$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa File: dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa (raw, json) Hash identifier: gRe8XHzM9dHzM5aRZNBHr5FHXFBxp7pj4wTp7O2Ijzo= Subject key identifier: 78:4D:6B:0F:21:D2:0A:93:95:B7:58:E0:99:23:EF:FC:B7:D8:C0:56 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C31512E1D8DB9BF2B080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 21723 IP address blocks: 208.181.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c3:15:12:e1:d8:db:9b:f2:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=ecb1e046-876b-4621-a129-cc0ed0c0c513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:69:f7:d8:45:67:22:e2:39:a9:29:6c:17: 71:9d:94:42:fd:fc:94:86:85:4d:cc:9e:43:0f:28: 6c:29:a3:f5:3a:82:4a:44:a0:75:7c:51:6e:41:68: ff:24:a0:f9:e6:30:f1:8f:83:8c:0c:88:17:d6:11: d6:36:67:21:b1:8a:c4:cd:4e:55:06:f0:d0:f4:e3: 15:4a:35:6f:db:0a:93:8a:c2:fc:73:91:7a:1c:cc: d4:af:fd:8b:46:f6:e7:ed:cb:4b:b8:88:fe:2e:3a: 39:18:12:9d:df:20:31:30:16:3c:e8:9e:68:b2:fa: 34:87:e9:d2:54:8d:3f:e3:2d:e7:73:a4:c8:f9:9e: d8:d7:5e:7d:2e:a0:e6:bf:c8:9f:99:bd:a7:98:c1: cc:5f:0d:d2:06:16:54:f3:29:be:53:77:20:7f:89: 55:6b:4a:2f:47:f1:36:fe:0e:12:b4:bd:2d:7b:38: 79:bc:3f:e9:91:0a:e0:ba:29:ed:13:2b:f3:a7:50: 40:fe:bd:b4:46:25:b3:4e:05:f2:7c:1f:cb:26:b0: 5b:bd:a3:ee:88:1b:99:db:5e:5c:c6:56:1f:90:4e: 2e:95:fa:62:29:3c:5b:a6:4c:79:51:c2:4e:b6:93: 6e:85:d5:9a:26:2b:c1:0b:0c:e1:19:f4:3f:2e:ea: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4D:6B:0F:21:D2:0A:93:95:B7:58:E0:99:23:EF:FC:B7:D8:C0:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fc:b3:b6:4e:21:e9:c9:e6:54:f3:c5:e3:d6:5b:5e:13:16: 2f:5b:d7:b3:f0:5a:a2:a8:cd:96:97:dd:5e:40:ec:76:f2:2b: 3a:df:3c:a5:33:30:a6:f1:d5:0e:38:bb:a2:ce:c4:b7:55:f6: a9:96:95:46:a5:b4:64:7f:5c:dd:c7:bf:8a:ce:cd:86:c1:6f: 0e:97:3e:93:45:a1:ca:f1:e8:e9:5e:ac:18:38:bb:5f:e1:1e: 35:a6:17:e4:3c:06:6d:e1:4f:1c:6a:21:ba:a6:6a:27:87:74: b2:35:85:d1:80:47:37:ec:a7:f9:dc:56:3e:f2:70:00:f4:56: 46:c0:52:28:5c:ca:d6:80:0f:18:b9:a4:d4:b1:df:51:61:a1: 35:c0:19:41:c9:dd:ae:c0:64:0e:14:79:f8:44:9c:9a:7a:cc: 99:fb:e6:27:0c:73:0d:90:e2:46:8a:fb:09:6e:1b:a5:ae:1a: ef:d7:60:a2:65:3d:d7:3a:d3:0a:db:9a:1c:05:0f:a4:86:2f: 00:8a:4a:24:95:25:71:1c:5a:d9:25:a7:7a:cf:e0:1a:4f:61: 70:38:e9:f3:37:d1:9b:00:e5:98:85:37:ab:c8:ea:48:cf:6b: 50:04:fd:9b:08:50:5a:45:5c:42:60:6e:09:13:ce:14:f5:4d: 29:82:d8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcMVEuHY25vysIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZWNiMWUwNDYtODc2Yi00NjIxLWExMjktY2MwZWQwYzBjNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns5p99hFZyLiOakpbBdxnZRC/fyUhoVNzJ5D DyhsKaP1OoJKRKB1fFFuQWj/JKD55jDxj4OMDIgX1hHWNmchsYrEzU5VBvDQ9OMV SjVv2wqTisL8c5F6HMzUr/2LRvbn7ctLuIj+Ljo5GBKd3yAxMBY86J5osvo0h+nS VI0/4y3nc6TI+Z7Y1159LqDmv8ifmb2nmMHMXw3SBhZU8ym+U3cgf4lVa0ovR/E2 /g4StL0tezh5vD/pkQrguintEyvzp1BA/r20RiWzTgXyfB/LJrBbvaPuiBuZ215c xlYfkE4ulfpiKTxbpkx5UcJOtpNuhdWaJivBCwzhGfQ/LuqVsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhNaw8h0gqTlbdY4Jkj7/y32MBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGMyNTJlNjQtZGQyMi0z YTRhLWJkZGEtY2E2OWFiNWNkODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX8s7ZOIenJ5lTzxePWW14TFi9b17PwWqKozZaX3V5A7HbyKzrfPKUz MKbx1Q44u6LOxLdV9qmWlUaltGR/XN3Hv4rOzYbBbw6XPpNFocrx6OlerBg4u1/h HjWmF+Q8Bm3hTxxqIbqmaieHdLI1hdGARzfsp/ncVj7ycAD0VkbAUihcytaADxi5 pNSx31FhoTXAGUHJ3a7AZA4UefhEnJp6zJn75icMcw2Q4kaK+wluG6WuGu/XYKJl Pdc60wrbmhwFD6SGLwCKSiSVJXEcWtklp3rP4BpPYXA46fM30ZsA5ZiFN6vI6kjP a1AE/ZsIUFpFXEJgbgkTzhT1TSmC2J8= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:24 2025 by rpki-client