$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b34847e8-e932-39e6-85ba-34422a1c5e83.roa File: b34847e8-e932-39e6-85ba-34422a1c5e83.roa (raw, json) Hash identifier: lVESbqmQMjRPIR5MWLikV4JebBJ83BHntyx0r/y16KM= Subject key identifier: F3:5D:53:CB:7D:37:F0:D1:66:C5:BF:43:65:58:C1:AE:71:BF:C0:D8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B6D2CB8E694539017CF188500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b34847e8-e932-39e6-85ba-34422a1c5e83.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 46772 IP address blocks: 68.182.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b8:e6:94:53:90:17:cf:18:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=4af2cf75-1d0a-4bf9-a97b-265cb55902c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:99:dd:e8:66:76:67:a9:ba:1b:55:c5:cf:c4: 58:ac:21:02:44:1a:fd:37:84:de:8f:60:a2:0e:b4: f1:4e:bd:67:48:5f:b0:fb:2b:3a:2d:fc:c6:a3:7f: 35:f6:d5:cf:cf:1c:4e:01:08:9d:b3:50:ba:b0:a2: a7:c3:e4:20:2b:65:f1:10:d9:19:4e:92:a4:e1:9b: 72:50:4c:ad:1c:f9:8c:c1:80:23:d4:df:7c:86:59: 51:93:23:95:77:e9:18:7c:b4:4f:50:4b:cc:76:b0: 5d:73:c4:63:b8:aa:35:97:8c:e8:f1:42:d1:57:29: de:7e:96:6b:86:e5:8f:e6:ad:ec:e8:b4:a7:bc:2c: 7e:6f:e7:e5:99:ff:b1:77:73:36:2d:b2:56:b1:95: 01:3a:ea:ed:8f:64:b7:a4:6a:3f:dc:a2:b3:bf:33: 61:50:84:5e:9e:fa:6f:23:37:08:78:7b:b7:80:d7: 43:97:9f:92:cf:b5:99:86:0a:b4:bf:b7:11:e6:78: 92:55:50:7a:d1:8d:f0:de:cd:cd:9a:75:a3:5a:9c: ec:83:9e:d1:3f:d8:2f:cb:5e:57:52:e6:fc:19:07: da:a5:06:6b:5b:31:88:66:cf:8c:e9:a9:e0:55:87: c7:b7:58:15:d1:b3:5d:27:88:7e:d4:47:fc:1b:6b: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5D:53:CB:7D:37:F0:D1:66:C5:BF:43:65:58:C1:AE:71:BF:C0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b34847e8-e932-39e6-85ba-34422a1c5e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:20:e6:04:3f:86:53:26:cb:05:d7:03:40:cf:c6:34:ed:80: 9f:fa:53:f8:30:03:aa:ec:db:95:68:b7:06:6c:07:50:ed:61: 94:3b:cd:08:74:24:c5:2b:43:83:38:23:96:53:77:7d:1a:bc: f4:39:f6:da:d7:87:a3:69:67:50:41:64:a8:e4:1d:fa:28:7d: 03:63:ee:75:cc:66:e0:9e:32:41:3f:63:58:52:61:13:fb:15: 14:07:0b:07:c1:67:f6:54:a2:96:39:57:c1:0b:92:0a:bc:c5: 7e:f9:7c:98:e7:94:3b:3f:74:e4:f8:ee:00:80:15:09:b0:76: e9:a6:00:18:5a:f3:79:65:7b:0e:aa:36:99:81:d7:99:9a:cb: fc:3f:ed:68:4c:10:e3:9e:b6:a5:b6:83:61:85:65:42:5c:30: 84:c6:88:6c:ea:cd:0f:48:b4:7d:03:69:86:85:19:17:09:c4: ca:90:46:3d:de:ae:29:b6:c4:3f:fe:71:fb:16:3c:e3:aa:97: ca:a0:c3:73:84:92:1e:3c:09:da:cb:af:97:80:1f:fb:d1:2c: 77:dd:3e:95:2c:37:03:cf:4f:45:2c:04:6c:f7:ea:16:e8:7b: 01:c2:9f:a0:6d:41:69:a4:54:e1:18:68:36:b8:8b:45:c7:42: 12:72:5f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLLjmlFOQF88YhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGFmMmNmNzUtMWQwYS00YmY5LWE5N2ItMjY1Y2I1NTkwMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJnd6GZ2Z6m6G1XFz8RYrCECRBr9N4Tej2Ci DrTxTr1nSF+w+ys6LfzGo3819tXPzxxOAQids1C6sKKnw+QgK2XxENkZTpKk4Zty UEytHPmMwYAj1N98hllRkyOVd+kYfLRPUEvMdrBdc8RjuKo1l4zo8ULRVynefpZr huWP5q3s6LSnvCx+b+flmf+xd3M2LbJWsZUBOurtj2S3pGo/3KKzvzNhUIRenvpv IzcIeHu3gNdDl5+Sz7WZhgq0v7cR5niSVVB60Y3w3s3NmnWjWpzsg57RP9gvy15X Uub8GQfapQZrWzGIZs+M6angVYfHt1gV0bNdJ4h+1Ef8G2sUIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNdU8t9N/DRZsW/Q2VYwa5xv8DYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjM0ODQ3ZTgtZTkzMi0z OWU2LTg1YmEtMzQ0MjJhMWM1ZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAg5gQ/hlMmywXXA0DPxjTtgJ/6U/gwA6rs25VotwZsB1DtYZQ7zQh0 JMUrQ4M4I5ZTd30avPQ59trXh6NpZ1BBZKjkHfoofQNj7nXMZuCeMkE/Y1hSYRP7 FRQHCwfBZ/ZUopY5V8ELkgq8xX75fJjnlDs/dOT47gCAFQmwdummABha83llew6q NpmB15may/w/7WhMEOOetqW2g2GFZUJcMITGiGzqzQ9ItH0DaYaFGRcJxMqQRj3e rim2xD/+cfsWPOOql8qgw3OEkh48CdrLr5eAH/vRLHfdPpUsNwPPT0UsBGz36hbo ewHCn6BtQWmkVOEYaDa4i0XHQhJyX6Q= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:44 2025 by rpki-client