$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aaf7ef7a-bd6a-3284-91cf-cb3db22005d0.roa File: aaf7ef7a-bd6a-3284-91cf-cb3db22005d0.roa (raw, json) Hash identifier: VIMMVKhv1l0PDXv0YfkhB6g7OAeCGHV4NkNaxdvb114= Subject key identifier: 7A:A7:81:59:E5:CB:79:DB:21:E6:B1:E0:B7:B9:80:DF:00:06:DB:FC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D7440025DA93F9684900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aaf7ef7a-bd6a-3284-91cf-cb3db22005d0.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 207.102.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d7:44:00:25:da:93:f9:68:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=f247c53c-9de6-407f-b479-16f0a90e4102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:97:f4:1d:9e:38:6d:98:6a:1d:9d:ae:50: a3:e3:01:a6:b8:1d:f8:44:61:c1:87:dd:69:3b:32: 12:77:37:b5:64:d8:20:29:04:bf:f7:d5:04:eb:91: 57:ad:dc:c6:e4:6c:aa:32:8e:cb:81:ab:89:91:89: 05:2d:96:97:fb:d6:0f:49:22:80:04:da:b1:79:92: 99:0b:7b:ea:87:70:98:d2:07:c7:2e:1c:a2:87:51: dc:85:96:74:b8:02:e2:fd:e8:eb:8a:95:7e:84:a6: 4c:d0:21:75:15:d9:ec:e6:2d:5f:85:e2:f5:0c:71: 5b:96:d1:37:b3:d2:cc:2b:a3:0f:5f:b4:94:e6:f4: 66:b1:10:00:91:8f:fa:c8:63:2f:29:71:7a:49:c9: ec:72:06:71:24:b0:84:58:5c:15:5f:73:d4:ed:d8: 03:0b:ba:1c:12:9b:eb:eb:a1:33:58:31:9d:81:56: d5:5b:9b:60:69:36:0d:76:07:a2:28:9b:69:17:33: 3a:f7:db:43:3e:dc:4d:e5:b2:d3:e1:77:db:c6:59: 02:46:31:6f:0e:d6:c9:c3:8f:fe:7c:45:25:4b:b1: ba:69:98:96:81:41:85:4b:84:f8:4a:46:b1:c4:0e: d7:22:05:5a:7f:3f:b1:f2:09:77:72:1d:c2:7e:46: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A7:81:59:E5:CB:79:DB:21:E6:B1:E0:B7:B9:80:DF:00:06:DB:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aaf7ef7a-bd6a-3284-91cf-cb3db22005d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.102.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f8:47:d5:ea:eb:8f:47:6f:00:26:7c:d0:2c:dd:52:63:52: 15:62:02:04:f1:8f:58:a8:4f:23:04:3c:df:87:60:5f:bd:ae: 3f:d6:0a:53:43:a9:66:3a:ca:b1:ce:21:9a:b4:ef:d1:86:00: ba:c5:63:0f:0b:f6:55:7c:df:09:64:7d:26:5e:0f:16:bc:04: 76:94:30:d6:f9:32:4a:55:04:d1:dc:9b:b6:71:9b:64:78:62: ae:05:3b:00:72:44:ca:26:e7:83:2d:05:c7:74:95:64:85:ff: 83:ab:51:f4:89:77:2a:66:6c:62:b3:1f:75:34:dc:27:b1:13: df:71:b1:d0:b2:13:78:2f:d7:93:61:3a:3d:3d:fd:30:b9:1c: 01:ba:d8:64:d1:d2:b3:0c:91:08:bc:7b:18:a7:ab:5b:b4:2a: 37:fc:7b:7d:9d:6f:f6:1e:9c:55:37:57:5a:db:b0:d2:37:09: 28:a6:93:88:1c:9f:c7:93:b1:3d:e8:d7:bd:c0:51:66:0d:91: 5f:6d:8f:05:cd:eb:43:15:33:af:67:5e:e3:b3:15:40:62:6f: 87:65:ca:f1:0a:bf:c5:53:5f:19:97:30:82:21:36:31:ff:9d: 03:8b:37:43:75:4c:5e:25:4c:1d:39:6f:41:86:d0:a8:c3:39: 71:11:13:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcddEACXak/loSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjI0N2M1M2MtOWRlNi00MDdmLWI0NzktMTZmMGE5MGU0MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6SX9B2eOG2Yah2drlCj4wGmuB34RGHBh91p OzISdze1ZNggKQS/99UE65FXrdzG5GyqMo7LgauJkYkFLZaX+9YPSSKABNqxeZKZ C3vqh3CY0gfHLhyih1HchZZ0uALi/ejripV+hKZM0CF1Fdns5i1fheL1DHFbltE3 s9LMK6MPX7SU5vRmsRAAkY/6yGMvKXF6ScnscgZxJLCEWFwVX3PU7dgDC7ocEpvr 66EzWDGdgVbVW5tgaTYNdgeiKJtpFzM699tDPtxN5bLT4XfbxlkCRjFvDtbJw4/+ fEUlS7G6aZiWgUGFS4T4SkaxxA7XIgVafz+x8gl3ch3CfkYMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqngVnly3nbIeax4Le5gN8ABtv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWFmN2VmN2EtYmQ2YS0z Mjg0LTkxY2YtY2IzZGIyMjAwNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2bZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr4R9Xq649HbwAmfNAs3VJjUhViAgTxj1ioTyMEPN+HYF+9rj/WClND qWY6yrHOIZq079GGALrFYw8L9lV83wlkfSZeDxa8BHaUMNb5MkpVBNHcm7Zxm2R4 Yq4FOwByRMom54MtBcd0lWSF/4OrUfSJdypmbGKzH3U03CexE99xsdCyE3gv15Nh Oj09/TC5HAG62GTR0rMMkQi8exinq1u0Kjf8e32db/YenFU3V1rbsNI3CSimk4gc n8eTsT3o173AUWYNkV9tjwXN60MVM69nXuOzFUBib4dlyvEKv8VTXxmXMIIhNjH/ nQOLN0N1TF4lTB05b0GG0KjDOXERE/g= -----END CERTIFICATE-----Generated at Sun Oct 19 20:19:05 2025 by rpki-client