$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa File: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (raw, json) Hash identifier: OI8gycQsUsL6bv0xrY4vcm8RKNx/+BM5eDBDFHi25rk= Subject key identifier: 18:84:B1:09:5E:33:ED:C0:F7:52:07:DE:CB:A0:2E:24:E3:32:81:FB Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F4328584B6632042958BE77CD5A9E9880 Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 13566 IP address blocks: 204.76.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:04:29:58:be:77:cd:5a:9e:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=1e3e4c0e-c2e4-404f-8dc2-b9888a22025f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d0:b4:be:d3:e5:cd:1e:f6:27:88:ac:e1:53: 4e:55:8a:61:1d:f3:fd:55:63:e8:24:00:ac:dc:1e: 68:c7:7d:a8:1a:f2:d6:66:7b:89:b2:86:e2:55:7c: eb:73:2e:c5:7c:5b:1e:9f:85:48:d7:e2:ba:b4:58: 1a:a5:7d:31:b0:e9:a6:1c:59:d1:fa:54:bb:e8:76: d2:1c:8d:39:ae:96:6a:f5:32:11:fc:a2:74:65:75: da:a7:2c:86:5b:c9:06:81:a4:ed:e7:03:e3:8f:bc: 5e:41:de:e6:7f:2b:06:9d:fb:1c:e8:05:c3:37:16: 2e:be:88:a5:12:ab:97:1a:2c:0f:ce:5b:ce:bf:f2: 7d:c9:ed:83:e2:fb:26:eb:9f:ba:0a:3b:26:19:5e: e1:f4:ff:61:a3:73:94:45:f3:68:bc:20:75:72:d0: 33:61:11:07:17:83:b1:f4:c4:0a:1a:cb:6f:a0:4d: b3:5e:70:86:10:4f:ea:b5:ea:b2:c3:c4:b8:97:54: a8:df:11:f1:1a:ea:e0:5f:e9:90:a9:b2:24:23:cc: 2c:4c:2c:4c:45:16:8e:df:3e:d5:f4:3a:4f:29:02: 57:d8:dd:c9:7a:40:e4:4f:5a:fe:f9:de:49:b5:b5: 08:ad:63:c4:17:63:1d:fb:29:e9:24:6d:81:7e:7f: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:84:B1:09:5E:33:ED:C0:F7:52:07:DE:CB:A0:2E:24:E3:32:81:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: 204.76.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c4:c9:0d:5a:27:cc:b0:0f:eb:ca:43:36:aa:db:fd:65:d5: 6c:e5:cd:c1:2b:c8:2f:8c:b4:83:47:20:e5:ec:10:96:be:68: 5a:c7:00:b4:6d:d2:63:61:89:62:45:a3:34:2a:00:f7:7e:04: 0a:a6:bb:91:30:8a:1b:65:97:75:70:b2:02:ed:af:82:0a:bb: b0:a0:27:98:20:f9:e1:a9:74:63:9f:e1:9e:85:d3:0e:62:08: b5:30:7a:9b:3d:1d:62:e0:db:53:64:1d:9d:d0:2f:8d:10:3c: dc:37:f4:98:0c:f1:c1:60:82:33:0f:e9:28:23:9e:e6:aa:42: cf:03:55:08:f3:2d:b3:38:5e:29:e7:4c:42:80:3a:10:db:e5: 5f:dd:5a:34:2d:4b:7d:d6:92:76:83:73:97:e2:32:99:59:9d: 59:61:50:5d:24:68:30:c3:3d:12:69:c6:66:46:9c:fa:b9:57: c1:4c:58:f5:63:f1:a8:88:92:7d:aa:f4:2f:3f:c1:66:7e:5a: f5:13:bf:58:9e:4a:df:b1:45:0d:7f:14:07:9d:c1:cf:e2:79: 15:39:cd:37:f6:1b:ba:fd:01:6b:94:e1:0a:ae:15:e9:e0:f9: c1:eb:ed:bf:3d:86:43:af:17:42:cd:d6:94:c0:c6:b3:c0:49: d1:2b:71:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgQpWL53zVqemIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MWUzZTRjMGUtYzJlNC00MDRmLThkYzItYjk4ODhhMjIwMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptC0vtPlzR72J4is4VNOVYphHfP9VWPoJACs 3B5ox32oGvLWZnuJsobiVXzrcy7FfFsen4VI1+K6tFgapX0xsOmmHFnR+lS76HbS HI05rpZq9TIR/KJ0ZXXapyyGW8kGgaTt5wPjj7xeQd7mfysGnfsc6AXDNxYuvoil EquXGiwPzlvOv/J9ye2D4vsm65+6CjsmGV7h9P9ho3OURfNovCB1ctAzYREHF4Ox 9MQKGstvoE2zXnCGEE/qteqyw8S4l1So3xHxGurgX+mQqbIkI8wsTCxMRRaO3z7V 9DpPKQJX2N3JekDkT1r++d5JtbUIrWPEF2Md+ynpJG2Bfn/l1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiEsQleM+3A91IH3sugLiTjMoH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvM2EzZmY3MmMtYjczMi0z NjY3LWFkZTEtOWQ2M2MxNTA3NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/EyQ1aJ8ywD+vKQzaq2/1l1WzlzcEryC+MtINHIOXsEJa+aFrHALRt 0mNhiWJFozQqAPd+BAqmu5Ewihtll3VwsgLtr4IKu7CgJ5gg+eGpdGOf4Z6F0w5i CLUweps9HWLg21NkHZ3QL40QPNw39JgM8cFggjMP6SgjnuaqQs8DVQjzLbM4Xinn TEKAOhDb5V/dWjQtS33WknaDc5fiMplZnVlhUF0kaDDDPRJpxmZGnPq5V8FMWPVj 8aiIkn2q9C8/wWZ+WvUTv1ieSt+xRQ1/FAedwc/ieRU5zTf2G7r9AWuU4QquFeng +cHr7b89hkOvF0LN1pTAxrPASdErcfk= -----END CERTIFICATE-----Generated at Fri Oct 10 03:53:17 2025 by rpki-client