$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/3a0d71c0-f6ce-32d8-810b-ddacd56357bc.roa File: 3a0d71c0-f6ce-32d8-810b-ddacd56357bc.roa (raw, json) Hash identifier: 0/fqmu/lHSPIypJ1OG0zBMEPetMIMmRkenDHwtHzPr0= Subject key identifier: AE:27:14:05:A7:BE:91:92:85:69:9E:F4:D7:29:3A:89:7E:7C:4D:F2 Certificate issuer: /CN=f01c98d6-0a7e-47d2-9b33-584d06920624 Certificate serial: 010D0C9F4328584B6797F80CED7A9B8B9995CC00 Authority key identifier: 92:3D:A8:83:E8:CF:9B:E4:5F:A3:91:96:34:20:65:FD:22:96:CF:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/3a0d71c0-f6ce-32d8-810b-ddacd56357bc.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 401610 IP address blocks: 206.168.104.0/24 maxlen: 24 206.168.105.0/24 maxlen: 24 206.168.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f8:0c:ed:7a:9b:8b:99:95:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01c98d6-0a7e-47d2-9b33-584d06920624 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=4caa4023-54a7-4656-ac52-5a4bc8f5b241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:a9:76:23:3e:d0:20:39:f5:18:ce:3a:87: fb:7f:25:d3:ba:77:4f:b7:84:47:0a:07:81:59:c3: 82:08:ec:da:f0:b1:e8:7c:8b:cc:7f:e7:80:20:3d: 44:e3:0c:34:3e:47:ef:47:c3:9b:15:34:6e:d5:7f: 06:37:44:6a:0e:89:d5:4b:35:3e:3c:f8:7a:67:40: eb:8b:8f:f4:57:80:f7:68:bc:03:04:18:cc:6b:bb: 58:6b:01:b8:6c:63:e1:d1:fd:60:7e:71:f1:bc:77: b6:a4:34:e2:41:61:32:13:d7:59:18:52:60:a1:ef: 95:6d:55:de:bf:46:f1:7c:12:f3:7b:59:a3:74:0f: fe:27:c0:62:77:86:76:a9:b1:1e:64:a5:0b:b8:a2: cb:c7:be:04:e1:63:ae:d3:75:0c:72:93:44:f5:b8: e8:28:e9:53:de:ca:8b:f1:d4:b3:bd:2c:b9:a6:38: 1f:0c:8a:b4:d5:6c:2d:49:4f:21:c5:e8:0c:2c:0f: 05:a6:85:37:94:f9:89:8d:a8:ce:81:62:61:be:c5: 11:a5:ae:e9:18:ae:f3:29:f8:7d:3c:11:4f:24:76: fc:4b:54:3c:da:cd:54:db:20:67:90:cf:c6:2c:3b: 17:2b:73:cb:6a:07:7b:c0:95:65:54:70:63:2c:5f: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:27:14:05:A7:BE:91:92:85:69:9E:F4:D7:29:3A:89:7E:7C:4D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/3a0d71c0-f6ce-32d8-810b-ddacd56357bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.crl X509v3 Authority Key Identifier: keyid:92:3D:A8:83:E8:CF:9B:E4:5F:A3:91:96:34:20:65:FD:22:96:CF:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624.cer sbgp-ipAddrBlock: critical IPv4: 206.168.104.0/23 206.168.