$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa File: 6dd89af2-4338-3c2c-9998-029f692eee16.roa (raw, json) Hash identifier: TMN6JjEeIlRgPLDXvcEDcQUN6VDZMWVAQ6cPRi2iuFo= Subject key identifier: 74:DF:5E:24:AA:A1:65:92:36:B5:D6:6F:6C:6E:6A:EC:35:A6:9F:DA Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584B76F257E826364F73FCB89A00 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 212335 IP address blocks: 216.177.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:57:e8:26:36:4f:73:fc:b8:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b1eabfac-9cd8-42bf-ac33-390cafbef5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6b:c9:33:92:2d:76:7d:0d:d6:a8:f7:80:1e: 3a:ca:19:15:8d:57:67:3c:e0:56:95:00:1a:96:de: 90:06:f1:c2:c1:87:8c:39:05:84:de:8f:19:bb:0b: 67:a4:3a:dc:8c:7d:e7:8e:4c:73:0d:54:2d:43:ea: 41:c1:bb:89:1a:31:d5:42:80:77:6f:e2:49:d0:eb: 36:92:3b:d4:58:29:74:d8:77:2a:a5:18:f6:d3:aa: 06:14:45:63:45:46:d7:ac:a3:cb:6f:2b:d1:45:4f: 88:81:19:49:fd:26:25:2e:9e:4d:61:39:82:9d:64: df:7f:bc:12:30:f0:de:74:89:c0:18:17:ab:7b:55: 12:5e:c5:fe:a0:79:d0:ca:0e:bc:bc:2c:97:60:03: 00:db:79:81:50:0b:c2:98:85:f9:59:a5:3c:21:cb: 5d:9c:c5:6d:d9:4f:58:bc:5f:36:16:6c:2a:98:9a: 97:0d:20:a9:13:20:f9:89:da:6d:50:c0:40:96:e3: 6b:b6:4d:4e:c1:6b:4f:79:36:c6:83:09:0d:92:84: ea:42:2f:e2:f0:25:b3:33:cd:ab:9c:83:a1:8e:2d: aa:d5:67:27:9b:b4:4c:7c:66:ca:60:43:03:a3:dd: 4a:81:db:c7:16:dc:92:d7:23:66:6e:a4:c4:87:d9: 6a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DF:5E:24:AA:A1:65:92:36:B5:D6:6F:6C:6E:6A:EC:35:A6:9F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/6dd89af2-4338-3c2c-9998-029f692eee16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 216.177.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c2:a8:18:56:a9:01:6e:66:29:a1:53:b3:1e:df:d2:3a:35: ec:1c:b8:d2:5a:78:4b:d7:46:40:f6:13:ce:85:0a:b1:91:d7: 59:45:39:13:1e:b5:cf:50:e3:af:a4:21:d8:b2:06:88:2c:0e: 8b:3b:5b:9e:d6:a4:ac:85:c2:72:58:5b:fd:1e:a5:77:0d:62: d2:01:93:19:39:59:4b:5c:25:99:da:bc:99:dd:29:d7:52:73: 50:4d:ef:47:a5:8a:83:c5:49:3b:08:b6:0f:fa:87:35:f8:23: e5:1d:8a:52:53:de:4b:19:cb:2d:3a:5f:bb:92:c8:92:02:58: e7:76:b4:d1:ea:1c:4a:b4:75:87:17:52:11:f2:4a:7d:31:af: 34:4c:9d:90:50:93:c0:5b:b5:c3:d4:9b:03:1e:9d:d9:12:ba: 70:58:23:5a:3d:ca:4d:01:23:63:1f:d9:35:b5:97:c4:19:d7: b2:82:74:49:0e:75:e0:fa:5c:c6:8c:a9:ea:18:48:ba:d6:ac: a4:51:64:48:b4:e8:22:62:41:4a:84:33:3f:04:fe:82:70:d8: dc:53:5b:92:ad:f3:47:b9:5e:0e:e2:f1:12:9f:d4:ed:3e:38: a8:aa:19:60:77:05:d5:a6:b6:b2:93:99:ad:f2:21:b2:b0:ea: 30:df:4d:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lfoJjZPc/y4mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjFlYWJmYWMtOWNkOC00MmJmLWFjMzMtMzkwY2FmYmVmNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmvJM5Itdn0N1qj3gB46yhkVjVdnPOBWlQAa lt6QBvHCwYeMOQWE3o8ZuwtnpDrcjH3njkxzDVQtQ+pBwbuJGjHVQoB3b+JJ0Os2 kjvUWCl02HcqpRj206oGFEVjRUbXrKPLbyvRRU+IgRlJ/SYlLp5NYTmCnWTff7wS MPDedInAGBere1USXsX+oHnQyg68vCyXYAMA23mBUAvCmIX5WaU8IctdnMVt2U9Y vF82FmwqmJqXDSCpEyD5idptUMBAluNrtk1OwWtPeTbGgwkNkoTqQi/i8CWzM82r nIOhji2q1Wcnm7RMfGbKYEMDo91KgdvHFtyS1yNmbqTEh9lqVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTfXiSqoWWSNrXWb2xuauw1pp/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvNmRkODlhZjItNDMzOC0z YzJjLTk5OTgtMDI5ZjY5MmVlZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LGFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzCqBhWqQFuZimhU7Me39I6NewcuNJaeEvXRkD2E86FCrGR11lFORMe tc9Q46+kIdiyBogsDos7W57WpKyFwnJYW/0epXcNYtIBkxk5WUtcJZnavJndKddS c1BN70elioPFSTsItg/6hzX4I+UdilJT3ksZyy06X7uSyJICWOd2tNHqHEq0dYcX UhHySn0xrzRMnZBQk8BbtcPUmwMendkSunBYI1o9yk0BI2Mf2TW1l8QZ17KCdEkO deD6XMaMqeoYSLrWrKRRZEi06CJiQUqEMz8E/oJw2NxTW5Kt80e5Xg7i8RKf1O0+ OKiqGWB3BdWmtrKTma3yIbKw6jDfTeM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:38 2025 by rpki-client