$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/0b3dc230-8d9f-32f5-b565-104fe075f389.roa File: 0b3dc230-8d9f-32f5-b565-104fe075f389.roa (raw, json) Hash identifier: dj71DWsco4NAH5MPd8/a0TLi/CeqgI9ktw0Y6uUMlLg= Subject key identifier: E0:B4:54:01:2E:C1:B8:8C:CC:EF:FB:BF:81:F9:22:D0:F5:5C:37:EE Certificate issuer: /CN=66108100-1fc2-4d23-b89e-3e81cc652270 Certificate serial: 010D0C9F4328584B8EACE96C4F468C6C491B4680 Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/0b3dc230-8d9f-32f5-b565-104fe075f389.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36614 IP address blocks: 204.246.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e9:6c:4f:46:8c:6c:49:1b:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=248d680f-7b40-4143-8dec-7b2169579936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:cc:a7:a5:33:51:3c:88:c8:f1:4a:e7:3c: 83:77:db:2d:16:10:6a:fb:27:bb:42:19:b7:ba:21: 63:6c:f4:98:28:77:78:69:89:a9:ec:bc:8c:f0:2a: e9:17:e2:1d:d0:22:13:0d:23:93:b0:5d:99:9a:e2: 3c:b6:94:21:c8:fb:c5:40:35:85:03:3e:e2:bd:28: 73:f0:21:4b:22:47:a9:7c:78:77:c3:1e:04:b2:5c: 41:16:d9:94:ad:b0:ed:8b:c4:f6:33:f9:44:7d:b0: 69:d0:ff:1b:42:61:cf:e9:a4:e2:5f:75:b5:f3:43: bc:3c:30:69:b8:d1:4d:a2:84:55:f3:74:9e:cd:26: 07:06:5e:38:04:5c:dd:6f:e2:51:03:eb:88:94:a4: 8a:2e:be:c7:01:9a:14:d7:79:4a:f0:a3:86:98:fd: be:50:b2:93:e1:5c:d2:65:a6:57:03:7b:3e:c9:2a: 73:52:6f:df:ad:63:e9:48:60:5f:2c:af:bb:26:a5: f6:d9:48:8a:29:6a:12:92:1b:1a:f7:fe:0c:2a:57: da:9a:e4:22:15:00:15:67:26:9e:f6:54:ab:cb:3c: b9:47:eb:1a:29:a5:2b:4c:2e:9c:af:a0:a9:9f:9a: 95:fb:8f:f1:95:76:6b:de:ad:af:07:99:04:79:56: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B4:54:01:2E:C1:B8:8C:CC:EF:FB:BF:81:F9:22:D0:F5:5C:37:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/0b3dc230-8d9f-32f5-b565-104fe075f389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl X509v3 Authority Key Identifier: keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer sbgp-ipAddrBlock: critical IPv4: 204.246.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:20:ad:fc:b2:a2:99:4c:86:29:51:8e:36:87:53:54:0c:7b: a4:93:89:4b:3e:6d:0f:1e:7f:54:36:8c:7f:7b:c6:78:e7:59: 3a:d7:3c:84:10:78:45:bb:de:91:fb:85:65:b6:53:bc:2e:10: b6:71:7c:bd:d7:4d:2e:bf:83:42:00:69:54:70:d2:c8:ee:a2: 02:c3:97:1e:70:67:a1:16:1d:12:e5:e3:95:b6:63:8b:76:c9: 5e:34:fb:e2:b0:57:15:99:b9:e1:f0:7f:df:9f:5f:36:e2:32: dc:15:2b:2f:8f:6c:48:ce:32:4b:14:8c:52:1c:08:c6:ee:14: 01:f2:16:7d:ed:95:09:70:f3:2c:30:49:b7:40:b5:67:0e:bc: 3c:61:6a:5b:8c:76:ab:a3:1e:80:3a:71:3e:67:ff:9f:f1:e0: e2:5d:63:b8:1f:05:f5:01:25:be:65:be:1d:aa:8f:f2:ca:23: db:5d:07:3e:27:94:99:63:9a:00:89:ce:a4:91:6a:34:f0:9c: e4:2a:2d:60:0b:5b:e0:6e:f4:f7:6f:61:90:67:5d:7b:a0:21: 32:1e:2d:dc:40:9c:77:c5:95:33:a7:0b:da:8e:6f:2c:d2:bf: 63:06:80:3a:35:83:7d:1d:f6:0a:66:c6:61:6b:b9:25:42:d8: 3e:a0:47:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOlsT0aMbEkbRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYxMDgxMDAtMWZjMi00ZDIzLWI4OWUtM2U4MWNjNjUy MjcwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjQ4ZDY4MGYtN2I0MC00MTQzLThkZWMtN2IyMTY5NTc5OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrzMp6UzUTyIyPFK5zyDd9stFhBq+ye7Qhm3 uiFjbPSYKHd4aYmp7LyM8CrpF+Id0CITDSOTsF2ZmuI8tpQhyPvFQDWFAz7ivShz 8CFLIkepfHh3wx4EslxBFtmUrbDti8T2M/lEfbBp0P8bQmHP6aTiX3W180O8PDBp uNFNooRV83SezSYHBl44BFzdb+JRA+uIlKSKLr7HAZoU13lK8KOGmP2+ULKT4VzS ZaZXA3s+ySpzUm/frWPpSGBfLK+7JqX22UiKKWoSkhsa9/4MKlfamuQiFQAVZyae 9lSryzy5R+saKaUrTC6cr6Cpn5qV+4/xlXZr3q2vB5kEeVbWWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC0VAEuwbiMzO/7v4H5ItD1XDfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjEw ODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgxY2M2NTIyNzAvMGIzZGMyMzAtOGQ5Zi0z MmY1LWI1NjUtMTA0ZmUwNzVmMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjYxMDgxMDAtMWZjMi00ZDIzLWI4 OWUtM2U4MWNjNjUyMjcwLzY2MTA4MTAwLTFmYzItNGQyMy1iODllLTNlODFjYzY1 MjI3MC5jcmwwHwYDVR0jBBgwFoAUS/ubJjcpjIkvFL3SC1nWsO5jAEcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NjEwODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgx Y2M2NTIyNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzPYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsgrfyyoplMhilRjjaHU1QMe6STiUs+bQ8ef1Q2jH97xnjnWTrXPIQQ eEW73pH7hWW2U7wuELZxfL3XTS6/g0IAaVRw0sjuogLDlx5wZ6EWHRLl45W2Y4t2 yV40++KwVxWZueHwf9+fXzbiMtwVKy+PbEjOMksUjFIcCMbuFAHyFn3tlQlw8yww SbdAtWcOvDxhaluMdqujHoA6cT5n/5/x4OJdY7gfBfUBJb5lvh2qj/LKI9tdBz4n lJljmgCJzqSRajTwnOQqLWALW+Bu9PdvYZBnXXugITIeLdxAnHfFlTOnC9qObyzS v2MGgDo1g30d9gpmxmFruSVC2D6gR4Y= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:50 2025 by rpki-client