$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc804e6c-1600-34e0-a397-15bc67f986be.roa File: dc804e6c-1600-34e0-a397-15bc67f986be.roa (raw, json) Hash identifier: ak52XzPGSgq7p1AX6EtOxIUKbSuHZ5AzK1RkQhOifsk= Subject key identifier: 22:91:8D:47:25:34:97:27:AE:65:0D:4A:AD:07:C7:10:BC:77:68:95 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D21ADAF15CC28D1C9660 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc804e6c-1600-34e0-a397-15bc67f986be.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 205.206.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d2:1a:da:f1:5c:c2:8d:1c:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=072252d6-18c5-4a01-9696-c699607601f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:1e:c9:57:86:9d:bb:5a:d2:7a:8e:ff:db: 79:a3:8b:88:f2:a8:ba:f2:1e:bc:7c:ae:f5:87:55: f3:90:f2:ab:cb:8c:db:4d:19:43:1a:4b:c9:07:bc: 28:93:cf:c7:65:80:e1:b6:d8:ff:a4:59:0c:98:01: fe:49:c6:ef:df:51:56:4b:89:25:3e:fe:23:76:da: 46:01:99:6f:c6:6c:9f:65:54:cc:3d:2c:be:32:f7: 68:48:45:1b:21:01:df:8c:a3:79:6e:0a:aa:2d:17: ce:0d:4f:ab:29:3c:79:0c:95:0b:a8:8f:ef:fb:6a: cc:72:3f:ac:da:bb:2a:bf:4d:eb:43:f2:59:69:d1: 71:68:56:7f:a4:4a:e8:43:68:44:f6:b9:0f:5e:1d: b1:e8:3e:cd:36:1f:71:53:64:64:eb:57:8b:82:cd: 42:71:3e:49:5a:ae:dc:6c:b7:99:dc:db:df:c1:72: 06:67:fc:b8:7a:e9:0a:ab:94:6a:6c:74:4d:14:7c: e7:29:32:62:89:16:8a:44:fb:49:ca:47:a1:6b:34: 8b:94:e9:ab:5e:71:95:ea:18:b1:17:c1:91:55:22: db:9b:3a:1d:2e:62:8d:73:d9:a9:fc:8e:cb:94:e3: 9e:41:71:8a:7d:40:ca:78:8f:21:64:2b:12:10:73: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:91:8D:47:25:34:97:27:AE:65:0D:4A:AD:07:C7:10:BC:77:68:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc804e6c-1600-34e0-a397-15bc67f986be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 205.206.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:67:f4:1c:4e:c2:03:67:31:06:63:8e:07:c6:e9:f0:cd:83: 0b:69:d9:7a:2c:c3:55:fe:75:bf:6c:66:4d:e5:1f:e4:b6:17: 96:06:2b:5c:a4:30:c9:96:11:c8:0f:1e:90:37:78:61:ce:de: 2d:f1:ac:a1:63:dd:c3:4e:75:97:f0:d0:53:69:16:14:09:4c: 16:87:4d:b8:c6:99:b5:3f:b8:8e:f8:a6:8e:57:e3:e1:60:a5: 0f:de:a0:59:73:f9:78:b5:e6:d1:19:fa:6c:76:3c:83:94:d1: de:35:b8:18:fe:71:b6:26:1d:6b:a7:0c:07:59:11:08:03:42: cb:d8:60:85:b6:6b:89:c6:c1:92:ef:a0:b1:d1:27:87:ce:1d: ca:70:fb:84:0c:27:91:2f:be:e1:9a:b3:b8:61:85:a3:e3:1f: e9:6a:73:72:f0:8f:39:de:9f:b8:e0:7d:28:4d:a5:d8:7e:6d: 25:3d:49:4a:b9:a5:ab:d4:87:ce:c7:23:a6:8f:e7:f7:26:5f: 50:b8:52:a4:0f:1b:00:bb:60:da:1a:91:92:88:58:dd:e7:8d: db:10:b4:29:88:73:18:3b:88:d4:fd:4f:2f:b7:3d:ee:4a:70: 08:26:ae:9d:ec:af:34:29:ff:93:19:88:bf:ed:f6:9a:c9:d4: 9a:d6:9d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdIa2vFcwo0clmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MDcyMjUyZDYtMThjNS00YTAxLTk2OTYtYzY5OTYwNzYwMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsoeyVeGnbta0nqO/9t5o4uI8qi68h68fK71 h1XzkPKry4zbTRlDGkvJB7wok8/HZYDhttj/pFkMmAH+Scbv31FWS4klPv4jdtpG AZlvxmyfZVTMPSy+MvdoSEUbIQHfjKN5bgqqLRfODU+rKTx5DJULqI/v+2rMcj+s 2rsqv03rQ/JZadFxaFZ/pEroQ2hE9rkPXh2x6D7NNh9xU2Rk61eLgs1CcT5JWq7c bLeZ3NvfwXIGZ/y4eukKq5RqbHRNFHznKTJiiRaKRPtJykehazSLlOmrXnGV6hix F8GRVSLbmzodLmKNc9mp/I7LlOOeQXGKfUDKeI8hZCsSEHNC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKRjUclNJcnrmUNSq0HxxC8d2iVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGM4MDRlNmMtMTYwMC0z NGUwLWEzOTctMTViYzY3Zjk4NmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdn9BxOwgNnMQZjjgfG6fDNgwtp2Xosw1X+db9sZk3lH+S2F5YGK1yk MMmWEcgPHpA3eGHO3i3xrKFj3cNOdZfw0FNpFhQJTBaHTbjGmbU/uI74po5X4+Fg pQ/eoFlz+Xi15tEZ+mx2PIOU0d41uBj+cbYmHWunDAdZEQgDQsvYYIW2a4nGwZLv oLHRJ4fOHcpw+4QMJ5EvvuGas7hhhaPjH+lqc3Lwjznen7jgfShNpdh+bSU9SUq5 pavUh87HI6aP5/cmX1C4UqQPGwC7YNoakZKIWN3njdsQtCmIcxg7iNT9Ty+3Pe5K cAgmrp3srzQp/5MZiL/t9prJ1JrWnVs= -----END CERTIFICATE-----Generated at Sun Oct 19 22:45:16 2025 by rpki-client