$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa File: a3942e48-3cb7-3034-9c5b-e50d782b704c.roa (raw, json) Hash identifier: idQGGHMMTtoTIi5U9VQDUTha3VwbEwLWbNqP89DzSUE= Subject key identifier: 3A:C1:CB:4C:0D:2B:41:79:9D:97:9A:CE:C6:0B:F4:B7:25:F2:D6:64 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584B56D74DCDDAF88A17655C1000 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 398143 IP address blocks: 204.187.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:4d:cd:da:f8:8a:17:65:5c:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=3487a15c-3a8f-416a-8c86-3c9cc4576a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:d2:64:96:4f:0c:5e:da:60:3f:9a:f7:1d: 5f:38:05:a5:fb:a4:ce:bb:39:4a:75:91:57:49:aa: ab:c1:9c:1e:3b:7b:32:0d:42:73:4c:62:d7:13:4b: ca:13:74:e8:04:dd:9a:e9:ff:27:08:bc:82:79:81: bb:2b:85:e3:65:a7:64:fe:a5:65:22:1f:40:82:29: 93:0b:f5:a0:29:87:69:1c:a1:d2:6f:01:92:80:ba: e8:dc:0d:ca:41:33:4b:fd:4e:a3:a7:a3:17:23:66: 5f:ec:89:15:04:f3:7d:ce:5b:b9:9a:2e:3b:8f:ee: 40:9f:2c:65:3c:d6:cb:81:de:cb:d0:45:da:fe:83: 35:68:d0:97:e6:17:00:81:60:b5:0a:b3:48:f0:7e: e6:b4:6e:72:61:ff:7d:00:75:15:6b:9e:49:a9:6c: 0a:fc:cc:c0:cb:7e:2c:ad:3e:45:43:82:00:84:a8: 0c:85:5e:d8:ab:80:35:a1:d3:60:62:18:99:14:85: 19:fa:95:c3:05:28:a4:a7:92:72:37:60:98:08:7d: 37:d5:53:59:6b:9d:3e:f1:9e:fe:a4:12:86:69:95: 5f:52:3e:ce:5d:a2:15:1c:a4:dc:c6:71:61:83:bb: 16:b4:83:ff:1f:27:fc:92:ea:d3:9c:f3:4f:1a:35: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C1:CB:4C:0D:2B:41:79:9D:97:9A:CE:C6:0B:F4:B7:25:F2:D6:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 204.187.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f4:d7:2d:e7:ae:7d:ce:2b:ee:ae:5d:e9:bd:1d:8d:6a:5f: 4e:99:f4:33:78:2c:29:94:5a:13:91:c6:08:da:57:d3:78:16: f4:bb:9e:83:a8:c5:b6:26:4f:34:51:c6:95:44:ef:65:1d:19: ff:27:ca:3d:32:4e:99:84:43:fe:19:5a:30:f0:a3:78:7a:f6: a4:b9:a3:13:ec:cd:4c:b8:6e:a3:b2:43:5f:80:90:80:f0:5f: 79:01:d4:cb:d5:a3:10:a3:de:58:4f:37:60:99:93:d4:1a:85: dc:de:a6:f2:31:33:63:95:ab:86:6d:73:b6:fa:cf:6c:55:39: fc:94:d8:b9:a3:f7:0d:72:00:6d:f7:06:d1:30:5d:fe:42:d3: c8:d7:84:0a:a4:3a:54:a4:c7:3c:35:03:f8:f2:87:1a:88:50: ba:4b:ce:3b:fc:4d:b9:bf:56:05:d3:66:17:7a:3c:80:62:d6: 5f:ae:c3:1f:4d:9d:f3:35:b4:0e:65:29:88:a4:c0:23:14:76: fd:84:f9:6e:3f:bc:3b:34:26:45:79:68:d2:76:45:02:e0:db: ac:6a:13:1c:9b:e1:be:f2:f3:4d:db:b7:d3:f3:64:16:d1:28: 99:01:3b:08:2b:58:a0:e0:20:fe:82:71:1c:70:37:5b:84:90: c9:6d:20:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW103N2viKF2VcEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MzQ4N2ExNWMtM2E4Zi00MTZhLThjODYtM2M5Y2M0NTc2YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSTSZJZPDF7aYD+a9x1fOAWl+6TOuzlKdZFX SaqrwZweO3syDUJzTGLXE0vKE3ToBN2a6f8nCLyCeYG7K4XjZadk/qVlIh9AgimT C/WgKYdpHKHSbwGSgLro3A3KQTNL/U6jp6MXI2Zf7IkVBPN9zlu5mi47j+5Anyxl PNbLgd7L0EXa/oM1aNCX5hcAgWC1CrNI8H7mtG5yYf99AHUVa55JqWwK/MzAy34s rT5FQ4IAhKgMhV7Yq4A1odNgYhiZFIUZ+pXDBSikp5JyN2CYCH031VNZa50+8Z7+ pBKGaZVfUj7OXaIVHKTcxnFhg7sWtIP/Hyf8kurTnPNPGjWKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrBy0wNK0F5nZeazsYL9Lcl8tZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvYTM5NDJlNDgtM2NiNy0z MDM0LTljNWItZTUwZDc4MmI3MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLteMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID01y3nrn3OK+6uXem9HY1qX06Z9DN4LCmUWhORxgjaV9N4FvS7noOo xbYmTzRRxpVE72UdGf8nyj0yTpmEQ/4ZWjDwo3h69qS5oxPszUy4bqOyQ1+AkIDw X3kB1MvVoxCj3lhPN2CZk9QahdzepvIxM2OVq4Ztc7b6z2xVOfyU2Lmj9w1yAG33 BtEwXf5C08jXhAqkOlSkxzw1A/jyhxqIULpLzjv8Tbm/VgXTZhd6PIBi1l+uwx9N nfM1tA5lKYikwCMUdv2E+W4/vDs0JkV5aNJ2RQLg26xqExyb4b7y803bt9PzZBbR KJkBOwgrWKDgIP6CcRxwN1uEkMltIII= -----END CERTIFICATE-----Generated at Wed Oct 22 04:58:19 2025 by rpki-client