$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/5c6b3e8b-63ec-3fc1-bc34-7f916ae6d6b9.roa File: 5c6b3e8b-63ec-3fc1-bc34-7f916ae6d6b9.roa (raw, json) Hash identifier: xGfXbjLTHcL+q4hoi5xKU59EGIxjTr3U7JX2p+cksKA= Subject key identifier: 23:B9:57:70:81:E1:2F:50:6B:55:6E:6C:21:0C:00:32:24:53:79:CD Certificate issuer: /CN=c739b1fc-db89-423c-9437-5e3b11048882 Certificate serial: 010D0C9F4328584B2FC19462B255ACC09B91DA80 Authority key identifier: DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/5c6b3e8b-63ec-3fc1-bc34-7f916ae6d6b9.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 40080 IP address blocks: 205.207.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:94:62:b2:55:ac:c0:9b:91:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c739b1fc-db89-423c-9437-5e3b11048882 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=8ee3a04d-0ce0-4b7c-b6c2-814701f0b333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:08:98:48:01:fa:8e:1c:86:ec:1d:f5:4e: 99:48:f6:93:a2:42:fa:4d:4c:9a:4e:06:12:8e:0d: e3:ee:d5:8b:74:2f:46:a0:d7:03:5a:f7:23:8b:d0: 0c:e2:a8:5c:8e:52:e7:e2:6c:70:f8:2b:ad:dc:85: 37:a3:e6:40:84:0d:cb:0b:9c:ee:6e:fc:2b:66:83: 42:c2:18:d6:ac:99:ea:96:fb:07:06:a9:bc:a4:7e: a0:c9:7d:d9:1b:37:d1:19:96:68:c8:f5:90:b0:f3: bb:37:a0:88:f0:5d:73:57:3a:21:d6:bf:a9:7d:6f: 87:b7:ef:95:5b:e6:44:e9:ee:9e:d5:70:8e:f0:57: ac:69:eb:05:bb:1a:ef:3a:6a:87:d4:ba:af:40:3f: e6:57:1d:ba:bd:fd:d0:df:bf:c9:69:8a:69:6d:46: 8e:55:67:32:f4:6c:60:73:04:b6:00:b8:a3:4b:cb: ca:9f:d3:44:fa:0e:95:75:fa:31:57:a7:f6:6a:e1: 56:33:8c:f5:f7:25:ad:a5:ac:71:83:3f:49:2f:22: 0c:04:34:54:ae:e4:2b:58:93:e7:12:5d:e0:6b:cb: 1b:1d:0d:b8:2d:9f:94:3d:cb:e4:96:56:31:ec:d9: 04:8a:4c:d0:81:84:67:42:b1:33:06:a7:1b:2b:75: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B9:57:70:81:E1:2F:50:6B:55:6E:6C:21:0C:00:32:24:53:79:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/5c6b3e8b-63ec-3fc1-bc34-7f916ae6d6b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl X509v3 Authority Key Identifier: keyid:DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer sbgp-ipAddrBlock: critical IPv4: 205.207.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e5:ba:18:07:4f:25:87:71:c2:48:3a:d4:93:03:42:46:66: d2:4c:20:8e:e9:d2:d1:e3:75:30:2e:da:b7:fa:af:e9:49:78: 35:9a:c5:a9:f9:fe:df:7f:c9:b6:0e:6e:95:3c:cd:0c:99:1d: e0:25:dc:68:04:da:3c:be:8e:b9:a1:1d:ee:6e:43:41:e2:ce: 5c:13:d3:7d:8c:99:ef:b0:9c:2c:85:f3:6f:b1:1a:09:04:3e: 36:86:fb:c9:e9:4e:f0:fd:22:cb:a3:92:76:38:4a:d5:05:9c: 81:87:db:be:1e:8d:90:ac:af:da:91:13:c0:7a:d1:dd:fd:72: 6e:2f:13:2c:ce:ee:34:a6:7c:93:01:9a:3a:ab:9f:52:61:40: 8d:9b:06:e5:e9:31:76:92:2d:4b:95:31:0f:83:22:35:67:98: c6:ba:23:95:fb:34:c8:d6:8c:ac:f7:ba:c4:42:45:fe:0d:92: d1:b3:9e:34:1e:8e:c4:77:29:04:e6:d6:de:57:9e:18:8c:13: 0f:4b:0b:24:51:af:f8:92:95:83:da:c4:79:c7:3e:cb:8f:89: 40:89:89:c4:4f:b4:bc:06:4d:fd:05:cb:43:e9:f5:07:21:07: d4:07:25:7d:e7:f3:9f:a3:4b:54:72:5c:5a:73:cc:6a:6b:91: 13:e9:55:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZRislWswJuR2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczOWIxZmMtZGI4OS00MjNjLTk0MzctNWUzYjExMDQ4 ODgyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk OGVlM2EwNGQtMGNlMC00YjdjLWI2YzItODE0NzAxZjBiMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlIImEgB+o4chuwd9U6ZSPaTokL6TUyaTgYS jg3j7tWLdC9GoNcDWvcji9AM4qhcjlLn4mxw+Cut3IU3o+ZAhA3LC5zubvwrZoNC whjWrJnqlvsHBqm8pH6gyX3ZGzfRGZZoyPWQsPO7N6CI8F1zVzoh1r+pfW+Ht++V W+ZE6e6e1XCO8FesaesFuxrvOmqH1LqvQD/mVx26vf3Q37/JaYppbUaOVWcy9Gxg cwS2ALijS8vKn9NE+g6VdfoxV6f2auFWM4z19yWtpaxxgz9JLyIMBDRUruQrWJPn El3ga8sbHQ24LZ+UPcvkllYx7NkEikzQgYRnQrEzBqcbK3XOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO5V3CB4S9Qa1VubCEMADIkU3nNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzM5 YjFmYy1kYjg5LTQyM2MtOTQzNy01ZTNiMTEwNDg4ODIvNWM2YjNlOGItNjNlYy0z ZmMxLWJjMzQtN2Y5MTZhZTZkNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzczOWIxZmMtZGI4OS00MjNjLTk0 MzctNWUzYjExMDQ4ODgyL2M3MzliMWZjLWRiODktNDIzYy05NDM3LTVlM2IxMTA0 ODg4Mi5jcmwwHwYDVR0jBBgwFoAU3CEl0EmMyvfM4tBOcjAjLsgDr04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzM5YjFmYy1kYjg5LTQyM2MtOTQzNy01ZTNi MTEwNDg4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc9CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHluhgHTyWHccJIOtSTA0JGZtJMII7p0tHjdTAu2rf6r+lJeDWaxan5 /t9/ybYObpU8zQyZHeAl3GgE2jy+jrmhHe5uQ0HizlwT032Mme+wnCyF82+xGgkE PjaG+8npTvD9IsujknY4StUFnIGH274ejZCsr9qRE8B60d39cm4vEyzO7jSmfJMB mjqrn1JhQI2bBuXpMXaSLUuVMQ+DIjVnmMa6I5X7NMjWjKz3usRCRf4NktGznjQe jsR3KQTm1t5XnhiMEw9LCyRRr/iSlYPaxHnHPsuPiUCJicRPtLwGTf0Fy0Pp9Qch B9QHJX3n85+jS1RyXFpzzGprkRPpVcc= -----END CERTIFICATE-----Generated at Sat Oct 11 19:01:01 2025 by rpki-client