$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8d88adc-2ef2-37c9-84f6-0434b5516e76.roa File: c8d88adc-2ef2-37c9-84f6-0434b5516e76.roa (raw, json) Hash identifier: 5EDo/CcSbxIg2EIGpjts4B2DAZKttmULwa6RXdpfub0= Subject key identifier: D6:DE:A6:A8:B6:DE:9B:1D:52:14:05:BA:A9:B9:A0:77:B0:7E:61:25 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D205B7463D7D82D33080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8d88adc-2ef2-37c9-84f6-0434b5516e76.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 205.206.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d2:05:b7:46:3d:7d:82:d3:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=e412df7a-8456-4e20-b30a-5b81c4ef8943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:f8:27:c1:ee:34:4f:84:2d:f8:25:d0:f8: a9:6c:1a:e0:65:4b:94:be:de:8f:6d:ee:88:a9:ad: 6a:e3:ac:57:0a:e7:33:8b:c6:f2:e9:4b:c8:81:c0: 92:b3:24:8b:12:77:bf:d1:78:bd:a2:d8:78:eb:22: a3:a4:ad:3d:1a:3e:fc:17:b6:71:af:08:84:b9:b4: 66:6f:ea:2d:af:40:40:06:b3:4a:5d:52:32:36:b7: 7f:89:87:1d:0f:c0:50:97:18:e4:b4:34:dd:b7:95: 21:e5:cc:9b:52:fb:c5:92:75:e7:cb:cf:61:68:0e: 6f:ba:dc:6e:74:ce:9b:c7:a4:b5:b3:7c:0c:82:0e: ee:1b:3f:33:03:04:66:d2:b2:57:ef:3e:ae:b2:fe: 74:fc:f7:2b:1c:59:50:54:a2:75:b8:63:93:05:e4: 4b:ac:4f:69:06:3c:4a:50:68:d7:56:11:58:c0:fb: 9e:76:66:cb:14:50:c7:62:2b:cc:d9:51:c9:b1:17: e6:3c:55:d1:f2:4a:fb:37:a8:c9:48:cf:9b:19:95: 33:15:e6:a7:d1:95:5b:12:3d:39:49:ff:0e:89:91: c5:94:eb:8b:8c:3b:2d:81:bc:eb:54:cd:a0:28:26: 37:a0:24:21:6a:0c:79:ad:d2:36:bc:ab:c1:94:3b: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DE:A6:A8:B6:DE:9B:1D:52:14:05:BA:A9:B9:A0:77:B0:7E:61:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8d88adc-2ef2-37c9-84f6-0434b5516e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 205.206.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c8:16:2d:3a:5f:74:04:83:23:4a:89:c6:74:a4:d7:8b:5a: 2b:6f:55:ec:32:78:81:13:04:07:39:7d:b6:f6:05:a2:8a:dc: a7:30:c4:06:ec:af:24:ef:ba:58:88:79:0b:a3:5b:6d:5a:23: ee:71:1a:f9:be:0e:05:55:7f:63:16:f6:cf:97:31:d6:1e:04: a7:03:02:b9:17:fc:11:22:39:1f:90:c3:e5:d4:80:4f:69:b7: 06:74:3e:da:4a:0d:93:b0:2e:ff:cc:bc:d4:7b:5d:56:8b:90: 79:0d:bc:d7:29:db:cb:df:21:8a:80:c1:e7:25:9c:cd:35:5b: f8:f7:a8:59:75:be:67:a8:6b:ff:da:09:13:7d:08:bc:b8:07: c0:8c:4b:ac:2d:a9:aa:1c:ba:a5:9f:ed:61:dd:96:77:76:c4: dd:9a:13:0c:64:2b:01:41:05:52:c0:3c:f7:3c:c6:fc:33:4d: 2a:b4:2c:aa:5a:93:49:ee:d8:6b:82:df:04:43:a1:78:c2:9c: ea:9e:cd:ff:0b:4d:4d:aa:59:b3:cd:0b:dd:8f:b5:52:96:c3: fd:1c:e2:ce:ed:db:f1:d4:27:1a:7b:0e:31:78:e3:05:6a:b8: 64:90:ba:31:99:27:29:9c:fa:a3:08:76:26:49:83:04:c5:55: a7:35:73:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdIFt0Y9fYLTMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTQxMmRmN2EtODQ1Ni00ZTIwLWIzMGEtNWI4MWM0ZWY4OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohD4J8HuNE+ELfgl0PipbBrgZUuUvt6Pbe6I qa1q46xXCuczi8by6UvIgcCSsySLEne/0Xi9oth46yKjpK09Gj78F7ZxrwiEubRm b+otr0BABrNKXVIyNrd/iYcdD8BQlxjktDTdt5Uh5cybUvvFknXny89haA5vutxu dM6bx6S1s3wMgg7uGz8zAwRm0rJX7z6usv50/PcrHFlQVKJ1uGOTBeRLrE9pBjxK UGjXVhFYwPuedmbLFFDHYivM2VHJsRfmPFXR8kr7N6jJSM+bGZUzFean0ZVbEj05 Sf8OiZHFlOuLjDstgbzrVM2gKCY3oCQhagx5rdI2vKvBlDtj8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbepqi23psdUhQFuqm5oHewfmElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzhkODhhZGMtMmVmMi0z N2M5LTg0ZjYtMDQzNGI1NTE2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc5BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDIFi06X3QEgyNKicZ0pNeLWitvVewyeIETBAc5fbb2BaKK3KcwxAbs ryTvuliIeQujW21aI+5xGvm+DgVVf2MW9s+XMdYeBKcDArkX/BEiOR+Qw+XUgE9p twZ0PtpKDZOwLv/MvNR7XVaLkHkNvNcp28vfIYqAweclnM01W/j3qFl1vmeoa//a CRN9CLy4B8CMS6wtqaocuqWf7WHdlnd2xN2aEwxkKwFBBVLAPPc8xvwzTSq0LKpa k0nu2GuC3wRDoXjCnOqezf8LTU2qWbPNC92PtVKWw/0c4s7t2/HUJxp7DjF44wVq uGSQujGZJymc+qMIdiZJgwTFVac1c1k= -----END CERTIFICATE-----Generated at Tue Oct 21 02:07:49 2025 by rpki-client