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8a:5a:e7:c4:17:2e:64:a5:79:91:28:c3:d4:93:cd:a5:bd: e4:8a:dc:91:78:0a:59:47:c8:1b:f7:7c:91:25:ba:6b:aa:ac: 4b:be:16:9f:fe:02:92:a2:5e:70:c1:14:d1:75:1f:72:0e:d9: fd:6c:d6:85:33:3c:45:fa:e7:da:1d:4c:4f:9a:23:c7:a0:b4: 6f:29:eb:49:a1:82:5a:0c:7f:ae:17:a4:d7:8b:07:33:c4:40: 44:ef:f0:d4:3e:5b:0c:cb:a4:48:69:22:22:d0:f1:23:7f:b3: 65:8b:24:79:7b:3b:c9:33:e4:92:21:d8:c5:df:0a:32:df:4c: 2a:a6:c2:94:3a:72:11:ec:19:7e:de:77:9b:3e:f2:19:a9:2a: 6e:41:23:08:ab:88:24:73:8a:4f:6e:5d:d3:bd:68:d9:e6:53: 77:1d:51:4a:8c:fc:e1:90:29:89:00:f3:83:5b:38:7b:76:c3: cd:30:27:a6:44:59:80:5c:64:59:46:06:f1:e0:d6:0b:6a:26: 4c:53:3c:20:6c:13:1b:2c:87:77:f2:9c:1c:cf:de:fe:6a:04: 55:c5:c2:2f:ec:67:b4:3c:50:87:bd:59:c9:3d:a4:c5:e2:cb: 16:d2:ab:eb:1b:00:29:e0:13:5c:f4:3f:bb:a9:d9:fc:b5:b9: 16:b5:a9:b3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtnl/gM7Xqbi5mVzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAxYzk4ZDYtMGE3ZS00N2QyLTliMzMtNTg0ZDA2OTIw NjI0MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NGNhYTQwMjMtNTRhNy00NjU2LWFjNTItNWE0YmM4ZjViMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ+pdiM+0CA59RjOOof7fyXTundPt4RHCgeB WcOCCOza8LHofIvMf+eAID1E4ww0PkfvR8ObFTRu1X8GN0RqDonVSzU+PPh6Z0Dr i4/0V4D3aLwDBBjMa7tYawG4bGPh0f1gfnHxvHe2pDTiQWEyE9dZGFJgoe+VbVXe v0bxfBLze1mjdA/+J8Bid4Z2qbEeZKULuKLLx74E4WOu03UMcpNE9bjoKOlT3sqL 8dSzvSy5pjgfDIq01WwtSU8hxegMLA8FpoU3lPmJjajOgWJhvsURpa7pGK7zKfh9 PBFPJHb8S1Q82s1U2yBnkM/GLDsXK3PLagd7wJVlVHBjLF/95QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK4nFAWnvpGShWme9NcpOol+fE3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDFj OThkNi0wYTdlLTQ3ZDItOWIzMy01ODRkMDY5MjA2MjQvM2EwZDcxYzAtZjZjZS0z MmQ4LTgxMGItZGRhY2Q1NjM1N2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjAxYzk4ZDYtMGE3ZS00N2QyLTli MzMtNTg0ZDA2OTIwNjI0L2YwMWM5OGQ2LTBhN2UtNDdkMi05YjMzLTU4NGQwNjky MDYyNC5jcmwwHwYDVR0jBBgwFoAUkj2og+jPm+Rfo5GWNCBl/SKWz4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDFjOThkNi0wYTdlLTQ3ZDItOWIzMy01ODRk MDY5MjA2MjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzqhoAwQA zqhrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE2KWufEFy5kpXmRKMPUk82lveSK3JF4CllHyBv3fJElumuq rEu+Fp/+ApKiXnDBFNF1H3IO2f1s1oUzPEX659odTE+aI8egtG8p60mhgloMf64X pNeLBzPEQETv8NQ+WwzLpEhpIiLQ8SN/s2WLJHl7O8kz5JIh2MXfCjLfTCqmwpQ6 chHsGX7ed5s+8hmpKm5BIwiriCRzik9uXdO9aNnmU3cdUUqM/OGQKYkA84NbOHt2 w80wJ6ZEWYBcZFlGBvHg1gtqJkxTPCBsExssh3fynBzP3v5qBFXFwi/sZ7Q8UIe9 Wck9pMXiyxbSq+sbACngE1z0P7up2fy1uRa1qbM= -----END CERTIFICATE-----Generated at Tue Oct 21 17:59:04 2025 by rpki-client