$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5bb7985-7692-3638-af38-64301ac9aded.roa File: d5bb7985-7692-3638-af38-64301ac9aded.roa (raw, json) Hash identifier: pgBj5hB5l0lRfCdpVrxgXfQrxonlLMFc2rngTdaXvQw= Subject key identifier: D5:D7:F3:AB:0A:8C:C7:DC:7B:88:FC:39:26:E6:D5:44:17:35:4C:45 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C593A309F6971E34EA58 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5bb7985-7692-3638-af38-64301ac9aded.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 15247 IP address blocks: 208.181.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c5:93:a3:09:f6:97:1e:34:ea:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=8ecc5116-fef9-4a49-b118-791f4afe227a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:29:e6:47:a2:91:15:05:23:5f:1f:2e:9e: 0f:66:42:44:7e:98:33:86:b3:0e:ef:33:5e:92:df: ce:4a:a8:6c:92:45:88:c1:ee:9c:d2:4e:09:f3:5f: 3b:7c:bf:41:da:85:1c:65:27:38:35:c1:67:14:19: 6a:e1:2a:dc:b4:a8:9f:ec:fd:f6:a7:87:ed:36:94: 65:c6:36:f1:94:21:82:f9:c7:4b:e3:04:95:ea:9b: a3:7a:7d:60:7d:79:61:a0:c2:7e:6b:b1:18:6b:52: 7d:e8:48:a6:49:6e:b1:e0:85:0d:8e:58:3d:12:65: 7c:9f:1d:28:1a:62:b4:7e:c7:8b:11:bd:1b:63:47: 2b:88:a8:39:82:1d:0f:6f:fe:05:0b:88:d8:fa:a7: e2:8a:5b:c9:38:9b:f9:7c:67:c2:1e:81:3f:f6:e9: 23:c4:00:df:58:b7:4a:db:dc:bc:cf:38:1f:4d:b5: ee:1d:77:4e:e2:39:9f:3e:a6:b1:41:91:02:09:5f: e8:d8:11:96:b4:fe:0b:31:e2:bc:17:c0:50:0d:10: e8:87:aa:e0:f3:a6:08:cf:5f:a1:1a:95:86:2b:4f: 3f:03:7c:10:81:d1:3f:4a:82:d6:82:5c:d3:4f:87: 6a:a2:41:ca:45:9c:1c:fe:52:5b:9c:cb:3f:36:45: 69:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D7:F3:AB:0A:8C:C7:DC:7B:88:FC:39:26:E6:D5:44:17:35:4C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d5bb7985-7692-3638-af38-64301ac9aded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:d3:06:98:18:f6:20:bd:92:89:94:1c:5c:10:28:92:05:cb: 49:45:67:18:8e:dd:0c:78:de:ef:aa:a6:fd:af:65:c1:ae:52: 75:8d:ef:0c:f6:b1:3f:42:f0:14:ca:05:13:d7:ef:2a:d1:00: 35:60:18:fa:d7:ee:c7:95:a2:06:ee:c3:22:ed:49:a3:46:fd: d6:f1:50:f2:09:7b:ce:0f:d6:80:89:11:3e:39:cc:8d:af:cd: e3:b6:79:7c:34:d7:6b:0c:4e:a0:14:9d:df:91:28:fe:84:14: 1c:1a:fc:51:c7:6b:1a:5d:57:b5:32:28:d2:a9:8c:5b:72:c6: 3b:74:7f:1e:83:63:ae:b8:f2:68:37:d5:7e:28:ea:44:d1:8e: e7:41:8d:e6:e5:d6:1b:33:5d:66:a2:16:a3:db:61:f0:f1:3c: a8:91:e3:98:a2:9b:84:7a:30:91:a2:10:93:11:21:a3:b1:a2: af:27:16:b4:bb:bd:4c:77:df:60:7c:b0:a9:f9:de:40:0b:b9: 78:3a:04:d5:df:35:aa:33:25:99:0f:9e:b0:98:5d:a7:cb:e0: 12:7c:bf:cc:54:4c:75:7d:9d:a0:5a:98:02:71:36:50:ac:a4: e8:e8:2f:e5:e0:26:fe:88:c5:4d:9f:e7:66:1a:d5:08:7f:83: 37:fe:2b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcWTown2lx406lgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk OGVjYzUxMTYtZmVmOS00YTQ5LWIxMTgtNzkxZjRhZmUyMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt90p5keikRUFI18fLp4PZkJEfpgzhrMO7zNe kt/OSqhskkWIwe6c0k4J8187fL9B2oUcZSc4NcFnFBlq4SrctKif7P32p4ftNpRl xjbxlCGC+cdL4wSV6pujen1gfXlhoMJ+a7EYa1J96EimSW6x4IUNjlg9EmV8nx0o GmK0fseLEb0bY0criKg5gh0Pb/4FC4jY+qfiilvJOJv5fGfCHoE/9ukjxADfWLdK 29y8zzgfTbXuHXdO4jmfPqaxQZECCV/o2BGWtP4LMeK8F8BQDRDoh6rg86YIz1+h GpWGK08/A3wQgdE/SoLWglzTT4dqokHKRZwc/lJbnMs/NkVpSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXX86sKjMfce4j8OSbm1UQXNUxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDViYjc5ODUtNzY5Mi0z NjM4LWFmMzgtNjQzMDFhYzlhZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXTBpgY9iC9komUHFwQKJIFy0lFZxiO3Qx43u+qpv2vZcGuUnWN7wz2 sT9C8BTKBRPX7yrRADVgGPrX7seVogbuwyLtSaNG/dbxUPIJe84P1oCJET45zI2v zeO2eXw012sMTqAUnd+RKP6EFBwa/FHHaxpdV7UyKNKpjFtyxjt0fx6DY6648mg3 1X4o6kTRjudBjebl1hszXWaiFqPbYfDxPKiR45iim4R6MJGiEJMRIaOxoq8nFrS7 vUx332B8sKn53kALuXg6BNXfNaozJZkPnrCYXafL4BJ8v8xUTHV9naBamAJxNlCs pOjoL+XgJv6IxU2f52Ya1Qh/gzf+K+w= -----END CERTIFICATE-----Generated at Sun Oct 19 22:46:18 2025 by rpki-client