$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ed611e5a-764e-3f5b-a58f-fd126088b0d8.roa File: ed611e5a-764e-3f5b-a58f-fd126088b0d8.roa (raw, json) Hash identifier: iH3LxZoUjgCZlxcqZ2vsZU8Lc3y3VPCCUFQJ+B+wjZ4= Subject key identifier: 29:8F:6B:91:4A:82:33:07:1C:54:7A:84:63:FA:8B:B9:F3:BE:36:D2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B0736A3DCDC52F2B2C36A00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ed611e5a-764e-3f5b-a58f-fd126088b0d8.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 207.229.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:36:a3:dc:dc:52:f2:b2:c3:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=666622df-4f8d-41ca-b46e-c2f686251961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:c2:b9:b1:aa:24:64:77:f9:65:7d:ed:80: 16:f7:81:d1:15:72:e2:56:94:80:03:91:47:07:f8: 45:c1:c4:ef:f8:a4:f9:18:94:01:5f:e5:cb:32:a0: c8:0f:ce:ff:da:ee:90:d1:30:78:3b:c9:ed:36:21: 43:a9:c5:53:24:40:a4:9a:0a:4f:6a:10:5c:46:65: ab:7c:f1:a7:47:73:58:61:7b:4a:68:d0:61:46:58: 5e:ac:62:09:d7:b9:21:54:8a:f0:b4:bc:fb:ad:c6: ec:75:7d:16:be:af:ba:b1:6f:c7:c7:78:22:e8:30: 1f:03:dd:9c:68:ce:26:95:b4:e6:56:35:49:7b:14: 90:05:87:5b:e1:85:7f:ef:ea:6b:10:e2:ed:84:0c: aa:22:44:ee:3f:ec:62:e2:c1:c9:7f:72:5c:82:dc: 3c:e4:2d:df:d4:94:59:28:82:34:e6:5f:70:ca:e4: 98:82:b8:d9:db:de:16:3d:2b:0e:58:35:c8:b7:98: 3f:85:2c:2d:8e:f2:35:ea:7e:18:57:7a:79:2f:dc: 99:73:01:12:d6:17:a1:2f:75:fa:b7:cf:3d:d1:b8: 71:1a:1f:a9:45:40:e2:ab:48:75:20:f9:41:58:11: 2e:f6:c8:30:1d:37:e1:26:b4:1d:be:60:02:04:e6: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8F:6B:91:4A:82:33:07:1C:54:7A:84:63:FA:8B:B9:F3:BE:36:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ed611e5a-764e-3f5b-a58f-fd126088b0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.229.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:98:21:93:b2:c4:a0:b1:97:d8:ad:af:fd:32:cc:31:c8:44: 08:95:65:02:d4:bf:c9:3d:ba:aa:51:32:7a:df:d2:67:7b:8f: f5:53:93:3d:e7:7f:16:3f:d7:4b:8a:e1:0c:e8:16:c2:f5:a6: be:2f:59:d0:5e:a5:e5:e7:d3:ad:36:fc:2a:db:3a:c6:27:8a: 31:6e:4b:ea:1c:48:c1:05:48:71:4c:0f:b2:62:15:3e:d4:25: 99:a9:d1:19:80:5f:be:33:89:b2:9a:5b:87:60:0d:72:cc:cf: df:64:7d:8c:a5:c8:23:41:e1:66:62:58:6d:22:25:5a:0c:71: 4c:bb:cc:43:d5:bf:55:bb:98:89:45:28:e4:5e:55:66:5c:23: c4:5f:d8:4a:70:5f:7a:43:d8:7c:f1:cc:1d:48:4a:3c:ee:95: 0d:dc:3f:21:39:ed:4f:91:00:8d:b1:e2:9b:37:8a:55:b6:0d: 27:fe:58:99:ed:72:ce:2b:55:ef:c5:4a:2c:2a:72:ce:12:33: f5:5c:64:89:4c:70:2f:a3:75:93:28:c5:e5:43:b4:a0:ca:e0: f0:18:ef:9f:fb:1b:60:a0:27:81:6d:e8:0c:da:dc:ca:30:1f: 0c:73:23:58:a0:1e:08:75:49:40:de:0a:c7:6d:a0:86:a0:e2: 3b:01:31:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzaj3NxS8rLDagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NjY2NjIyZGYtNGY4ZC00MWNhLWI0NmUtYzJmNjg2MjUxOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1anCubGqJGR3+WV97YAW94HRFXLiVpSAA5FH B/hFwcTv+KT5GJQBX+XLMqDID87/2u6Q0TB4O8ntNiFDqcVTJECkmgpPahBcRmWr fPGnR3NYYXtKaNBhRlherGIJ17khVIrwtLz7rcbsdX0Wvq+6sW/Hx3gi6DAfA92c aM4mlbTmVjVJexSQBYdb4YV/7+prEOLthAyqIkTuP+xi4sHJf3Jcgtw85C3f1JRZ KII05l9wyuSYgrjZ294WPSsOWDXIt5g/hSwtjvI16n4YV3p5L9yZcwES1hehL3X6 t8890bhxGh+pRUDiq0h1IPlBWBEu9sgwHTfhJrQdvmACBOY+BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmPa5FKgjMHHFR6hGP6i7nzvjbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWQ2MTFlNWEtNzY0ZS0z ZjViLWE1OGYtZmQxMjYwODhiMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz+UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2YIZOyxKCxl9itr/0yzDHIRAiVZQLUv8k9uqpRMnrf0md7j/VTkz3n fxY/10uK4QzoFsL1pr4vWdBepeXn0602/CrbOsYnijFuS+ocSMEFSHFMD7JiFT7U JZmp0RmAX74zibKaW4dgDXLMz99kfYylyCNB4WZiWG0iJVoMcUy7zEPVv1W7mIlF KOReVWZcI8Rf2EpwX3pD2HzxzB1ISjzulQ3cPyE57U+RAI2x4ps3ilW2DSf+WJnt cs4rVe/FSiwqcs4SM/VcZIlMcC+jdZMoxeVDtKDK4PAY75/7G2CgJ4Ft6Aza3Mow HwxzI1igHgh1SUDeCsdtoIag4jsBMcc= -----END CERTIFICATE-----Generated at Mon Oct 20 01:14:25 2025 by rpki-client