$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa File: d8250a82-42c8-3463-b657-35c42e18025c.roa (raw, json) Hash identifier: 7FhfEOwfZvc2tByKMoyNYYHZxcXaAZnBHwbP+DtdXVU= Subject key identifier: 46:19:E2:83:D4:21:F0:8B:72:13:90:43:D1:9B:0D:68:1E:1A:20:81 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D7F1FB283205B35DEFE0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 207.194.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d7:f1:fb:28:32:05:b3:5d:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=9b435f45-888b-4414-bbe2-d2914617ece5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:30:3a:a2:3f:2e:89:5f:f7:82:fc:ef:73: a2:0e:07:f8:7d:c1:1d:00:78:9d:aa:99:6d:bd:54: a0:1d:2a:29:ed:11:7c:4c:54:95:08:d7:26:0a:ff: ae:f5:3e:3f:84:c1:da:77:00:40:cb:a3:02:8c:2f: 36:f8:97:57:ca:f7:66:38:3f:8d:64:2f:90:00:da: 62:5e:4e:4b:b5:71:3e:c2:9f:36:7a:28:f5:35:76: eb:a6:5d:92:8b:1a:52:3c:67:8a:9b:30:20:2a:33: e8:36:62:97:92:1f:3d:97:1b:7b:19:4c:26:8b:a7: 7c:df:1a:f7:f3:f5:d2:d0:2b:c1:37:5b:44:e0:35: 27:38:72:97:dd:23:b9:aa:96:24:ca:e9:70:b9:33: a2:98:52:5f:a2:78:64:6d:1b:f3:d0:26:fe:98:de: a9:1a:bf:bd:44:0a:f8:d8:e1:49:b5:12:9c:2c:b3: bc:3d:87:89:b0:e7:6f:aa:ed:23:22:2a:86:d2:30: 22:4c:c0:dd:47:58:9b:56:23:8e:71:ed:b1:59:e3: a8:35:dc:f0:6a:83:88:37:59:3b:28:e3:1d:ff:86: 31:5a:28:06:a2:4f:b0:76:71:f2:21:a6:7a:ee:21: 2e:d9:4f:a2:e1:ae:a0:e8:71:d7:95:39:a6:01:ad: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:19:E2:83:D4:21:F0:8B:72:13:90:43:D1:9B:0D:68:1E:1A:20:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d8250a82-42c8-3463-b657-35c42e18025c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:71:64:61:e7:28:51:bb:a1:65:40:0c:94:16:49:e9:35:f8: 76:aa:eb:4a:fb:90:f7:6f:a4:9e:f1:ac:b3:b1:61:2c:42:5f: 9d:52:20:d5:c9:42:19:98:39:ed:67:4e:bc:42:3d:35:56:91: 31:fa:9d:88:48:02:c8:dd:dc:25:30:e9:72:35:53:0b:7a:7e: 56:ec:6c:8b:c3:88:94:86:8b:d4:ff:e7:0a:29:81:77:60:80: e7:e5:7d:6c:2e:3f:3d:df:10:1c:b2:a3:99:71:fb:dc:e6:52: ac:9b:a8:56:7b:81:7a:3b:1c:51:8f:2a:ae:8a:38:65:c6:6d: ec:ac:71:99:df:be:c1:1b:79:a8:fd:97:1f:5b:99:47:e3:da: 5d:56:ea:41:69:ab:ed:52:09:ac:2e:1d:d7:fe:c2:be:74:c5: 07:9f:81:0c:db:81:af:a1:ef:45:f4:ab:e2:a8:96:27:0a:58: c1:2c:e4:85:3d:f8:47:66:87:d0:69:bf:72:8e:8e:8c:53:cc: 0f:a0:f6:62:67:ca:b9:08:38:17:cd:b7:3a:8f:03:f4:6c:a8: 08:f8:19:45:50:dc:e8:d2:9d:09:74:de:40:07:9b:89:74:b0: 75:97:bb:3d:d5:e9:b3:bc:ee:c1:71:ac:31:7b:44:b0:59:7e: 7a:00:52:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdfx+ygyBbNd7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk OWI0MzVmNDUtODg4Yi00NDE0LWJiZTItZDI5MTQ2MTdlY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+wwOqI/Lolf94L873OiDgf4fcEdAHidqplt vVSgHSop7RF8TFSVCNcmCv+u9T4/hMHadwBAy6MCjC82+JdXyvdmOD+NZC+QANpi Xk5LtXE+wp82eij1NXbrpl2SixpSPGeKmzAgKjPoNmKXkh89lxt7GUwmi6d83xr3 8/XS0CvBN1tE4DUnOHKX3SO5qpYkyulwuTOimFJfonhkbRvz0Cb+mN6pGr+9RAr4 2OFJtRKcLLO8PYeJsOdvqu0jIiqG0jAiTMDdR1ibViOOce2xWeOoNdzwaoOIN1k7 KOMd/4YxWigGok+wdnHyIaZ67iEu2U+i4a6g6HHXlTmmAa2V5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYZ4oPUIfCLchOQQ9GbDWgeGiCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDgyNTBhODItNDJjOC0z NDYzLWI2NTctMzVjNDJlMTgwMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8KmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtxZGHnKFG7oWVADJQWSek1+Haq60r7kPdvpJ7xrLOxYSxCX51SINXJ QhmYOe1nTrxCPTVWkTH6nYhIAsjd3CUw6XI1Uwt6flbsbIvDiJSGi9T/5wopgXdg gOflfWwuPz3fEByyo5lx+9zmUqybqFZ7gXo7HFGPKq6KOGXGbeyscZnfvsEbeaj9 lx9bmUfj2l1W6kFpq+1SCawuHdf+wr50xQefgQzbga+h70X0q+KolicKWMEs5IU9 +Edmh9Bpv3KOjoxTzA+g9mJnyrkIOBfNtzqPA/RsqAj4GUVQ3OjSnQl03kAHm4l0 sHWXuz3V6bO87sFxrDF7RLBZfnoAUtg= -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:49 2025 by rpki-client