$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa File: d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa (raw, json) Hash identifier: wFl2K0svcQZplpNH/arTr7H1lNdO6nv1LHez8SjFJKM= Subject key identifier: 6C:79:D8:2D:88:F2:C0:C5:75:30:16:64:B9:B9:B2:6F:5C:88:15:53 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584B64CD6A8DF735904994E08740 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36492 IP address blocks: 216.252.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6a:8d:f7:35:90:49:94:e0:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8a63095a-77c9-447d-bea6-dea3ef1f9acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:f5:91:fa:03:ca:22:61:bf:56:1b:83:b9: 1d:07:ce:38:dd:50:72:e2:b2:c5:78:28:07:74:69: 0c:0f:78:77:36:0f:89:e2:7a:23:5a:0f:e7:d0:62: 01:8d:ca:90:12:75:7f:3f:c9:44:a2:58:b3:44:3c: ec:00:de:af:c9:cd:3d:87:89:d5:c0:e6:eb:2b:59: 89:f2:6b:9c:5f:b6:b5:cd:12:1c:c0:c7:27:7b:26: 0f:4b:be:fc:41:e2:d0:7f:8f:10:11:d9:73:d3:d4: 51:18:64:26:0a:d9:52:69:3c:d3:b5:55:17:9a:ff: d9:34:74:12:2a:f4:f1:17:64:ed:cb:05:9d:90:64: 01:16:db:9d:9d:03:39:d5:14:18:95:53:4a:56:ad: 73:3c:68:ac:41:d1:56:b1:8b:ff:f4:dc:b2:14:86: 19:24:a4:3d:5f:f7:54:70:aa:98:bc:1b:01:11:97: 6f:a3:ca:6c:4c:fa:ca:fa:a8:71:af:ce:a8:1c:66: 7d:e6:4e:1a:df:6a:40:92:9a:cf:ac:dd:4d:59:52: ea:82:ff:b5:87:54:c8:41:06:9f:8c:1d:77:e1:6a: 1f:45:1f:b3:0a:2c:cd:28:79:da:89:8a:9e:8c:ba: c8:46:3f:f3:fc:c3:17:91:af:66:ee:15:ce:9a:c8: c7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:79:D8:2D:88:F2:C0:C5:75:30:16:64:B9:B9:B2:6F:5C:88:15:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d3d8afbd-2ac9-3c4d-8849-a6744709a78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 216.252.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:54:76:b6:ab:c8:19:2e:a8:d8:75:ab:81:ab:25:41:48:da: e5:0a:8a:81:a1:c0:52:ee:bd:d0:fe:0f:ac:46:53:7c:39:d4: 0c:fa:14:e5:ba:26:c9:a8:e1:a8:ed:f4:59:d4:a2:3e:97:22: d7:01:99:17:bf:d1:45:16:07:d8:5b:22:84:49:1f:b9:ad:8f: 3d:25:af:e0:51:bc:ae:3b:ec:dd:03:78:25:7e:f8:43:90:25: b8:c0:72:57:94:36:95:d1:9d:96:cc:2a:94:b6:6b:e3:23:cf: 9a:12:93:8d:1d:3a:f2:20:c1:f3:0c:f6:c9:23:f9:c4:8a:31: 8e:35:0b:ef:35:da:cb:36:28:38:3a:11:f2:90:02:91:8e:4f: bb:87:24:5d:59:64:84:97:9d:a3:82:56:cc:d8:11:50:ed:bd: 54:69:f9:de:e2:ca:4c:b3:dd:6f:9a:fe:5a:18:a2:8a:a3:71: f4:bd:d6:f7:7c:d4:48:09:7b:bf:ab:6d:4e:38:b1:ac:6e:b0: d8:28:30:86:97:e8:b2:3d:cb:d1:70:9d:04:ff:a5:c1:9c:24: 71:bb:55:f1:7f:be:16:57:91:ee:4e:ae:6c:cb:c0:d0:54:6b: 36:cc:4f:db:5f:bc:5d:8d:84:08:04:48:6b:65:9e:08:26:22: 29:a7:5e:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWqN9zWQSZTgh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGE2MzA5NWEtNzdjOS00NDdkLWJlYTYtZGVhM2VmMWY5YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuL1kfoDyiJhv1Ybg7kdB8443VBy4rLFeCgH dGkMD3h3Ng+J4nojWg/n0GIBjcqQEnV/P8lEolizRDzsAN6vyc09h4nVwObrK1mJ 8mucX7a1zRIcwMcneyYPS778QeLQf48QEdlz09RRGGQmCtlSaTzTtVUXmv/ZNHQS KvTxF2TtywWdkGQBFtudnQM51RQYlVNKVq1zPGisQdFWsYv/9NyyFIYZJKQ9X/dU cKqYvBsBEZdvo8psTPrK+qhxr86oHGZ95k4a32pAkprPrN1NWVLqgv+1h1TIQQaf jB134WofRR+zCizNKHnaiYqejLrIRj/z/MMXka9m7hXOmsjH/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx52C2I8sDFdTAWZLm5sm9ciBVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvZDNkOGFmYmQtMmFjOS0z YzRkLTg4NDktYTY3NDQ3MDlhNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBUdraryBkuqNh1q4GrJUFI2uUKioGhwFLuvdD+D6xGU3w51Az6FOW6 Jsmo4ajt9FnUoj6XItcBmRe/0UUWB9hbIoRJH7mtjz0lr+BRvK477N0DeCV++EOQ JbjAcleUNpXRnZbMKpS2a+Mjz5oSk40dOvIgwfMM9skj+cSKMY41C+812ss2KDg6 EfKQApGOT7uHJF1ZZISXnaOCVszYEVDtvVRp+d7iykyz3W+a/loYooqjcfS91vd8 1EgJe7+rbU44saxusNgoMIaX6LI9y9FwnQT/pcGcJHG7VfF/vhZXke5OrmzLwNBU azbMT9tfvF2NhAgESGtlnggmIimnXqE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:40 2025 by rpki-client