$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa File: 1d611970-d8e1-342b-b267-17fa1197a3ad.roa (raw, json) Hash identifier: B2eVFaa8TMv7Rl13wL2TqYmM7zm5b6zSp4TG0m4W2j0= Subject key identifier: EA:4B:D9:CA:A6:F0:2E:ED:05:47:C8:80:08:D4:C8:7F:F0:A4:E2:F3 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584B64CE2364E54CD9C73BB544E0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36492 IP address blocks: 172.102.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:23:64:e5:4c:d9:c7:3b:b5:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1ae75355-13bd-494a-bf98-6bc931a4e112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3d:ca:55:fa:31:a2:17:f0:71:d8:d4:de:a3: 97:ff:6f:a7:19:af:3b:2e:92:8e:30:c8:47:70:83: b5:31:bd:af:2e:d9:27:e8:10:c5:e3:f5:50:78:dd: eb:ae:9c:cf:fe:c9:74:55:40:b9:b2:f2:ba:23:97: ec:1a:2f:c8:0f:51:57:98:6c:f3:19:8d:36:3b:fa: e8:47:57:c5:32:d1:eb:de:0d:a0:9c:df:05:ec:8d: 39:a1:46:dd:97:05:1d:c6:d0:f6:f6:49:72:9f:fb: b7:8c:40:4f:4d:9e:84:5d:75:54:a5:bf:3b:87:64: 2f:e6:b9:14:83:c2:6d:75:1b:b8:73:d3:5a:c9:69: 20:2a:1b:f3:99:63:ab:39:2a:ae:b2:73:88:7a:f5: 04:29:59:ea:6c:19:f6:b0:a8:26:82:8c:62:55:1f: b4:ea:23:f4:70:45:44:81:6e:a7:c8:65:0f:0f:f4: f1:55:ee:70:da:8a:2a:2e:69:6f:1e:d0:d0:f6:61: 7a:a9:be:de:ac:a1:2d:30:43:d0:6b:b1:99:93:eb: 65:4d:8f:2d:d0:2b:b8:11:8e:ed:56:5d:78:f2:1c: 21:c0:5d:47:bc:69:e1:64:71:37:39:89:f0:03:2f: a6:c7:1b:12:68:44:35:4b:b3:df:bd:5d:e5:68:c4: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4B:D9:CA:A6:F0:2E:ED:05:47:C8:80:08:D4:C8:7F:F0:A4:E2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1d611970-d8e1-342b-b267-17fa1197a3ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f3:b6:d4:33:a5:16:7b:ca:76:7b:c7:68:3f:5b:30:1b:e2: 66:59:29:4d:93:b5:0f:18:e8:88:43:2d:a0:e4:f0:70:e4:fd: 24:48:fc:41:9a:2e:e0:7a:f3:36:cb:68:0f:59:47:1b:a6:44: cb:87:b7:0c:19:f2:52:49:80:bb:2e:ed:0f:fc:90:5a:cb:cf: e7:8b:b2:fe:13:99:b5:27:a7:a2:c7:61:d1:70:e7:00:97:34: 3d:05:56:dc:9c:0d:bf:fd:9e:94:3f:8d:99:3c:b9:ca:bf:d5: 8c:b0:d8:a9:32:93:41:36:ba:8a:99:81:d9:45:71:22:1d:cc: 7b:e1:b1:9d:e5:ff:64:e1:bc:27:a6:af:dd:8b:fb:08:fc:24: 1f:0c:35:18:02:72:55:48:0b:d1:54:4c:b6:4e:61:b0:73:b8: 37:76:84:19:94:2b:f8:0e:0c:96:ee:17:f9:81:16:15:7b:ad: 54:66:60:c9:18:6a:fb:dc:96:14:27:81:f6:47:3f:e4:98:2c: 85:ab:56:e5:97:2f:0e:eb:33:50:25:81:cc:1a:45:5c:30:03: b8:ed:f9:7a:41:b0:2e:76:e0:d8:9f:0b:1f:09:ae:ca:1e:36: d7:39:e2:7c:a6:10:92:79:2d:45:2a:17:b9:a9:18:8e:b9:bf: ae:f6:6f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziNk5UzZxzu1ROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWFlNzUzNTUtMTNiZC00OTRhLWJmOTgtNmJjOTMxYTRlMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz3KVfoxohfwcdjU3qOX/2+nGa87LpKOMMhH cIO1Mb2vLtkn6BDF4/VQeN3rrpzP/sl0VUC5svK6I5fsGi/ID1FXmGzzGY02O/ro R1fFMtHr3g2gnN8F7I05oUbdlwUdxtD29klyn/u3jEBPTZ6EXXVUpb87h2Qv5rkU g8JtdRu4c9NayWkgKhvzmWOrOSqusnOIevUEKVnqbBn2sKgmgoxiVR+06iP0cEVE gW6nyGUPD/TxVe5w2ooqLmlvHtDQ9mF6qb7erKEtMEPQa7GZk+tlTY8t0Cu4EY7t Vl148hwhwF1HvGnhZHE3OYnwAy+mxxsSaEQ1S7PfvV3laMS6hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpL2cqm8C7tBUfIgAjUyH/wpOLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMWQ2MTE5NzAtZDhlMS0z NDJiLWIyNjctMTdmYTExOTdhM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7zttQzpRZ7ynZ7x2g/WzAb4mZZKU2TtQ8Y6IhDLaDk8HDk/SRI/EGa LuB68zbLaA9ZRxumRMuHtwwZ8lJJgLsu7Q/8kFrLz+eLsv4TmbUnp6LHYdFw5wCX ND0FVtycDb/9npQ/jZk8ucq/1Yyw2Kkyk0E2uoqZgdlFcSIdzHvhsZ3l/2ThvCem r92L+wj8JB8MNRgCclVIC9FUTLZOYbBzuDd2hBmUK/gODJbuF/mBFhV7rVRmYMkY avvclhQngfZHP+SYLIWrVuWXLw7rM1AlgcwaRVwwA7jt+XpBsC524NifCx8Jrsoe Ntc54nymEJJ5LUUqF7mpGI65v672b7M= -----END CERTIFICATE-----Generated at Mon Oct 20 15:06:50 2025 by rpki-client