$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9b4acefe-c46e-3d75-bb9e-43ca41c72573.roa File: 9b4acefe-c46e-3d75-bb9e-43ca41c72573.roa (raw, json) Hash identifier: QqnDxKHwS4LxQLYBPvdvxBsFwbJfcDD8+j39YpPR9HM= Subject key identifier: C0:FA:FC:BE:16:5D:6E:6A:33:39:81:B0:E3:32:22:C5:D3:F6:56:7E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C479C9E3981C846EC900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9b4acefe-c46e-3d75-bb9e-43ca41c72573.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 208.181.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c4:79:c9:e3:98:1c:84:6e:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=397f02c3-a54e-4212-87c6-df931e4805b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:d4:50:20:e8:63:0a:7a:59:a9:82:ce:d5: 3d:20:32:b8:3d:50:77:c0:89:68:42:20:3a:5b:dc: 2a:cf:c6:58:72:05:a7:07:7b:51:e5:4d:a1:f3:e8: 3d:22:03:54:92:74:7d:83:46:24:7f:f5:37:34:55: 19:5f:fa:9d:83:59:84:42:bb:34:3d:b8:10:cb:53: 42:c8:7b:92:cd:e3:7e:c2:b6:1c:09:ca:76:66:15: 1b:28:59:42:1f:e5:f9:51:9f:05:a4:b0:9e:aa:73: 86:ef:59:52:48:62:b8:eb:14:39:fa:4a:66:75:b0: fe:5b:a8:10:d0:77:61:56:e4:47:28:ee:4a:8f:3c: 88:5d:c3:d3:e9:8d:6b:51:c3:ac:56:5b:c4:dd:3c: 3d:7b:2c:fd:19:43:d9:0d:1f:81:7e:87:d5:eb:da: cf:f0:a2:26:07:06:38:93:7b:85:41:2a:f7:46:16: 91:85:28:d5:c9:79:96:a6:70:c8:0a:ad:f6:54:3c: 8d:c5:b9:61:db:6f:9d:1d:c4:d9:c3:1b:88:f9:50: db:b9:84:29:d2:94:d9:41:2b:61:88:02:ff:41:96: 63:df:68:c8:da:76:6e:dd:01:f6:93:37:6d:54:a4: 6f:19:15:76:be:f6:5e:a7:4b:b6:4b:76:f4:8c:b9: 30:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FA:FC:BE:16:5D:6E:6A:33:39:81:B0:E3:32:22:C5:D3:F6:56:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9b4acefe-c46e-3d75-bb9e-43ca41c72573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:4f:7f:07:56:6e:02:38:a7:24:ce:35:6e:2c:4a:73:3d:34: d4:00:83:3b:b8:66:85:78:60:11:2d:3f:4c:48:5c:e0:74:f5: 2c:0d:b5:3a:47:73:aa:3e:e8:66:df:92:5f:e6:32:7e:f4:91: 4d:97:b1:a6:87:3c:04:54:42:d0:6b:01:2d:00:28:8f:18:03: d1:fd:d0:04:94:e7:ec:5e:2d:6c:77:7e:47:7a:0c:03:0d:0d: 2d:05:6c:49:98:33:b4:55:3b:0e:49:45:2a:1a:4a:9b:cc:1f: bb:62:71:d9:51:e2:a7:bd:65:35:a8:46:2e:aa:f1:7b:2d:a6: 8e:bf:e5:d8:da:ab:73:63:96:8b:d1:cf:e6:11:a6:87:f8:c2: 69:fd:3c:a7:33:d2:1b:81:e0:51:3e:45:00:b1:6f:ce:0f:35: ae:22:92:b2:5a:48:cd:14:c5:7d:66:9c:ac:0e:f7:29:9e:18: ec:eb:34:1a:9d:ce:74:db:04:f5:f9:fc:da:27:4d:93:7b:b7: 5b:58:ed:ee:6a:b5:6b:d6:67:56:6d:4b:8d:15:5a:d7:35:16: ac:cd:8e:43:73:8f:cb:76:44:26:ad:cc:b4:a3:5c:2a:ad:b0: 29:d2:97:1f:a4:f8:ac:46:1e:21:15:7d:90:b8:5f:eb:41:f9: 44:a9:67:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcR5yeOYHIRuyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk Mzk3ZjAyYzMtYTU0ZS00MjEyLTg3YzYtZGY5MzFlNDgwNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprbUUCDoYwp6WamCztU9IDK4PVB3wIloQiA6 W9wqz8ZYcgWnB3tR5U2h8+g9IgNUknR9g0Ykf/U3NFUZX/qdg1mEQrs0PbgQy1NC yHuSzeN+wrYcCcp2ZhUbKFlCH+X5UZ8FpLCeqnOG71lSSGK46xQ5+kpmdbD+W6gQ 0HdhVuRHKO5KjzyIXcPT6Y1rUcOsVlvE3Tw9eyz9GUPZDR+BfofV69rP8KImBwY4 k3uFQSr3RhaRhSjVyXmWpnDICq32VDyNxblh22+dHcTZwxuI+VDbuYQp0pTZQSth iAL/QZZj32jI2nZu3QH2kzdtVKRvGRV2vvZep0u2S3b0jLkwywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD6/L4WXW5qMzmBsOMyIsXT9lZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWI0YWNlZmUtYzQ2ZS0z ZDc1LWJiOWUtNDNjYTQxYzcyNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNPfwdWbgI4pyTONW4sSnM9NNQAgzu4ZoV4YBEtP0xIXOB09SwNtTpH c6o+6Gbfkl/mMn70kU2XsaaHPARUQtBrAS0AKI8YA9H90ASU5+xeLWx3fkd6DAMN DS0FbEmYM7RVOw5JRSoaSpvMH7ticdlR4qe9ZTWoRi6q8Xstpo6/5djaq3NjlovR z+YRpof4wmn9PKcz0huB4FE+RQCxb84PNa4ikrJaSM0UxX1mnKwO9ymeGOzrNBqd znTbBPX5/NonTZN7t1tY7e5qtWvWZ1ZtS40VWtc1FqzNjkNzj8t2RCatzLSjXCqt sCnSlx+k+KxGHiEVfZC4X+tB+USpZzg= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:53 2025 by rpki-client