$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3f3ee44a-749b-385d-85cf-9e52bdd3a03b.roa File: 3f3ee44a-749b-385d-85cf-9e52bdd3a03b.roa (raw, json) Hash identifier: fkRTDq4eQVJQ1OUcsny7NI2vO+/w6X6oUnYA05ZB1qE= Subject key identifier: 64:94:83:00:8D:5A:D7:BE:CF:57:B6:4A:D0:91:DE:D8:B2:FF:47:55 Certificate issuer: /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Certificate serial: 010D0C9F4328584B233199836DD645B69E86CA80 Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3f3ee44a-749b-385d-85cf-9e52bdd3a03b.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 6922 IP address blocks: 204.158.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:99:83:6d:d6:45:b6:9e:86:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=f493812d-3f2c-4cae-8fa5-ccf0d0d39474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:54:fe:4b:79:be:35:d4:b7:62:e8:51:4d: 50:5d:86:c9:37:72:ad:28:09:b0:4d:0c:bb:9c:0f: b8:97:5d:01:f8:c9:3c:71:f5:47:66:57:46:ba:30: 63:2c:64:ac:7a:ea:fe:c9:e1:58:cf:76:16:fc:da: 7f:c5:e5:95:3c:53:e3:a6:66:15:ee:38:30:0c:cd: 8a:6b:b4:6e:28:e5:6a:87:41:9b:64:b5:1a:72:b6: d7:2e:bd:cb:75:fa:95:d4:87:d5:ed:af:0c:9b:19: 8b:8c:f2:02:b7:29:a4:45:35:76:81:58:7a:ae:dc: 32:8f:9d:42:4c:a0:0c:30:3c:28:0f:c6:17:85:0a: f8:5a:b1:c8:e5:86:bc:c0:36:9c:7b:1e:7d:49:bd: 36:98:43:c8:05:cd:5f:52:bf:2c:f2:af:5b:e7:89: 4b:c7:a3:01:85:ff:87:bf:c3:70:7d:ff:59:ba:0f: de:a2:65:54:db:c7:60:1c:0f:83:6f:32:51:b5:cf: b8:3c:ea:50:8d:60:17:6f:78:5f:f9:e9:9f:14:48: 20:74:9a:70:fd:2a:51:f5:85:b6:45:26:e3:8b:ed: 84:68:62:86:45:3f:96:53:27:58:58:94:22:1e:1c: 14:74:74:4f:15:5f:df:9e:b9:fa:ec:17:a4:bf:18: 73:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:94:83:00:8D:5A:D7:BE:CF:57:B6:4A:D0:91:DE:D8:B2:FF:47:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/3f3ee44a-749b-385d-85cf-9e52bdd3a03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl X509v3 Authority Key Identifier: keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer sbgp-ipAddrBlock: critical IPv4: 204.158.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c2:94:ac:a5:cb:3b:19:8a:a7:c2:4b:d8:7b:70:89:fa:bc: c3:17:3d:f1:a8:cf:d7:86:5b:14:dd:fe:1a:5d:9b:00:68:3e: e5:48:0a:f3:33:6b:59:cb:6b:13:81:ee:be:38:b4:b0:43:09: b0:2e:59:26:24:89:39:00:80:1b:39:8c:ad:92:5f:1a:76:f5: ca:5a:bf:a4:57:6c:6d:6e:b5:88:2c:9c:8d:28:d8:2e:96:e0: e3:0a:04:97:b5:cc:c4:b5:c8:32:7f:44:04:03:9a:08:09:2f: dd:78:d1:14:27:09:8e:20:f7:d3:d9:72:47:69:6f:c3:7a:f0: d6:f7:03:92:17:de:69:1f:92:9d:98:f0:dc:10:41:b5:ed:0f: b9:e8:3d:97:fb:63:de:40:bd:2c:15:c5:1c:dd:c3:58:fc:a8: fa:14:fd:01:21:26:c9:66:63:77:93:82:aa:19:e0:d4:f1:32: dd:5a:37:4b:92:2b:5d:f0:b2:e4:bb:c9:13:f9:c4:08:30:9e: 75:f8:56:9f:a1:18:a1:0f:51:6a:cc:4b:53:32:b7:85:cd:cf: 96:3d:86:a8:47:4b:5d:9f:e0:7a:f7:ba:61:53:49:68:14:30: a8:96:4e:08:df:6c:cc:8e:95:fa:21:2c:50:9f:af:9c:64:a7: dc:1a:50:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZmDbdZFtp6GyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5 MjIxMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZjQ5MzgxMmQtM2YyYy00Y2FlLThmYTUtY2NmMGQwZDM5NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfhU/kt5vjXUt2LoUU1QXYbJN3KtKAmwTQy7 nA+4l10B+Mk8cfVHZldGujBjLGSseur+yeFYz3YW/Np/xeWVPFPjpmYV7jgwDM2K a7RuKOVqh0GbZLUacrbXLr3LdfqV1IfV7a8MmxmLjPICtymkRTV2gVh6rtwyj51C TKAMMDwoD8YXhQr4WrHI5Ya8wDacex59Sb02mEPIBc1fUr8s8q9b54lLx6MBhf+H v8Nwff9Zug/eomVU28dgHA+DbzJRtc+4POpQjWAXb3hf+emfFEggdJpw/SpR9YW2 RSbji+2EaGKGRT+WUydYWJQiHhwUdHRPFV/fnrn67BekvxhzfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSUgwCNWte+z1e2StCR3tiy/0dVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvM2YzZWU0NGEtNzQ5Yi0z ODVkLTg1Y2YtOWU1MmJkZDNhMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzJ4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnClKylyzsZiqfCS9h7cIn6vMMXPfGoz9eGWxTd/hpdmwBoPuVICvMz a1nLaxOB7r44tLBDCbAuWSYkiTkAgBs5jK2SXxp29cpav6RXbG1utYgsnI0o2C6W 4OMKBJe1zMS1yDJ/RAQDmggJL9140RQnCY4g99PZckdpb8N68Nb3A5IX3mkfkp2Y 8NwQQbXtD7noPZf7Y95AvSwVxRzdw1j8qPoU/QEhJslmY3eTgqoZ4NTxMt1aN0uS K13wsuS7yRP5xAgwnnX4Vp+hGKEPUWrMS1Myt4XNz5Y9hqhHS12f4Hr3umFTSWgU MKiWTgjfbMyOlfohLFCfr5xkp9waUEE= -----END CERTIFICATE-----Generated at Thu Oct 9 19:59:38 2025 by rpki-client