$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa File: a6654227-7e4a-384e-aaf7-165cd7a07f42.roa (raw, json) Hash identifier: OMfGi1JHVOTGg8kAYVIzuWirQnuGIlaB7z+Gm8+MJ80= Subject key identifier: EA:FB:5F:DD:65:3F:5C:76:2E:29:F5:11:E9:67:CC:A2:AB:28:48:79 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584B8EACF357025FDCA79D83F200 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 8014 IP address blocks: 204.236.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f3:57:02:5f:dc:a7:9d:83:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5fc181c3-bd52-46c5-a64c-a11962c737fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:cf:a2:c8:2c:40:01:87:65:5d:13:ed:96: f0:57:bc:4b:4c:c2:60:23:8d:f7:46:58:a8:bb:d8: 2b:cc:eb:6f:60:ba:11:20:dc:33:70:dd:ed:53:ef: 1a:53:02:a9:24:85:cb:04:c1:22:17:ca:b7:a8:fc: 5c:41:fe:75:77:35:7c:11:a8:e8:7b:d4:74:54:fa: 03:7a:23:d3:2f:bd:0a:e5:24:07:31:f7:a9:da:23: fa:d0:67:7a:63:9f:c3:dd:c1:41:2f:47:45:d6:6b: dd:1f:f0:4a:8f:77:7b:73:d6:73:aa:d8:b3:cf:5b: 33:b0:84:7c:bc:cb:09:c4:75:f1:9e:c2:70:d3:34: e5:e4:76:09:31:bb:58:12:6c:30:ea:8b:7e:67:f6: 61:b1:88:e8:bb:53:aa:dc:87:9c:b2:f4:f0:5c:a0: 7d:b4:a2:60:cb:07:c4:53:8f:b1:28:0f:46:31:81: 6a:ab:f9:39:04:03:ad:ff:ed:e0:d4:82:38:21:35: e3:c8:a7:28:be:db:dd:36:ce:0d:d5:e0:d4:80:24: 20:fd:0d:31:7b:58:87:96:d7:9d:41:5f:4e:c1:3d: 5f:bf:40:d9:37:ec:27:94:10:cc:71:6d:96:9d:26: 1d:3a:6d:9e:4d:4c:e1:d9:b9:01:d3:5d:21:d1:66: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:5F:DD:65:3F:5C:76:2E:29:F5:11:E9:67:CC:A2:AB:28:48:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2d:84:eb:6d:84:be:df:25:50:49:24:5c:fa:92:17:e0:5a: 97:bc:a2:1f:9b:a5:40:45:68:3a:21:24:d2:a9:55:93:23:6d: 22:d4:17:e7:99:3e:4b:8b:4d:28:a8:2e:27:7e:45:8a:04:4a: 37:c1:56:3d:45:bb:ef:76:fa:8e:9a:24:54:b0:de:b6:e8:21: 6f:5d:7e:da:38:e3:3c:85:44:d1:7e:c4:7c:8e:16:9c:9d:9e: 53:6f:c3:6c:2f:60:63:b0:c6:00:19:98:b0:48:57:27:2b:32: f9:49:09:59:ca:de:d2:0f:88:18:d3:d6:6c:90:17:bf:97:f0: 86:3f:7c:b4:6d:b4:5c:c2:48:b5:58:c8:f3:b9:44:d5:c1:84: e3:2f:81:42:9e:cb:5f:ee:f9:79:47:4b:fd:ad:8a:29:3e:ba: 22:ac:0f:2d:25:57:29:3b:69:8d:42:91:09:66:fc:b5:29:b2: 8f:5a:23:b9:d6:8f:52:3f:da:c4:ef:9d:80:86:71:02:6e:07: ba:2e:89:f3:bc:36:82:59:bb:07:01:6d:7c:cd:9f:f3:50:a1: 9b:30:b1:e2:84:b7:0a:55:81:6e:08:58:1c:73:de:cc:e9:1b: d9:6d:87:7a:88:09:34:2d:ff:3c:72:31:00:f4:41:7f:5c:9d: 53:dd:ea:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPNXAl/cp52D8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NWZjMTgxYzMtYmQ1Mi00NmM1LWE2NGMtYTExOTYyYzczN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsfPosgsQAGHZV0T7ZbwV7xLTMJgI433Rlio u9grzOtvYLoRINwzcN3tU+8aUwKpJIXLBMEiF8q3qPxcQf51dzV8Eajoe9R0VPoD eiPTL70K5SQHMfep2iP60Gd6Y5/D3cFBL0dF1mvdH/BKj3d7c9Zzqtizz1szsIR8 vMsJxHXxnsJw0zTl5HYJMbtYEmww6ot+Z/ZhsYjou1Oq3IecsvTwXKB9tKJgywfE U4+xKA9GMYFqq/k5BAOt/+3g1II4ITXjyKcovtvdNs4N1eDUgCQg/Q0xe1iHlted QV9OwT1fv0DZN+wnlBDMcW2WnSYdOm2eTUzh2bkB010h0WZOVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr7X91lP1x2Lin1EelnzKKrKEh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvYTY2NTQyMjctN2U0YS0z ODRlLWFhZjctMTY1Y2Q3YTA3ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAthOtthL7fJVBJJFz6khfgWpe8oh+bpUBFaDohJNKpVZMjbSLUF+eZ PkuLTSioLid+RYoESjfBVj1Fu+92+o6aJFSw3rboIW9dfto44zyFRNF+xHyOFpyd nlNvw2wvYGOwxgAZmLBIVycrMvlJCVnK3tIPiBjT1myQF7+X8IY/fLRttFzCSLVY yPO5RNXBhOMvgUKey1/u+XlHS/2tiik+uiKsDy0lVyk7aY1CkQlm/LUpso9aI7nW j1I/2sTvnYCGcQJuB7ouifO8NoJZuwcBbXzNn/NQoZswseKEtwpVgW4IWBxz3szp G9lth3qICTQt/zxyMQD0QX9cnVPd6mg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:50 2025 by rpki-client