$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa File: fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa (raw, json) Hash identifier: vviuFMwbGu0OsCy9a29ipNpJsCHxp8aJiI+xuFbjuzE= Subject key identifier: 1D:DF:4E:3F:67:BF:71:BB:C7:7A:61:49:E0:A1:4B:64:2A:B2:C6:5C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C65A9C6B29EA25724CC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 8111 IP address blocks: 198.166.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c6:5a:9c:6b:29:ea:25:72:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=63b4c695-2853-408e-9880-9157f9960ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:7d:b1:16:9a:3c:72:f1:3e:0a:b3:e6:e0: e3:b8:14:ba:48:5a:68:40:c2:4d:72:66:da:c6:aa: ed:e0:ba:7f:00:64:47:9f:e8:8d:0f:39:88:79:cf: 8e:b0:0b:b0:29:ad:85:3b:57:ee:e1:0a:c7:4b:eb: 00:5c:55:6d:b8:a4:97:14:bc:a0:ac:03:10:8e:34: f6:38:15:09:28:99:36:bd:8e:6f:ce:96:2f:9e:b2: 62:14:0f:21:73:35:e3:7a:6b:5c:10:44:e3:7d:ad: e6:23:f6:64:ba:37:b6:55:bb:b2:28:a7:ba:c5:34: 4e:b9:c9:f2:ea:9e:7c:47:0a:1b:59:b3:60:a5:df: b2:67:ce:fc:ef:8a:aa:52:21:bd:34:d7:6b:68:55: 9f:18:b3:22:c8:ba:65:c3:55:b1:44:c1:64:3b:1d: 56:7b:6e:af:a1:4c:fa:43:17:e1:f4:71:40:2d:d5: 0d:96:e7:e2:ae:5c:21:3e:68:ca:c8:ae:42:2a:e4: c4:06:4d:ec:12:80:d2:6a:de:9c:24:83:d8:79:96: 83:d4:7c:eb:1d:75:8c:ca:9b:1c:31:f8:b0:a8:47: cb:79:b2:f4:89:c2:bc:f6:2d:80:c4:ff:46:50:bf: f0:a3:a6:09:5d:2c:af:77:cf:3b:74:0c:d2:5e:0e: 4c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:4E:3F:67:BF:71:BB:C7:7A:61:49:E0:A1:4B:64:2A:B2:C6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fd1bcccd-f976-388d-acc2-a5b42a2d36f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.166.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6f:cb:a9:8d:e0:5d:13:ba:86:2f:5b:fa:60:3f:51:47:f0: 2f:96:ce:ba:a0:55:47:42:d6:61:59:d2:4f:58:52:39:a5:e2: 75:ac:b4:af:1e:88:a2:e5:44:2e:97:77:ba:8b:a9:ff:3f:82: 21:c1:ba:d7:61:94:1e:ce:80:61:a8:58:77:26:06:53:6c:bd: fc:b8:4d:f1:dd:79:61:14:e0:a1:e7:d6:21:de:23:ab:88:67: 9e:1c:41:d6:3f:b8:fc:ae:c0:ad:ef:bf:9c:78:25:3f:cd:7e: f9:72:bf:cf:9a:bb:df:04:9c:68:a2:77:9f:4d:f5:ef:38:12: 0b:11:74:92:af:03:35:04:1f:8c:63:56:b6:6d:c6:38:9d:79: 7a:1c:f0:0e:70:f3:3f:38:d4:69:4a:5b:40:3c:fb:c8:9d:d7: 23:c7:b9:0e:ac:b4:5f:62:08:00:5c:49:85:51:70:fc:bb:4e: ce:86:40:8c:76:e3:f7:22:c8:d7:31:4e:c8:6d:a9:9e:a9:43: 80:39:58:59:ff:6c:c8:4c:c3:62:59:96:64:f6:d2:3d:18:0d: 29:b1:93:ae:57:a9:47:8a:8e:1b:9a:40:05:fb:4b:43:ab:94: a0:a6:d8:e2:09:5d:5e:e3:cd:50:0a:78:18:55:66:90:7e:76: 6e:2e:76:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcZanGsp6iVyTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NjNiNGM2OTUtMjg1My00MDhlLTk4ODAtOTE1N2Y5OTYwZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt159sRaaPHLxPgqz5uDjuBS6SFpoQMJNcmba xqrt4Lp/AGRHn+iNDzmIec+OsAuwKa2FO1fu4QrHS+sAXFVtuKSXFLygrAMQjjT2 OBUJKJk2vY5vzpYvnrJiFA8hczXjemtcEETjfa3mI/Zkuje2VbuyKKe6xTROucny 6p58RwobWbNgpd+yZ87874qqUiG9NNdraFWfGLMiyLplw1WxRMFkOx1We26voUz6 Qxfh9HFALdUNlufirlwhPmjKyK5CKuTEBk3sEoDSat6cJIPYeZaD1HzrHXWMypsc MfiwqEfLebL0icK89i2AxP9GUL/wo6YJXSyvd887dAzSXg5MFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3fTj9nv3G7x3phSeChS2QqssZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZmQxYmNjY2QtZjk3Ni0z ODhkLWFjYzItYTViNDJhMmQzNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqbpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtvy6mN4F0TuoYvW/pgP1FH8C+WzrqgVUdC1mFZ0k9YUjml4nWstK8e iKLlRC6Xd7qLqf8/giHButdhlB7OgGGoWHcmBlNsvfy4TfHdeWEU4KHn1iHeI6uI Z54cQdY/uPyuwK3vv5x4JT/Nfvlyv8+au98EnGiid59N9e84EgsRdJKvAzUEH4xj VrZtxjideXoc8A5w8z841GlKW0A8+8id1yPHuQ6stF9iCABcSYVRcPy7Ts6GQIx2 4/ciyNcxTshtqZ6pQ4A5WFn/bMhMw2JZlmT20j0YDSmxk65XqUeKjhuaQAX7S0Or lKCm2OIJXV7jzVAKeBhVZpB+dm4udmM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:25 2025 by rpki-client