$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/0ed1550c-aff3-3ad2-a990-db60d4976f20.roa File: 0ed1550c-aff3-3ad2-a990-db60d4976f20.roa (raw, json) Hash identifier: STo4rCdagFB2GVYsi04hwepgv0gkpJ99avSGJ31xH8Q= Subject key identifier: 41:2F:FC:BE:A4:16:28:25:CB:0A:7E:AC:01:F1:D2:65:17:35:F7:EA Certificate issuer: /CN=3905609c-39ed-4063-a3a8-68871c079747 Certificate serial: 010D0C9F4328584B0B76A79BE09F9E6AC3B19100 Authority key identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/0ed1550c-aff3-3ad2-a990-db60d4976f20.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 216.245.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a7:9b:e0:9f:9e:6a:c3:b1:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3905609c-39ed-4063-a3a8-68871c079747 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=fc7dde22-85fa-469b-bf2a-8851a6957028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:f9:41:d1:b4:f4:7d:77:f1:a8:6b:e5:98: c5:a6:36:7e:d7:83:52:78:14:25:29:5b:5c:d9:02: 9b:14:7a:79:a3:0a:a3:49:db:86:82:b2:89:df:9a: 6c:59:d8:00:1b:26:60:8b:7a:65:63:fb:5f:0f:d3: 40:33:2c:3e:55:4b:6c:81:9b:59:05:e5:0d:c4:69: 9c:52:f2:17:2d:6d:b5:ac:7a:ee:1e:cc:01:88:25: ea:ca:46:f1:27:05:e2:39:67:f7:48:c6:fc:dc:1f: 9c:eb:a5:58:0f:a5:47:1d:d3:91:8c:2f:c2:e7:80: 75:15:3e:bb:7d:19:59:d4:e4:52:34:91:08:11:f5: 9d:26:f8:36:10:6d:1c:f7:3e:91:76:1b:4e:bd:68: 33:58:80:92:4d:36:0a:b8:88:9f:2b:01:98:91:2d: a7:56:e0:e7:b7:dd:14:f3:65:3b:cc:4c:a0:f6:ad: dd:c7:4a:0c:e0:fe:09:8e:d6:8f:eb:99:94:4f:8c: cb:d3:f3:20:08:c8:f8:92:fb:0f:00:01:52:90:b6: e7:4a:f5:a8:8f:f5:5a:6e:38:db:71:5d:7a:f9:b5: f0:f5:e4:f3:8e:97:19:54:e1:7c:f0:bd:02:fb:21: e2:46:70:b8:30:fa:5d:dc:df:d0:d0:d5:1b:bf:86: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2F:FC:BE:A4:16:28:25:CB:0A:7E:AC:01:F1:D2:65:17:35:F7:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/0ed1550c-aff3-3ad2-a990-db60d4976f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.crl X509v3 Authority Key Identifier: keyid:BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer sbgp-ipAddrBlock: critical IPv4: 216.245.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ec:35:bd:e0:c7:07:0d:21:a1:38:13:7c:9a:ed:1d:87:6a: f6:2c:d9:ef:c5:f3:0b:90:30:93:5a:0e:8d:51:85:ac:bc:5a: de:08:59:7b:0e:5f:0d:ff:af:cb:e7:fa:15:b0:89:74:16:c1: 6c:49:69:1f:e8:d5:b6:5a:f6:1f:a4:5e:2d:d8:8b:70:6b:22: 5f:0b:b7:25:43:63:cd:5d:ea:39:56:c5:7a:9f:98:22:50:3a: 61:4c:8e:c1:0e:b1:d4:80:fd:50:31:81:c3:46:4c:b8:17:97: 4b:8f:f5:3d:b3:d3:68:c2:f8:43:77:26:0b:25:67:a6:09:13: b2:26:ef:4a:ee:0d:a7:d1:d7:9e:9c:b6:fe:7e:83:96:47:9d: 8f:10:cf:52:a2:29:70:70:5e:0e:b5:da:1a:59:f1:67:38:b4: f3:b8:82:4e:38:f0:5a:d5:0f:35:8b:5d:37:f9:ff:94:88:e0: 46:5c:07:9e:dc:17:94:8c:e1:69:a5:59:4d:f1:8b:2b:0e:9b: ef:2b:f2:f8:75:9c:bb:a3:3c:d5:b1:0b:c2:2c:62:e0:67:c4: 90:4c:20:3e:e9:71:90:b0:dc:b1:66:7f:f7:7a:54:4a:28:09: 49:75:9a:34:82:a6:65:2e:51:33:fa:c7:9d:68:67:59:57:57: 5c:2a:42:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqeb4J+easOxkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwNTYwOWMtMzllZC00MDYzLWEzYTgtNjg4NzFjMDc5 NzQ3MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZmM3ZGRlMjItODVmYS00NjliLWJmMmEtODg1MWE2OTU3MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVb5QdG09H138ahr5ZjFpjZ+14NSeBQlKVtc 2QKbFHp5owqjSduGgrKJ35psWdgAGyZgi3plY/tfD9NAMyw+VUtsgZtZBeUNxGmc UvIXLW21rHruHswBiCXqykbxJwXiOWf3SMb83B+c66VYD6VHHdORjC/C54B1FT67 fRlZ1ORSNJEIEfWdJvg2EG0c9z6RdhtOvWgzWICSTTYKuIifKwGYkS2nVuDnt90U 82U7zEyg9q3dx0oM4P4JjtaP65mUT4zL0/MgCMj4kvsPAAFSkLbnSvWoj/Vabjjb cV16+bXw9eTzjpcZVOF88L0C+yHiRnC4MPpd3N/Q0NUbv4YyyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEv/L6kFiglywp+rAHx0mUXNffqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTA1 NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3MWMwNzk3NDcvMGVkMTU1MGMtYWZmMy0z YWQyLWE5OTAtZGI2MGQ0OTc2ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzkwNTYwOWMtMzllZC00MDYzLWEz YTgtNjg4NzFjMDc5NzQ3LzM5MDU2MDljLTM5ZWQtNDA2My1hM2E4LTY4ODcxYzA3 OTc0Ny5jcmwwHwYDVR0jBBgwFoAUurzxCk+lqgiH4f4d4fQk8z6GNdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTA1NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3 MWMwNzk3NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PWSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrsNb3gxwcNIaE4E3ya7R2HavYs2e/F8wuQMJNaDo1Rhay8Wt4IWXsO Xw3/r8vn+hWwiXQWwWxJaR/o1bZa9h+kXi3Yi3BrIl8LtyVDY81d6jlWxXqfmCJQ OmFMjsEOsdSA/VAxgcNGTLgXl0uP9T2z02jC+EN3JgslZ6YJE7Im70ruDafR156c tv5+g5ZHnY8Qz1KiKXBwXg612hpZ8Wc4tPO4gk448FrVDzWLXTf5/5SI4EZcB57c F5SM4WmlWU3xiysOm+8r8vh1nLujPNWxC8IsYuBnxJBMID7pcZCw3LFmf/d6VEoo CUl1mjSCpmUuUTP6x51oZ1lXV1wqQhE= -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:05 2025 by rpki-client