$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa File: 3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa (raw, json) Hash identifier: N+u75HXC6unZ3Xj/FGEgtdrT/dkFdQN+xlTReLQEidM= Subject key identifier: C4:EA:5C:77:D1:06:7D:FE:C2:9D:0D:F9:32:9F:3A:46:83:61:EE:69 Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Certificate serial: 010D0C9F4328584B84E7695BEDEC87A28E501660 Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 376 IP address blocks: 205.151.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:69:5b:ed:ec:87:a2:8e:50:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7b297e5d-2a86-43c5-b5e6-ef450ae6801b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:63:43:59:45:55:eb:3d:8e:46:0c:e5:ce:25: 62:af:92:f2:7b:b1:e4:a5:8f:30:d1:0c:d7:fd:14: aa:d5:b2:83:58:7e:a9:ec:7e:91:19:4e:8f:d2:61: c2:31:cd:ae:16:8a:7f:d2:ac:63:48:cb:f3:ab:f2: 3b:79:40:a4:c5:30:31:cb:fa:3e:60:d6:36:7b:ac: 9d:d6:4b:60:08:45:e4:4b:68:0c:3e:30:ef:00:20: b2:a3:8b:b6:69:a3:1d:38:e7:0d:76:cd:f8:62:f0: 96:09:ee:ff:63:03:1a:a5:30:fa:7b:75:49:63:b1: aa:a2:c4:1b:34:36:a3:d5:07:a8:c3:62:71:43:7b: f4:f1:e1:6d:e1:01:e0:97:71:7f:57:36:28:72:14: 8d:f3:49:57:3b:a9:02:eb:94:1f:4c:98:5e:b0:86: 49:88:de:82:07:9d:27:2e:09:f9:04:61:9e:31:2a: 26:3d:67:81:2b:2f:c2:72:ee:e5:b0:6d:5d:1a:b3: 4f:38:df:bb:a1:87:a0:5d:46:01:8a:be:09:22:1c: 77:09:89:5f:b7:47:0b:74:9c:00:7e:2d:90:37:6c: 9d:82:68:b0:02:b9:41:e2:6d:3c:47:7b:77:13:55: b9:60:38:ac:21:ae:19:a9:1d:f5:b1:72:86:58:71: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:5C:77:D1:06:7D:FE:C2:9D:0D:F9:32:9F:3A:46:83:61:EE:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl X509v3 Authority Key Identifier: keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer sbgp-ipAddrBlock: critical IPv4: 205.151.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2d:6e:5f:5d:fc:77:43:6d:97:0c:79:d7:be:63:d8:34:38: 7c:65:ff:87:00:68:23:84:9a:fa:8c:1e:e9:16:ce:15:fc:ee: cb:c9:29:49:ea:c0:a1:f2:35:d1:81:03:d2:05:5f:6c:64:27: e4:22:23:0c:5a:ad:c8:ec:8e:97:4f:59:11:f0:40:b9:74:06: d5:fe:d2:8e:c9:a4:ce:45:27:1a:e6:9f:72:cb:a8:d9:7b:cb: 03:8e:40:ed:d6:04:9c:01:20:02:f6:98:c6:3e:04:f8:98:3c: c5:a4:9b:c2:93:ce:48:05:17:4d:6b:b7:fa:f9:d0:32:46:a7: 4c:7b:c8:55:36:0c:76:d5:d3:4d:c2:7e:7e:dd:72:3c:51:ee: 82:8e:92:45:a7:02:64:68:dd:67:3f:30:d5:50:20:44:50:9b: 01:51:20:46:68:62:09:04:48:0a:40:1e:b8:5a:b0:09:6c:77: da:5b:25:3e:b2:de:06:4f:f3:fb:85:ad:69:bc:9b:22:70:3f: 4e:4d:ca:2f:f0:87:73:f5:6e:b9:87:25:17:4f:ae:e4:78:34: e2:3d:d3:59:87:78:0c:9f:11:8b:f2:0e:61:59:c2:ea:0d:7c: 53:8f:73:48:9b:b5:01:6c:94:1f:12:6e:66:e8:cd:73:84:49: 58:b8:e5:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52lb7eyHoo5QFmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi NzIxMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk N2IyOTdlNWQtMmE4Ni00M2M1LWI1ZTYtZWY0NTBhZTY4MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2NDWUVV6z2ORgzlziVir5Lye7HkpY8w0QzX /RSq1bKDWH6p7H6RGU6P0mHCMc2uFop/0qxjSMvzq/I7eUCkxTAxy/o+YNY2e6yd 1ktgCEXkS2gMPjDvACCyo4u2aaMdOOcNds34YvCWCe7/YwMapTD6e3VJY7GqosQb NDaj1Qeow2JxQ3v08eFt4QHgl3F/VzYochSN80lXO6kC65QfTJhesIZJiN6CB50n Lgn5BGGeMSomPWeBKy/Ccu7lsG1dGrNPON+7oYegXUYBir4JIhx3CYlft0cLdJwA fi2QN2ydgmiwArlB4m08R3t3E1W5YDisIa4ZqR31sXKGWHEk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTqXHfRBn3+wp0N+TKfOkaDYe5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1 OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvMzcyMWY0ZDctMGVkNC0z MjA5LTg4ZjgtOTUzMWNkN2I2NzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5 ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3 YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzZdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0tbl9d/HdDbZcMede+Y9g0OHxl/4cAaCOEmvqMHukWzhX87svJKUnq wKHyNdGBA9IFX2xkJ+QiIwxarcjsjpdPWRHwQLl0BtX+0o7JpM5FJxrmn3LLqNl7 ywOOQO3WBJwBIAL2mMY+BPiYPMWkm8KTzkgFF01rt/r50DJGp0x7yFU2DHbV003C fn7dcjxR7oKOkkWnAmRo3Wc/MNVQIERQmwFRIEZoYgkESApAHrhasAlsd9pbJT6y 3gZP8/uFrWm8myJwP05Nyi/wh3P1brmHJRdPruR4NOI901mHeAyfEYvyDmFZwuoN fFOPc0ibtQFslB8SbmbozXOESVi45QQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:06 2025 by rpki-client