$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8161c3e-6d98-3c02-a98e-cb233617fd63.roa File: e8161c3e-6d98-3c02-a98e-cb233617fd63.roa (raw, json) Hash identifier: y9tg7maZtqRtdHg4NbIrAxJh069yi1F4Kbob3+8eMoQ= Subject key identifier: B9:E9:EE:43:09:48:C1:7A:EE:40:91:7C:0D:81:7B:81:EB:CB:40:91 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B583C8302D385DD933609F080 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8161c3e-6d98-3c02-a98e-cb233617fd63.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 96.1.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:83:02:d3:85:dd:93:36:09:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=bfdf1ae1-32e8-413c-a82d-25e4e9384723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:8c:30:6d:7a:1f:41:0e:73:9c:59:5b:e2: cd:86:02:7a:e5:37:97:d5:6f:8a:9c:56:62:3f:9a: cf:95:22:2e:35:8b:58:a8:e2:01:95:80:83:83:9e: 60:bd:2b:95:1a:1a:97:4a:6d:27:a3:87:87:cc:b2: f3:51:45:01:23:70:7a:3a:2e:9d:9a:50:be:a1:a9: 45:be:5d:79:66:53:f7:04:8b:7a:e5:30:cf:09:d9: 8c:3a:5f:bc:2d:ec:64:3a:6c:f7:c8:53:03:ff:50: 63:3a:b7:b2:50:5b:26:79:a0:b8:aa:de:c8:1b:d0: 6d:8b:39:32:b2:ae:57:75:b2:30:af:df:60:3e:41: 77:1f:7b:00:f5:06:b5:b1:c6:3d:df:19:ab:76:e0: 23:e4:b0:1c:cd:b5:b3:78:d5:cd:1e:63:9b:67:a4: 0d:0d:01:1a:68:72:70:0d:09:ec:44:a5:c6:dc:02: e8:0b:ce:9e:f2:11:e4:99:30:82:0a:eb:8d:70:1a: c0:49:70:9a:08:07:75:5e:37:78:ec:c3:05:37:74: 55:e8:ea:ad:e1:b2:e8:9d:08:30:1d:f5:54:1e:8a: 84:c6:78:fd:cf:4a:85:ed:1c:f5:00:ee:2d:ac:e0: cc:bd:a5:59:85:08:e2:8b:57:e2:bb:e9:a1:5a:34: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:EE:43:09:48:C1:7A:EE:40:91:7C:0D:81:7B:81:EB:CB:40:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e8161c3e-6d98-3c02-a98e-cb233617fd63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 96.1.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:89:f4:84:a7:7b:be:82:03:7f:45:70:e1:88:85:83:e5:91: 43:0a:dc:c5:85:b0:ac:96:7a:8a:94:d5:2e:3d:55:5d:bb:46: 05:67:dc:49:48:38:5b:a9:54:ab:28:28:c6:b4:5d:6b:88:d6: e3:a6:3e:7f:78:5a:c2:6c:7e:d6:8b:61:d4:d5:c2:68:42:82: ea:c8:15:65:03:2b:58:65:8f:a7:4e:d6:52:44:d2:fc:99:b6: 7f:c6:d8:3e:21:58:c5:7f:ef:6e:39:95:80:fd:1b:fb:2b:55: 2c:9d:8d:45:55:64:4a:15:86:2d:c1:f7:78:5f:97:ed:0a:a4: 8a:04:1c:34:cc:81:2d:49:67:fe:36:57:ac:72:ec:69:87:ce: c8:53:22:ad:ac:8d:17:9b:b6:ac:62:24:61:1e:b2:ba:a2:a8: 6b:11:2c:42:49:8c:bd:28:4a:4b:25:cf:d0:92:5c:06:46:86: 1a:15:36:46:81:fb:df:d1:9c:03:07:6d:ef:8d:be:6e:8e:0c: b3:41:25:78:b2:6d:b1:9b:c8:56:6b:13:f3:bd:9f:d9:be:b4: 26:db:da:0e:2a:de:47:f4:78:c2:ad:62:6f:d0:00:87:f4:9e: b6:c1:b1:03:69:c0:44:e4:4b:0c:14:39:1c:be:52:ce:20:0b: 23:11:fa:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIMC04XdkzYJ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YmZkZjFhZTEtMzJlOC00MTNjLWE4MmQtMjVlNGU5Mzg0NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4mMMG16H0EOc5xZW+LNhgJ65TeX1W+KnFZi P5rPlSIuNYtYqOIBlYCDg55gvSuVGhqXSm0no4eHzLLzUUUBI3B6Oi6dmlC+oalF vl15ZlP3BIt65TDPCdmMOl+8LexkOmz3yFMD/1BjOreyUFsmeaC4qt7IG9Btizky sq5XdbIwr99gPkF3H3sA9Qa1scY93xmrduAj5LAczbWzeNXNHmObZ6QNDQEaaHJw DQnsRKXG3ALoC86e8hHkmTCCCuuNcBrASXCaCAd1Xjd47MMFN3RV6Oqt4bLonQgw HfVUHoqExnj9z0qF7Rz1AO4trODMvaVZhQjii1fiu+mhWjTUSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnp7kMJSMF67kCRfA2Be4Hry0CRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTgxNjFjM2UtNmQ5OC0z YzAyLWE5OGUtY2IyMzM2MTdmZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+J9ISne76CA39FcOGIhYPlkUMK3MWFsKyWeoqU1S49VV27RgVn3ElI OFupVKsoKMa0XWuI1uOmPn94WsJsftaLYdTVwmhCgurIFWUDK1hlj6dO1lJE0vyZ tn/G2D4hWMV/7245lYD9G/srVSydjUVVZEoVhi3B93hfl+0KpIoEHDTMgS1JZ/42 V6xy7GmHzshTIq2sjRebtqxiJGEesrqiqGsRLEJJjL0oSkslz9CSXAZGhhoVNkaB +9/RnAMHbe+Nvm6ODLNBJXiybbGbyFZrE/O9n9m+tCbb2g4q3kf0eMKtYm/QAIf0 nrbBsQNpwETkSwwUORy+Us4gCyMR+oo= -----END CERTIFICATE-----Generated at Sun Oct 19 20:19:57 2025 by rpki-client