$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa File: 3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa (raw, json) Hash identifier: nrRSagB5VQf7X+hZDMeMblGnvfitlyqjA64DvocCdNA= Subject key identifier: F8:20:17:3C:AC:FE:70:73:E8:B3:1B:82:EE:97:E7:BC:52:53:8C:0F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5248AACA285313A1B76580 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 71.44.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:48:aa:ca:28:53:13:a1:b7:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d5b103c6-fa4f-4552-a1f1-d3b3012a8f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:38:c7:9c:b7:96:da:54:a8:65:12:8a:ec: d9:b7:8a:7b:1b:36:36:da:bf:cf:93:e3:a6:d5:97: 1f:d5:78:80:36:77:dd:51:40:07:79:92:c9:7b:dc: d7:1d:82:2d:14:30:30:3a:8a:3c:7f:9c:a6:27:1c: 79:59:b8:fa:e7:03:e4:54:fc:07:4a:b8:5f:53:4c: d7:c8:7d:f5:93:2f:be:93:00:e3:bd:03:9b:33:55: bd:65:92:61:46:0b:42:4c:95:90:0d:bd:87:e5:90: aa:4f:12:86:55:71:42:59:58:45:ea:b9:6c:ef:d2: 67:72:50:82:5e:c8:61:63:2c:33:c2:2f:03:12:07: 4d:a8:4c:8e:aa:d6:02:63:2f:67:dd:df:95:d5:60: e6:b8:86:42:48:36:a5:4a:b7:1e:ad:6d:ba:5e:fa: 18:ab:3a:50:00:b7:b2:be:0c:4f:33:cd:16:c2:4a: d1:50:2e:8f:6c:20:e3:58:fa:03:1a:86:76:91:cf: 95:5c:09:13:91:b9:11:75:40:89:42:c7:86:fe:f2: e9:08:49:ae:48:b3:32:c3:fa:6b:a8:7f:80:7a:e6: 4d:cf:b8:5f:9a:e5:46:26:e1:c0:54:36:d7:06:3f: 82:35:7d:aa:aa:5e:ce:91:20:45:c3:b0:a9:fa:ba: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:20:17:3C:AC:FE:70:73:E8:B3:1B:82:EE:97:E7:BC:52:53:8C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3c14bf1e-f46e-38cd-9d06-8e2b77fb1c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a4:1a:94:2e:d8:4f:40:ad:a5:d8:f2:f1:0f:41:ea:4f:1e: d2:df:29:c9:7d:76:66:96:0c:bd:35:b2:97:56:7d:64:9a:41: 36:28:4e:d3:47:6e:c9:11:8d:fb:eb:b6:c0:43:dc:8c:06:fd: cb:45:d8:54:70:b7:23:62:f2:50:fb:9d:59:ec:46:17:4c:bd: f6:11:75:3d:40:03:17:d7:f6:9e:6e:1d:23:d8:ac:89:91:31: 7e:69:cc:5b:b2:b0:43:69:aa:0d:42:da:24:81:2e:f0:32:c9: 96:05:a5:98:2a:25:4d:35:48:eb:f6:0d:e7:df:17:ce:28:e4: a9:33:00:25:0c:b4:26:e1:55:5d:4e:39:0c:08:e2:10:b7:f5: a7:51:af:81:bb:5e:47:26:48:6e:86:85:ef:f6:8b:7e:0e:33: 28:73:82:11:17:3f:69:de:70:76:d0:c0:bd:03:23:c4:8f:71: 40:16:65:30:64:44:4a:8b:f1:13:81:aa:72:4f:78:dc:11:c5: a2:01:50:4a:10:15:eb:88:9d:7f:67:7d:5e:18:8a:ab:16:98: cf:f8:61:60:ae:e2:d7:57:be:3d:ef:90:42:33:c9:29:a4:9e: 5c:86:50:f3:00:a9:9b:2c:69:b7:dc:ca:ed:81:78:73:e8:88: 86:c5:a5:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkiqyihTE6G3ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDViMTAzYzYtZmE0Zi00NTUyLWExZjEtZDNiMzAxMmE4ZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCQ4x5y3ltpUqGUSiuzZt4p7GzY22r/Pk+Om 1Zcf1XiANnfdUUAHeZLJe9zXHYItFDAwOoo8f5ymJxx5Wbj65wPkVPwHSrhfU0zX yH31ky++kwDjvQObM1W9ZZJhRgtCTJWQDb2H5ZCqTxKGVXFCWVhF6rls79JnclCC XshhYywzwi8DEgdNqEyOqtYCYy9n3d+V1WDmuIZCSDalSrcerW26XvoYqzpQALey vgxPM80WwkrRUC6PbCDjWPoDGoZ2kc+VXAkTkbkRdUCJQseG/vLpCEmuSLMyw/pr qH+AeuZNz7hfmuVGJuHAVDbXBj+CNX2qql7OkSBFw7Cp+roRLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPggFzys/nBz6LMbgu6X57xSU4wPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2MxNGJmMWUtZjQ2ZS0z OGNkLTlkMDYtOGUyYjc3ZmIxYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRywAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADukGpQu2E9AraXY8vEPQepPHtLfKcl9dmaWDL01spdWfWSaQTYoTtNH bskRjfvrtsBD3IwG/ctF2FRwtyNi8lD7nVnsRhdMvfYRdT1AAxfX9p5uHSPYrImR MX5pzFuysENpqg1C2iSBLvAyyZYFpZgqJU01SOv2DeffF84o5KkzACUMtCbhVV1O OQwI4hC39adRr4G7XkcmSG6Ghe/2i34OMyhzghEXP2necHbQwL0DI8SPcUAWZTBk REqL8ROBqnJPeNwRxaIBUEoQFeuInX9nfV4YiqsWmM/4YWCu4tdXvj3vkEIzySmk nlyGUPMAqZssabfcyu2BeHPoiIbFpT4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:23 2025 by rpki-client