$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fe42ed-ff00-3a3a-ba72-72f1c4f4bc33.roa File: f9fe42ed-ff00-3a3a-ba72-72f1c4f4bc33.roa (raw, json) Hash identifier: JTqcycbp2Fo/JoAm3YnOTyxBQ2RWOU/ThpmlpmUyt7E= Subject key identifier: B3:00:DA:17:34:74:80:9D:E1:E1:33:4D:6B:A9:9A:76:45:0B:45:56 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5DD1DE72EA8AC934EB2F6AC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fe42ed-ff00-3a3a-ba72-72f1c4f4bc33.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 852 IP address blocks: 207.81.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:de:72:ea:8a:c9:34:eb:2f:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=2e682cbf-953c-44aa-8bd2-a4a47034b6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:20:a0:6b:c0:f3:7e:dd:f1:96:56:46:8d: 47:6b:52:e8:c7:b3:2f:fd:b1:6c:15:56:65:5b:c9: 0d:81:4d:69:dc:e6:61:86:b0:c1:e8:e2:52:b5:a8: 84:a4:1b:c3:a7:00:a3:ba:3a:32:4f:61:3c:f0:e9: d6:97:40:87:c0:64:5d:3d:f7:6b:4b:6c:f6:1f:0e: 13:6a:30:ac:f6:e4:6e:c8:4a:6e:16:6e:af:07:93: 27:bb:19:ab:05:d2:6b:89:a6:04:f4:60:c0:0b:d9: c3:20:1d:bc:f9:16:3a:51:bb:50:90:42:f1:83:f7: a7:6e:84:f9:dc:dc:89:e6:4d:02:83:d0:2e:4e:a5: 23:6c:77:4f:06:5e:66:aa:5e:d2:55:4d:62:bb:35: ba:41:0a:a5:80:ef:6d:de:e4:46:79:02:3a:68:01: b5:fc:03:b4:c4:49:bc:35:17:8d:d5:3c:8d:42:54: 2a:e6:b9:4f:e7:1b:5d:c3:62:d1:3e:fc:9d:2f:7a: a8:31:4f:dc:f2:36:f3:dc:53:d7:cc:05:37:64:4f: de:f7:2f:47:71:ee:d5:56:d9:f3:6e:19:ae:e4:92: 3e:15:29:c3:1a:1e:32:af:b9:46:d1:59:cf:f3:4f: a7:f4:88:a3:13:74:70:cf:08:f7:51:72:62:b9:18: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:00:DA:17:34:74:80:9D:E1:E1:33:4D:6B:A9:9A:76:45:0B:45:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f9fe42ed-ff00-3a3a-ba72-72f1c4f4bc33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.81.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:92:9a:4e:4b:23:e6:32:6e:af:dd:35:7d:cb:0d:6d:2c:c7: 6c:2e:a2:68:e0:3c:0b:94:e0:79:5e:1d:e2:79:a0:56:0e:22: 85:38:eb:7e:d1:04:f3:06:17:15:3b:eb:a6:05:d7:e1:fd:31: 3e:4f:83:8d:24:70:e5:c0:a6:f9:1c:26:3b:fd:83:74:d7:91: 4d:ef:ec:6c:94:8d:d1:a5:72:25:d0:bf:05:0f:ef:4f:bb:74: b5:8e:ac:6b:8d:39:bd:d9:77:54:e4:4d:59:93:0c:a1:a8:89: 2a:97:e2:7f:33:a1:da:14:a9:c4:31:65:2c:cd:fd:56:25:86: 9b:e0:3a:4b:51:c7:e2:41:c2:d4:1a:f5:82:23:ca:67:9d:e2: 57:7d:44:5f:4d:9f:c9:51:11:4f:ae:19:5a:de:38:7f:69:e2: 59:5d:f8:34:8f:45:c5:bc:92:45:f1:20:e9:6d:1f:dd:ed:17: 4a:47:05:1f:72:e1:ea:b1:fe:b6:8e:1e:8f:56:17:ed:b0:74: f5:34:60:4a:70:82:4e:00:09:3b:36:0a:f7:92:11:fc:76:97: a5:05:e2:67:e9:10:a5:ba:43:f5:ef:cc:0d:a0:ca:be:72:4c: 79:61:10:38:74:13:53:86:28:da:d7:68:8d:44:5e:b0:aa:0f: 5a:e5:85:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0d5y6orJNOsvasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MmU2ODJjYmYtOTUzYy00NGFhLThiZDItYTRhNDcwMzRiNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy4goGvA837d8ZZWRo1Ha1Lox7Mv/bFsFVZl W8kNgU1p3OZhhrDB6OJStaiEpBvDpwCjujoyT2E88OnWl0CHwGRdPfdrS2z2Hw4T ajCs9uRuyEpuFm6vB5MnuxmrBdJriaYE9GDAC9nDIB28+RY6UbtQkELxg/enboT5 3NyJ5k0Cg9AuTqUjbHdPBl5mql7SVU1iuzW6QQqlgO9t3uRGeQI6aAG1/AO0xEm8 NReN1TyNQlQq5rlP5xtdw2LRPvydL3qoMU/c8jbz3FPXzAU3ZE/e9y9Hce7VVtnz bhmu5JI+FSnDGh4yr7lG0VnP80+n9IijE3Rwzwj3UXJiuRguqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMA2hc0dICd4eEzTWupmnZFC0VWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjlmZTQyZWQtZmYwMC0z YTNhLWJhNzItNzJmMWM0ZjRiYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1HFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKSmk5LI+Yybq/dNX3LDW0sx2wuomjgPAuU4HleHeJ5oFYOIoU4637R BPMGFxU766YF1+H9MT5Pg40kcOXApvkcJjv9g3TXkU3v7GyUjdGlciXQvwUP70+7 dLWOrGuNOb3Zd1TkTVmTDKGoiSqX4n8zodoUqcQxZSzN/VYlhpvgOktRx+JBwtQa 9YIjymed4ld9RF9Nn8lREU+uGVreOH9p4lld+DSPRcW8kkXxIOltH93tF0pHBR9y 4eqx/raOHo9WF+2wdPU0YEpwgk4ACTs2CveSEfx2l6UF4mfpEKW6Q/XvzA2gyr5y THlhEDh0E1OGKNrXaI1EXrCqD1rlhZg= -----END CERTIFICATE-----Generated at Sun Oct 19 20:18:21 2025 by rpki-client