$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa File: d38fbc1c-f507-303b-b2a2-33a124b143ca.roa (raw, json) Hash identifier: m5KhkUJDNTUf1mrmJPmf5sTGFCcCMdf1HpM4x9IfveE= Subject key identifier: E4:50:AE:4C:BB:23:07:0B:C7:6F:4C:BD:41:98:D6:23:B1:29:91:5C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5DD1DDF275B589A24FC06540 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 852 IP address blocks: 216.232.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:dd:f2:75:b5:89:a2:4f:c0:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=068669d1-ed7b-4f6b-ac3f-725aa41c1266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:74:e0:de:c0:52:2c:1e:1b:07:ff:6b:09:41: e2:b4:f0:e3:a0:e9:b8:db:31:21:49:90:ac:20:70: 2e:34:b7:b0:02:f0:7a:be:b6:af:fe:9d:24:31:5a: b8:1f:df:91:e3:77:f7:09:4a:02:08:ac:41:7e:43: 1c:62:06:0b:77:08:82:8a:29:4c:0c:1b:70:b3:a1: ca:c9:3d:f8:61:6c:61:17:ca:b0:8d:0c:45:f8:8a: 96:91:1c:25:e4:7e:41:70:5f:15:13:ee:bc:7b:d7: 16:53:bd:9c:c8:1f:e6:32:94:f5:f5:5b:10:76:97: b8:5a:a3:0a:02:e6:f9:e1:a2:28:6d:15:2f:25:23: a2:d9:0b:0b:61:33:09:67:81:96:e9:47:0b:cf:b7: 1d:65:ee:25:ce:b2:5a:31:32:77:a0:66:f6:30:e6: f3:95:99:bb:a2:e2:f6:6d:70:ff:22:15:16:d5:45: dd:6c:79:f0:fb:b3:86:68:45:79:90:1f:4b:67:ce: ad:b5:ee:53:ff:a5:75:14:a7:84:3b:04:ca:23:80: 12:e8:f6:6f:17:4f:28:7f:8f:e3:d7:82:95:b6:2a: 20:bc:73:b0:a6:cb:bf:9f:d3:4c:66:0c:db:f2:b6: c8:8f:e0:4c:0a:70:dd:33:ee:0a:2e:a2:0c:35:d0: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:AE:4C:BB:23:07:0B:C7:6F:4C:BD:41:98:D6:23:B1:29:91:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d38fbc1c-f507-303b-b2a2-33a124b143ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.232.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:aa:97:64:08:45:21:48:7b:8c:0d:ef:e5:22:66:ca:cd:93: 6e:ff:8c:f6:ea:d3:a8:41:14:ad:7d:a0:af:f9:e5:89:c4:29: 2d:3d:c4:7c:c6:07:ee:46:17:05:4b:14:d8:7f:e9:b6:8d:85: 1a:73:e2:da:53:90:28:57:5a:b6:9c:03:fa:10:92:f1:06:9d: 11:b1:e9:5f:7c:75:f5:d5:a6:4f:9a:47:70:3e:f0:0f:75:ae: df:71:e3:ed:de:1a:92:7f:10:91:da:10:14:6e:07:b5:6c:07: 88:b5:a6:02:e9:0a:43:4d:ad:98:b1:b0:8e:d6:b0:27:b8:72: 2d:1c:3a:25:cf:83:d4:79:21:42:9f:76:7f:83:d5:c8:67:98: f0:2d:44:45:80:bd:86:e4:8b:eb:5c:da:b6:0e:b5:8f:5a:03: 59:88:a0:08:ff:f4:f3:a1:60:c9:1e:46:9e:2d:dd:df:0a:f7: 22:81:4a:7a:90:9e:f0:21:6d:6d:38:ff:d3:b9:04:06:ef:f6: eb:f7:e5:04:4b:47:b3:62:7b:c5:43:b6:f8:19:66:91:7f:f6: 3e:8e:28:ba:2b:c2:8c:68:d1:22:12:a0:e4:b1:8b:98:34:36: f0:c9:6a:85:31:4c:b6:d1:a7:56:60:01:b3:ea:b3:85:64:97: 2f:31:13:b1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtd0d3ydbWJok/AZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MDY4NjY5ZDEtZWQ3Yi00ZjZiLWFjM2YtNzI1YWE0MWMxMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XTg3sBSLB4bB/9rCUHitPDjoOm42zEhSZCs IHAuNLewAvB6vrav/p0kMVq4H9+R43f3CUoCCKxBfkMcYgYLdwiCiilMDBtws6HK yT34YWxhF8qwjQxF+IqWkRwl5H5BcF8VE+68e9cWU72cyB/mMpT19VsQdpe4WqMK Aub54aIobRUvJSOi2QsLYTMJZ4GW6UcLz7cdZe4lzrJaMTJ3oGb2MObzlZm7ouL2 bXD/IhUW1UXdbHnw+7OGaEV5kB9LZ86tte5T/6V1FKeEOwTKI4AS6PZvF08of4/j 14KVtiogvHOwpsu/n9NMZgzb8rbIj+BMCnDdM+4KLqIMNdAhWQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFORQrky7IwcLx29MvUGY1iOxKZFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDM4ZmJjMWMtZjUwNy0z MDNiLWIyYTItMzNhMTI0YjE0M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2OgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAR6qXZAhFIUh7jA3v5SJmys2Tbv+M9urTqEEUrX2gr/nlicQpLT3EfMYH 7kYXBUsU2H/pto2FGnPi2lOQKFdatpwD+hCS8QadEbHpX3x19dWmT5pHcD7wD3Wu 33Hj7d4akn8QkdoQFG4HtWwHiLWmAukKQ02tmLGwjtawJ7hyLRw6Jc+D1HkhQp92 f4PVyGeY8C1ERYC9huSL61zatg61j1oDWYigCP/086FgyR5Gni3d3wr3IoFKepCe 8CFtbTj/07kEBu/26/flBEtHs2J7xUO2+BlmkX/2Po4ouivCjGjRIhKg5LGLmDQ2 8MlqhTFMttGnVmABs+qzhWSXLzETsQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:59 2025 by rpki-client