb:21:e9:51:bd:05:5f:c7:22:ca:93:c7:8f: 88:06:18:49:c9:dc:d0:0f:8f:a3:b8:f8:d9:34:27:ca:58:ff: b2:58:80:20:cd:5d:19:6d:03:a1:81:9a:22:b9:51:51:48:5b: df:11:c2:5f:1a:6a:36:81:80:a7:0b:4a:0a:e7:f7:00:2a:32: cb:66:08:95:49:f1:b7:96:53:ae:88:24:90:02:82:2b:03:20: a9:d3:53:8b:f1:18:56:33:d0:60:4d:21:84:20:35:1f:cc:61: 29:91:0f:f2:f6:7b:8d:53:fd:33:9d:40:fc:05:81:f2:3b:e2: 7b:27:b3:84:16:44:c4:1d:a6:79:dc:30:8c:b6:de:ea:df:4f: ee:2f:b7:86:c5:5b:34:87:61:8d:04:7c:9e:87:93:20:d9:53: be:05:b6:3c:f1:a0:af:15:37:e2:7c:fc:79:ff:c8:b4:9f:69: c5:ef:fd:34:e5:07:16:96:01:7d:0c:a7:8f:77:cb:23:62:e8: 84:16:fc:87:a1:11:fd:0d:5f:5a:97:6a:29:bc:ec:be:95:5c: 9a:19:79:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIM0IEuZ8Tre0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTc1ZThjNTgtMjQyYy00ODE0LWJhM2MtYjgwYWNmOWFkN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknt+NfHWiL+lN4x33nKnEfzRnYeZi7ajdvFP DpOBOa12qWIOYLlDgfZLDNZ1b5dHV8TGaUJEZ9OiHYNXOoaUZxV7dyMNJGQYJ2nr 9GcvOaDWx/S5OunxoMHBsxwlwdJWzIC0idylyxx1HylsQ+TL80usFj9/yeIVcp5o A4Cx+UKHJo2zlrGfRtgI0PzJSDFtlLeldgjWPgYZUb4x29rIAIG2U7v5JPrdP9et zFoWxkO7JJg0i12tAPqMGTlTxRXelRyk2eufvdt+scuW2FfX2MfzYPddwBHg8aDt SnxTAW3k2IKd33Y0dRlTd+PIy7sIoK47K+K7avcqiUSACEwrXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0H2DBBmWiX5gEonBhhiNpjfd31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODVhYmI4NjAtYzA4My0z YTY1LTlkNDgtMWQ5MWJiZTZhM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz2YoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo8sMR14kcTQgHVvJs3POLY92Fip7wZHM+CIZkj41Fkl4ozr9ZzFo1e yyHpUb0FX8ciypPHj4gGGEnJ3NAPj6O4+Nk0J8pY/7JYgCDNXRltA6GBmiK5UVFI W98Rwl8aajaBgKcLSgrn9wAqMstmCJVJ8beWU66IJJACgisDIKnTU4vxGFYz0GBN IYQgNR/MYSmRD/L2e41T/TOdQPwFgfI74nsns4QWRMQdpnncMIy23urfT+4vt4bF WzSHYY0EfJ6HkyDZU74FtjzxoK8VN+J8/Hn/yLSfacXv/TTlBxaWAX0Mp493yyNi 6IQW/IehEf0NX1qXaim87L6VXJoZeQ0= -----END CERTIFICATE-----Generated at Sun Oct 19 20:18:38 2025 by rpki-client