$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa File: f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa (raw, json) Hash identifier: /3w1TpZHhyyiMIe4ZXUHWnekpa10XV1wv2rgebrVs1Y= Subject key identifier: 4B:17:60:A7:DF:50:E5:46:FF:A6:D3:B5:FC:1E:0E:28:68:CD:F5:8C Certificate issuer: /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d Certificate serial: 010D0C9F4328584B5571DABFB71C6FE328D9D640 Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 399240 IP address blocks: 206.168.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:da:bf:b7:1c:6f:e3:28:d9:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=d6ab787e-c8c5-4a2e-9236-2c74bfaf5a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:f0:d9:81:d5:cf:1b:53:ef:8e:7a:bb:7f: 30:8d:fb:2b:e3:49:79:3c:72:06:51:8c:3b:88:38: 89:9f:03:cc:b8:81:44:56:88:e9:f1:d2:67:ae:b6: 46:2a:44:f3:e3:4b:c6:66:cc:84:cc:08:e4:5b:5c: 32:6b:da:91:0a:ee:7c:ef:67:fa:c4:ec:4a:df:12: 65:58:74:df:92:3a:31:6b:fb:46:4c:1b:66:02:ee: f8:17:26:09:94:5a:34:3e:79:3d:37:da:52:c5:b4: ea:88:20:fe:fc:15:0d:80:da:c1:d8:ca:5e:ab:58: ce:10:ca:68:78:92:b0:fb:a1:bd:c1:59:59:a5:79: b4:15:35:33:be:ec:f3:cc:e8:fb:dc:0d:06:b3:cc: d3:aa:06:93:1f:9a:5d:c1:23:4f:3e:00:0e:4c:f2: 5a:40:da:f6:f7:28:0f:14:06:33:6d:4b:18:c5:cd: f2:80:ed:cf:7d:72:74:8d:34:2a:be:55:d6:e3:bb: 38:cb:90:b8:85:c6:15:a3:d5:fd:6d:f0:b3:e8:51: 30:e6:59:32:5d:98:a6:fe:d7:9e:04:b7:1b:56:aa: cc:09:d7:35:ef:95:8d:17:f6:d9:37:e8:57:ee:de: f3:87:80:0c:3d:c4:b8:83:45:16:b8:91:29:81:ee: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:17:60:A7:DF:50:E5:46:FF:A6:D3:B5:FC:1E:0E:28:68:CD:F5:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl X509v3 Authority Key Identifier: keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer sbgp-ipAddrBlock: critical IPv4: 206.168.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:46:20:57:24:83:39:08:a6:36:37:19:51:37:30:b1:d2:66: df:1e:68:94:03:4f:ba:63:33:8b:8f:e6:54:ff:31:45:fa:94: 61:5f:b0:63:ea:9c:81:ef:d2:38:fd:48:4f:5d:1a:eb:04:55: 46:4e:10:e6:32:4d:05:a2:a5:c5:16:25:2d:74:8e:a0:18:47: 3b:6f:a2:29:b4:12:fa:ea:99:c5:8f:36:15:cf:b6:54:5b:07: 8e:18:6a:47:5d:cd:9a:04:09:7a:b3:cf:8b:87:3c:63:e3:98: a0:b0:4d:39:77:c9:3b:d9:3d:89:78:ee:8c:94:16:c0:8b:d4: 1f:c5:98:41:df:ef:c4:98:ea:b0:59:5e:e1:78:e0:31:5d:36: c5:d4:65:9c:e3:2d:2a:8d:85:10:3f:d0:a8:59:be:3c:3a:99: b7:f7:22:4c:02:f4:5f:fc:f3:a3:1c:23:d1:d3:8f:cc:05:4c: b0:6c:03:84:52:ef:1a:bd:ce:bb:14:4b:c8:11:48:ff:1b:9e: 67:5e:a3:58:ce:e2:a6:57:5d:14:8f:57:3d:e7:4f:96:49:c9: d3:32:15:6f:c9:9c:d0:4c:85:9d:9e:ba:2c:2c:e7:5d:f2:3f: c2:03:28:f0:6a:79:9e:28:55:52:26:db:e2:ee:f4:9b:9f:c4: f6:3a:32:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdq/txxv4yjZ1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI2MzZhMWMtYzE0Mi00MWVlLTlmNDMtOTlmNDVjYTJk YzFkMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDZhYjc4N2UtYzhjNS00YTJlLTkyMzYtMmM3NGJmYWY1YTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFfw2YHVzxtT7456u38wjfsr40l5PHIGUYw7 iDiJnwPMuIFEVojp8dJnrrZGKkTz40vGZsyEzAjkW1wya9qRCu5872f6xOxK3xJl WHTfkjoxa/tGTBtmAu74FyYJlFo0Pnk9N9pSxbTqiCD+/BUNgNrB2Mpeq1jOEMpo eJKw+6G9wVlZpXm0FTUzvuzzzOj73A0Gs8zTqgaTH5pdwSNPPgAOTPJaQNr29ygP FAYzbUsYxc3ygO3PfXJ0jTQqvlXW47s4y5C4hcYVo9X9bfCz6FEw5lkyXZim/tee BLcbVqrMCdc175WNF/bZN+hX7t7zh4AMPcS4g0UWuJEpge5nCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsXYKffUOVG/6bTtfweDihozfWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMjYz NmExYy1jMTQyLTQxZWUtOWY0My05OWY0NWNhMmRjMWQvZjcwZmUzNzAtZmEwOC0z ZWIxLWI1MzctOWY4NWUxYzdjZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjI2MzZhMWMtYzE0Mi00MWVlLTlm NDMtOTlmNDVjYTJkYzFkL2YyNjM2YTFjLWMxNDItNDFlZS05ZjQzLTk5ZjQ1Y2Ey ZGMxZC5jcmwwHwYDVR0jBBgwFoAUanPt0X13vMGAikZJ/87Wtmj11XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMjYzNmExYy1jMTQyLTQxZWUtOWY0My05OWY0 NWNhMmRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJGIFckgzkIpjY3GVE3MLHSZt8eaJQDT7pjM4uP5lT/MUX6lGFfsGPq nIHv0jj9SE9dGusEVUZOEOYyTQWipcUWJS10jqAYRztvoim0EvrqmcWPNhXPtlRb B44YakddzZoECXqzz4uHPGPjmKCwTTl3yTvZPYl47oyUFsCL1B/FmEHf78SY6rBZ XuF44DFdNsXUZZzjLSqNhRA/0KhZvjw6mbf3IkwC9F/886McI9HTj8wFTLBsA4RS 7xq9zrsUS8gRSP8bnmdeo1jO4qZXXRSPVz3nT5ZJydMyFW/JnNBMhZ2euiws513y P8IDKPBqeZ4oVVIm2+Lu9JufxPY6Mhs= -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:28 2025 by rpki-client