$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/fa3f5ca8-e2a5-31b4-9112-786903fa06a3.roa File: fa3f5ca8-e2a5-31b4-9112-786903fa06a3.roa (raw, json) Hash identifier: JoTQ6wb+2O7UBBJvBH0aoU7omSWsilIlkVsE5rrRwBA= Subject key identifier: 15:3A:E1:E7:EE:FD:7F:79:E2:28:19:C7:9E:91:DA:72:A0:93:57:DD Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Certificate serial: 010D0C9F4328584B48E1B302FB3B675FB6443240 Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/fa3f5ca8-e2a5-31b4-9112-786903fa06a3.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 393581 IP address blocks: 206.57.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b3:02:fb:3b:67:5f:b6:44:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e3e4a1f0-d483-42ee-b0f2-ac82da888b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:26:5e:55:3a:fa:a1:88:af:f1:29:2d:56: 89:d1:7c:c9:af:82:a4:5c:e9:c6:97:72:d1:ee:a0: 49:52:2d:24:a9:b4:93:d1:61:35:5d:9c:a5:73:0d: fc:d1:93:0c:db:21:bf:b0:d5:ad:d0:72:bb:89:ac: 47:64:51:27:b1:2e:77:79:ba:85:e0:3c:c4:ef:35: ea:be:7a:82:ed:9c:77:2b:14:f9:58:2c:6d:69:3b: d3:6e:40:bc:14:9d:d8:5e:19:c7:2d:d3:0e:eb:64: 56:6b:33:1f:9f:fe:77:70:cd:59:bc:19:e6:5f:25: df:7a:53:c9:6e:a4:8d:f5:f2:2c:d5:f9:f6:4e:dc: 58:a0:27:93:a7:44:f8:cd:27:dc:30:0e:1b:20:f5: c5:81:bf:3c:95:18:6d:a3:be:3b:c3:5c:50:90:41: 56:c2:dc:67:89:9a:1c:f3:a1:88:ad:db:a5:16:34: 35:ab:3a:4a:7a:57:20:2c:ca:b3:22:0b:b9:ae:06: c1:64:ff:e9:8f:c4:a7:37:c8:47:34:d3:96:e4:d7: 98:23:6d:19:53:1d:db:ef:eb:cf:1c:04:dc:e3:33: 49:19:31:f5:76:8d:73:d0:07:07:c5:4e:dc:0c:3f: 91:ea:98:64:0f:85:43:18:87:51:b5:e6:ca:c1:e1: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3A:E1:E7:EE:FD:7F:79:E2:28:19:C7:9E:91:DA:72:A0:93:57:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/fa3f5ca8-e2a5-31b4-9112-786903fa06a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl X509v3 Authority Key Identifier: keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer sbgp-ipAddrBlock: critical IPv4: 206.57.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9a:6b:cd:57:fe:4e:5b:63:8b:a0:f8:4a:eb:12:63:77:a4: e6:4e:45:1d:36:36:68:0d:1e:59:2f:60:6a:d9:25:26:17:24: a8:00:93:2b:49:2f:b0:ef:9c:fc:ae:89:0a:b3:7c:a2:86:47: 56:29:8e:d1:35:a1:d7:7c:cd:0c:98:31:d3:e5:90:a0:cb:26: 73:9f:8d:f7:bd:39:2e:22:a5:a9:dd:a3:44:e1:04:0b:b4:e4: 58:32:5d:fa:be:b2:75:08:e9:6e:80:bb:13:fc:9b:73:22:9f: 79:75:49:1b:a0:fb:03:95:80:8e:5a:dd:fb:22:21:f9:ea:19: e4:0a:82:c4:3d:34:d8:61:5c:0d:e4:5a:66:a0:59:7c:5a:b4: 9f:69:68:e4:6f:fa:64:3d:cd:f5:53:c4:d9:df:73:03:5f:58: 51:08:b6:a9:d2:16:11:ee:28:07:82:4d:ee:b4:21:f3:73:76: 44:e3:3b:28:16:8a:b3:32:44:4c:cf:b5:b0:d4:63:8d:d0:a9: 16:e2:21:d0:48:51:d9:13:f0:57:0a:73:1c:81:dd:b4:a1:66: 06:6d:05:df:fa:eb:14:cb:8c:3f:52:2f:bc:35:74:10:9d:30: cd:51:56:a0:da:ba:c4:e7:7d:83:f1:29:79:3d:f8:d3:b5:6b: a0:d1:75:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bMC+ztnX7ZEMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy ZTI4MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTNlNGExZjAtZDQ4My00MmVlLWIwZjItYWM4MmRhODg4YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDAmXlU6+qGIr/EpLVaJ0XzJr4KkXOnGl3LR 7qBJUi0kqbST0WE1XZylcw380ZMM2yG/sNWt0HK7iaxHZFEnsS53ebqF4DzE7zXq vnqC7Zx3KxT5WCxtaTvTbkC8FJ3YXhnHLdMO62RWazMfn/53cM1ZvBnmXyXfelPJ bqSN9fIs1fn2TtxYoCeTp0T4zSfcMA4bIPXFgb88lRhto747w1xQkEFWwtxniZoc 86GIrdulFjQ1qzpKelcgLMqzIgu5rgbBZP/pj8SnN8hHNNOW5NeYI20ZUx3b7+vP HATc4zNJGTH1do1z0AcHxU7cDD+R6phkD4VDGIdRtebKweGVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU64efu/X954igZx56R2nKgk1fdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0 MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvZmEzZjVjYTgtZTJhNS0z MWI0LTkxMTItNzg2OTAzZmEwNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3 YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjmXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImaa81X/k5bY4ug+ErrEmN3pOZORR02NmgNHlkvYGrZJSYXJKgAkytJ L7DvnPyuiQqzfKKGR1YpjtE1odd8zQyYMdPlkKDLJnOfjfe9OS4ipando0ThBAu0 5FgyXfq+snUI6W6AuxP8m3Min3l1SRug+wOVgI5a3fsiIfnqGeQKgsQ9NNhhXA3k WmagWXxatJ9paORv+mQ9zfVTxNnfcwNfWFEItqnSFhHuKAeCTe60IfNzdkTjOygW irMyREzPtbDUY43QqRbiIdBIUdkT8FcKcxyB3bShZgZtBd/66xTLjD9SL7w1dBCd MM1RVqDausTnfYPxKXk9+NO1a6DRdR8= -----END CERTIFICATE-----Generated at Wed Oct 22 00:51:40 2025 by rpki-client