$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa File: 6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa (raw, json) Hash identifier: glD46D+XxkgNHW8ioWMqdGyogpo083Y2Hus4KeK8Ha0= Subject key identifier: C4:54:28:AC:D3:4C:95:9F:A9:76:FF:4F:9A:5E:C0:7D:A7:DB:3F:B5 Certificate issuer: /CN=b71f0bde-5320-4917-be9e-6cadf8118c9a Certificate serial: 010D0C9F4328584B7C8768E3F7D569B6E963F670 Authority key identifier: 49:38:D0:DC:4F:72:DC:6D:1E:73:43:B9:5E:37:CB:AC:C5:02:F1:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 393853 IP address blocks: 192.206.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:68:e3:f7:d5:69:b6:e9:63:f6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f0bde-5320-4917-be9e-6cadf8118c9a Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=061c8be9-99d0-403e-bcef-4b9d081c4ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:00:58:a6:f9:45:ce:1f:89:3d:45:a6:d4: cb:9b:87:7a:c5:b5:88:bf:26:d8:c1:a0:f2:07:f1: 17:02:9c:98:90:9d:ae:1c:cc:d6:79:9d:02:9f:04: d7:82:0e:6a:14:34:d8:49:89:94:ee:ab:ae:a3:43: 74:28:04:c5:74:79:02:6f:94:0b:46:29:1c:c0:ee: 68:69:a1:09:c6:24:bb:c5:cc:78:39:0e:43:0a:9e: ac:46:cc:66:0c:35:7c:27:a4:2e:35:88:fa:e8:ba: 9f:30:f9:97:69:c6:1f:bb:95:e2:09:6a:3c:7d:e8: 6b:36:1e:96:88:55:5e:c3:41:38:19:7c:25:a3:de: f8:af:04:ad:4a:e1:75:89:4d:74:01:7f:d7:c1:02: 21:23:7b:d7:f5:a7:c2:4a:db:5b:e7:bb:dd:5a:69: 67:df:ee:62:05:9c:eb:1b:aa:03:8e:ca:d7:2e:93: 92:96:ad:c9:c6:f3:74:49:4b:9f:cc:07:28:ac:a6: 8e:57:85:7b:f6:24:ad:98:66:1b:a5:87:d5:43:c7: 17:a9:69:a4:9d:b8:40:0e:8d:33:31:5e:81:ea:66: de:92:c7:e8:7d:0b:85:4f:07:5b:cd:d2:cc:e6:d4: dc:0c:d1:c2:e3:85:58:3a:67:e6:32:f4:04:ed:3e: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:54:28:AC:D3:4C:95:9F:A9:76:FF:4F:9A:5E:C0:7D:A7:DB:3F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/6d8928a4-c1a8-3fcd-9844-cc13eca2d971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a/b71f0bde-5320-4917-be9e-6cadf8118c9a.crl X509v3 Authority Key Identifier: keyid:49:38:D0:DC:4F:72:DC:6D:1E:73:43:B9:5E:37:CB:AC:C5:02:F1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b71f0bde-5320-4917-be9e-6cadf8118c9a.cer sbgp-ipAddrBlock: critical IPv4: 192.206.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:36:62:1c:f6:6d:f9:70:da:2a:ee:ac:9f:5d:4c:da:6c:a3: 48:6f:44:6e:83:25:3e:2a:d5:e8:e6:11:16:ca:cb:84:5f:55: 4e:04:50:83:36:69:8b:bf:4c:15:ad:86:48:36:5b:41:1e:45: b1:2a:4f:a2:03:7b:f8:b5:17:58:ce:b4:e9:91:1d:1c:19:40: 1a:04:6d:14:0f:3e:23:f8:79:1a:d6:5a:13:f2:48:8d:5a:8b: 29:60:82:36:7d:41:ec:37:66:97:0f:39:68:bd:4a:9d:82:36: 95:21:da:26:f3:fc:5e:e3:42:99:70:39:58:5b:f1:0b:b5:9e: 2c:17:23:b3:d9:0a:23:71:5c:01:65:81:d4:b3:10:39:a8:01: 2c:7f:33:66:a8:d0:78:a9:5c:6b:5e:f5:49:80:8d:54:d0:43: 82:86:5b:6e:0f:76:ca:03:0d:e0:eb:22:27:52:f7:f1:f1:1b: cf:a6:fe:c5:bd:1d:9e:9b:48:47:0c:06:f2:0b:7b:9b:c5:bf: 2a:74:de:78:ec:93:ed:1d:5d:61:e1:dc:0f:45:38:1b:59:a2: b6:4e:63:53:c6:b8:6c:de:cc:fd:8b:cf:6f:6c:12:41:1a:3b: 15:3b:49:41:86:66:81:27:36:f2:10:c9:da:e6:c4:ed:0a:3a: 90:33:9c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2jj99Vptulj9nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjBiZGUtNTMyMC00OTE3LWJlOWUtNmNhZGY4MTE4 YzlhMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MDYxYzhiZTktOTlkMC00MDNlLWJjZWYtNGI5ZDA4MWM0Y2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4AAWKb5Rc4fiT1FptTLm4d6xbWIvybYwaDy B/EXApyYkJ2uHMzWeZ0CnwTXgg5qFDTYSYmU7quuo0N0KATFdHkCb5QLRikcwO5o aaEJxiS7xcx4OQ5DCp6sRsxmDDV8J6QuNYj66LqfMPmXacYfu5XiCWo8fehrNh6W iFVew0E4GXwlo974rwStSuF1iU10AX/XwQIhI3vX9afCSttb57vdWmln3+5iBZzr G6oDjsrXLpOSlq3JxvN0SUufzAcorKaOV4V79iStmGYbpYfVQ8cXqWmknbhADo0z MV6B6mbeksfofQuFTwdbzdLM5tTcDNHC44VYOmfmMvQE7T4urQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRUKKzTTJWfqXb/T5pewH2n2z+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNzFm MGJkZS01MzIwLTQ5MTctYmU5ZS02Y2FkZjgxMThjOWEvNmQ4OTI4YTQtYzFhOC0z ZmNkLTk4NDQtY2MxM2VjYTJkOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjcxZjBiZGUtNTMyMC00OTE3LWJl OWUtNmNhZGY4MTE4YzlhL2I3MWYwYmRlLTUzMjAtNDkxNy1iZTllLTZjYWRmODEx OGM5YS5jcmwwHwYDVR0jBBgwFoAUSTjQ3E9y3G0ec0O5XjfLrMUC8ccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNzFmMGJkZS01MzIwLTQ5MTctYmU5ZS02Y2Fk ZjgxMThjOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwM4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ2Yhz2bflw2irurJ9dTNpso0hvRG6DJT4q1ejmERbKy4RfVU4EUIM2 aYu/TBWthkg2W0EeRbEqT6IDe/i1F1jOtOmRHRwZQBoEbRQPPiP4eRrWWhPySI1a iylggjZ9Qew3ZpcPOWi9Sp2CNpUh2ibz/F7jQplwOVhb8Qu1niwXI7PZCiNxXAFl gdSzEDmoASx/M2ao0HipXGte9UmAjVTQQ4KGW24PdsoDDeDrIidS9/HxG8+m/sW9 HZ6bSEcMBvILe5vFvyp03njsk+0dXWHh3A9FOBtZorZOY1PGuGzezP2Lz29sEkEa OxU7SUGGZoEnNvIQydrmxO0KOpAznM0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:32 2025 by rpki-client