$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa File: cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa (raw, json) Hash identifier: j1vaOhOPwnhI2QqRkURCXppjC2Le6ArazbNiW0PKmGo= Subject key identifier: 43:F7:C4:2C:B1:9D:12:AF:B4:46:8D:73:EA:3D:AA:2F:C0:E9:17:D5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11CD2DC838B38F04539A40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 14908 IP address blocks: 216.226.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:cd:2d:c8:38:b3:8f:04:53:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=f9ff948e-c888-4a19-bff9-44e83292450c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:77:10:ad:e3:1b:9e:53:92:61:cd:4e:11:c4: 1b:10:b9:1d:75:29:14:3f:82:7c:5d:93:7d:18:cf: 40:b7:30:dd:5b:b6:14:e8:74:ce:27:bd:2e:f3:25: 5c:b0:72:3d:f9:55:b5:b0:97:44:99:78:55:95:bc: 93:29:05:f8:c0:c3:cc:ac:7a:97:c0:9e:da:78:d4: 17:a0:5a:3d:c8:c2:6a:6a:e3:c2:3e:ba:64:0d:18: 0a:21:6b:1b:6f:0c:f5:35:08:f1:47:b1:96:e9:14: 23:90:fc:2e:42:64:3d:17:99:74:7d:1e:02:01:f5: 4d:ba:65:2b:51:ab:ef:e6:61:db:14:f8:48:fa:53: 9a:13:16:83:b3:01:53:d1:74:51:8b:6d:77:bb:6f: 60:83:9e:22:51:53:3d:6a:4a:73:0b:20:e1:96:b8: 93:9d:9d:e5:f2:e7:c7:fb:56:6a:68:a4:53:36:24: 8e:92:0f:ba:72:0b:d8:ca:fa:d5:0d:cf:93:72:8f: 26:a0:62:12:3b:97:b8:79:ab:2d:06:42:7c:33:bd: 82:6d:f4:07:d0:62:97:f4:6f:8e:97:3f:28:4a:47: 37:b9:50:5e:69:d9:94:01:d8:3a:5a:4b:d9:68:38: f1:99:d3:06:58:79:41:cf:e6:fd:d7:71:bd:cc:29: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:C4:2C:B1:9D:12:AF:B4:46:8D:73:EA:3D:AA:2F:C0:E9:17:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.226.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ec:4d:b6:c7:c6:e9:92:7c:3f:ce:34:2a:6f:2a:2d:13:d1:5d: b4:24:cc:f4:96:01:0c:92:f8:0d:97:81:78:b9:7a:9b:db:40: 99:52:34:91:72:05:26:2d:81:85:c7:17:1e:ae:52:31:78:57: 94:14:06:c6:ad:ae:66:84:9c:f0:d8:5a:34:13:d2:0a:0b:8b: cd:01:9f:37:2a:ec:1b:53:25:2f:fc:97:bc:4a:ec:78:7e:6b: 22:a5:e2:a4:1f:16:90:60:70:16:35:52:e6:4d:00:f9:98:1a: 82:39:e0:76:89:03:5a:40:5b:cb:51:21:ca:d0:fc:08:e9:88: 26:86:cd:2d:c4:b2:b5:85:41:99:55:9d:1e:e7:0c:65:dc:c2: 23:54:e0:f6:28:69:f0:2b:cb:84:21:f7:15:ed:b4:da:dc:1e: 07:74:3c:26:a1:95:6b:40:fd:b6:46:bf:23:8c:24:74:8e:64: 79:b0:5c:1f:e3:c8:c4:8d:ea:ae:b8:8f:d9:39:4a:24:7f:fc: 25:d5:a3:3b:4e:5a:5a:95:6e:1f:47:09:e9:88:0b:6b:f3:99: 45:5c:0e:e9:bf:33:43:4b:94:16:24:47:9a:0a:87:ba:c7:f5: 8d:b3:6f:d3:03:18:68:ea:90:4e:57:73:9e:f0:3d:72:19:8d: 33:36:fa:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEc0tyDizjwRTmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZjlmZjk0OGUtYzg4OC00YTE5LWJmZjktNDRlODMyOTI0NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HcQreMbnlOSYc1OEcQbELkddSkUP4J8XZN9 GM9AtzDdW7YU6HTOJ70u8yVcsHI9+VW1sJdEmXhVlbyTKQX4wMPMrHqXwJ7aeNQX oFo9yMJqauPCPrpkDRgKIWsbbwz1NQjxR7GW6RQjkPwuQmQ9F5l0fR4CAfVNumUr Uavv5mHbFPhI+lOaExaDswFT0XRRi213u29gg54iUVM9akpzCyDhlriTnZ3l8ufH +1ZqaKRTNiSOkg+6cgvYyvrVDc+Tco8moGISO5e4eastBkJ8M72CbfQH0GKX9G+O lz8oSkc3uVBeadmUAdg6WkvZaDjxmdMGWHlBz+b913G9zCkEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP3xCyxnRKvtEaNc+o9qi/A6RfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1YzJiMWYtN2MzOS0z OWU3LTg3MjEtZjk5YWU0MTlhMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OIyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOxNtsfG6ZJ8P840Km8qLRPRXbQkzPSWAQyS+A2XgXi5epvbQJlSNJFy BSYtgYXHFx6uUjF4V5QUBsatrmaEnPDYWjQT0goLi80Bnzcq7BtTJS/8l7xK7Hh+ ayKl4qQfFpBgcBY1UuZNAPmYGoI54HaJA1pAW8tRIcrQ/AjpiCaGzS3EsrWFQZlV nR7nDGXcwiNU4PYoafAry4Qh9xXttNrcHgd0PCahlWtA/bZGvyOMJHSOZHmwXB/j yMSN6q64j9k5SiR//CXVoztOWlqVbh9HCemIC2vzmUVcDum/M0NLlBYkR5oKh7rH 9Y2zb9MDGGjqkE5Xc57wPXIZjTM2+hQ= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:11 2025 by rpki-client