$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa File: 3ac695ae-0338-38d6-af38-2884b857a1a2.roa (raw, json) Hash identifier: PCMUzrQ3/H/p6lwvLMXtp19BkQu/1EpthT7wPnelNIA= Subject key identifier: 47:36:AA:89:24:4D:FB:2B:5F:E3:BA:0A:23:04:21:21:B1:50:0B:5B Certificate issuer: /CN=7398f99d-b512-4640-b38b-2c84db430afb Certificate serial: 010D0C9F4328584B56D71858859DBE43BCE57800 Authority key identifier: 85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 206.204.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:18:58:85:9d:be:43:bc:e5:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7398f99d-b512-4640-b38b-2c84db430afb Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=8ad48ffb-3367-465a-bfa4-58a2aadb98f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:72:39:65:06:c3:95:ae:9c:49:07:14:dc: 4a:56:fe:40:93:ad:7a:da:a1:ca:21:11:03:18:46: c2:82:69:f5:d0:9e:a4:33:a6:d7:84:22:99:d8:c9: 2b:0f:9b:ae:68:7b:d9:14:df:40:8b:ee:7c:db:f7: 97:89:f8:fa:34:6e:09:6a:c1:e2:f0:65:43:25:ce: ea:42:9f:f0:15:cf:51:5f:75:9e:9e:ad:bb:c0:23: 65:8b:41:3c:51:2e:b0:b4:7d:79:85:5b:44:a2:83: 8c:a7:53:ad:cf:61:1f:66:7d:32:10:5b:d7:a9:31: 98:3a:7d:57:48:da:16:e3:55:79:95:7a:a0:5a:70: 83:33:ac:6a:70:af:75:fe:ea:9e:9c:1e:fa:33:d0: 3f:7b:c9:80:22:ff:68:52:5c:6f:b4:c7:40:4f:0d: f1:2f:03:66:de:8c:a3:dd:d0:16:22:14:a1:5d:49: 5f:4b:04:94:57:59:e0:8b:23:7e:63:52:77:b8:c2: c9:6f:15:1a:f4:e6:cc:f1:77:f6:b7:eb:45:9b:91: 69:f3:1a:d2:bd:3a:43:50:ea:42:a2:84:ce:5d:a2: 0e:96:a6:06:41:f8:35:8a:cd:a0:11:fc:1f:b3:c5: 20:49:bb:67:d4:7a:77:f7:b8:fa:90:5c:54:9a:8c: 8e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:36:AA:89:24:4D:FB:2B:5F:E3:BA:0A:23:04:21:21:B1:50:0B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl X509v3 Authority Key Identifier: keyid:85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer sbgp-ipAddrBlock: critical IPv4: 206.204.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:15:d9:97:44:72:df:56:89:cb:3d:90:61:19:b2:96:4b:7d: 41:5f:4a:1a:44:e1:00:34:1b:29:22:8d:01:bd:d2:76:48:2a: 26:00:1c:af:28:52:3a:81:0f:15:2f:bb:2e:fa:4c:41:94:a9: 5f:24:bf:bc:73:00:82:76:1b:7c:02:d9:8b:ad:2c:b0:aa:cd: 82:dc:f4:ee:4d:52:a6:65:8a:3a:58:04:05:14:ce:a8:73:76: 96:79:e7:2b:c1:6b:0a:63:8c:87:3f:45:bf:a7:b1:b4:23:2e: 9e:f4:ec:c8:d5:4a:62:ec:9a:05:e6:59:18:c9:e5:8f:4b:07: e7:d7:e0:2d:06:81:aa:c5:c2:fe:4d:7d:1a:d0:75:ff:1b:e9: 4f:5c:b5:48:84:74:be:ee:17:17:e3:24:00:21:8e:ca:33:cd: 31:b5:d1:7b:91:45:c7:bf:5f:21:c9:dd:e5:6d:79:4a:fd:ff: ed:07:32:d7:69:ad:33:d3:c8:aa:e1:c3:60:f8:15:a7:19:a0: 13:cf:7d:2d:71:4f:7f:40:76:c8:0e:ca:61:7a:e8:3e:09:e6: af:f7:92:24:4a:31:a1:d3:86:0d:60:4c:a5:7f:4e:97:e3:b7: bf:64:da:ea:7b:63:36:b9:80:9c:2b:e3:1e:a1:cd:d8:c8:5a: 95:87:4e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1xhYhZ2+Q7zleAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM5OGY5OWQtYjUxMi00NjQwLWIzOGItMmM4NGRiNDMw YWZiMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk OGFkNDhmZmItMzM2Ny00NjVhLWJmYTQtNThhMmFhZGI5OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaVyOWUGw5WunEkHFNxKVv5Ak6162qHKIRED GEbCgmn10J6kM6bXhCKZ2MkrD5uuaHvZFN9Ai+582/eXifj6NG4JasHi8GVDJc7q Qp/wFc9RX3Wenq27wCNli0E8US6wtH15hVtEooOMp1Otz2EfZn0yEFvXqTGYOn1X SNoW41V5lXqgWnCDM6xqcK91/uqenB76M9A/e8mAIv9oUlxvtMdATw3xLwNm3oyj 3dAWIhShXUlfSwSUV1ngiyN+Y1J3uMLJbxUa9ObM8Xf2t+tFm5Fp8xrSvTpDUOpC ooTOXaIOlqYGQfg1is2gEfwfs8UgSbtn1Hp397j6kFxUmoyOewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc2qokkTfsrX+O6CiMEISGxUAtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4 Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0ZGI0MzBhZmIvM2FjNjk1YWUtMDMzOC0z OGQ2LWFmMzgtMjg4NGI4NTdhMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzM5OGY5OWQtYjUxMi00NjQwLWIz OGItMmM4NGRiNDMwYWZiLzczOThmOTlkLWI1MTItNDY0MC1iMzhiLTJjODRkYjQz MGFmYi5jcmwwHwYDVR0jBBgwFoAUheeQdgYu1GrTYvqeznJWQpq2z8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0 ZGI0MzBhZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsz6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgV2ZdEct9Wics9kGEZspZLfUFfShpE4QA0GykijQG90nZIKiYAHK8o UjqBDxUvuy76TEGUqV8kv7xzAIJ2G3wC2YutLLCqzYLc9O5NUqZlijpYBAUUzqhz dpZ55yvBawpjjIc/Rb+nsbQjLp707MjVSmLsmgXmWRjJ5Y9LB+fX4C0GgarFwv5N fRrQdf8b6U9ctUiEdL7uFxfjJAAhjsozzTG10XuRRce/XyHJ3eVteUr9/+0HMtdp rTPTyKrhw2D4FacZoBPPfS1xT39AdsgOymF66D4J5q/3kiRKMaHThg1gTKV/Tpfj t79k2up7Yza5gJwr4x6hzdjIWpWHTuI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:19:36 2025 by rpki-client