$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa File: 268da158-9a66-391f-9373-38ce0074d565.roa (raw, json) Hash identifier: 76ERyzss533dL3AgpYJsPjuM0FUlFGXPQ6n7XgwgVzY= Subject key identifier: 01:7B:20:A9:DC:EC:B6:20:2F:A1:3F:67:6D:EF:3A:41:D8:48:37:CD Certificate issuer: /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b Certificate serial: 010D0C9F4328584B21CC3393A72C4AD9D5F3B780 Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 14333 IP address blocks: 206.168.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:33:93:a7:2c:4a:d9:d5:f3:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=d73f31e9-0815-4adf-ac70-cd8c0b6fee64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:69:5b:e0:a0:4e:97:68:17:16:de:f8:e0: a7:3c:3d:a0:a3:ce:45:b0:c2:c7:06:be:e1:91:3f: 25:59:db:37:0c:31:aa:3f:c2:88:a8:6f:b0:99:23: 2c:b2:79:a6:15:e2:81:52:1e:67:e6:85:be:1a:ea: 6b:c6:de:d7:d4:2c:8f:88:21:5e:95:09:f3:c4:2f: 6a:5d:33:f9:4a:31:ba:9c:79:cf:7e:c5:d4:9c:8d: 0b:27:5e:eb:83:aa:0a:a8:e4:4e:f2:d7:a4:9b:58: b9:f9:0d:5d:44:a2:db:c8:70:38:6e:5b:ac:4f:a0: ed:e6:5e:b5:49:34:71:da:d8:04:42:f2:39:04:a7: 5c:fb:5e:be:8e:fd:8f:bb:57:81:cc:9a:ad:3c:42: 2e:52:92:64:a7:30:58:30:28:0a:6a:e8:a6:c1:e6: d2:2b:c7:67:bf:d3:6d:5f:47:c7:45:9f:4b:55:b9: 76:87:55:6d:59:4f:f9:73:13:be:08:9f:98:5d:c4: d9:a5:cf:81:ac:59:3d:fa:7f:8b:4a:5d:cd:c7:a3: 5a:72:fb:dc:7a:26:58:a3:c7:a5:89:df:78:2c:75: 18:c5:40:fb:10:0b:8f:b3:88:fa:f7:14:8b:09:c6: 2e:aa:ed:f3:9c:cb:9d:b0:53:e4:f0:3c:f7:01:61: 1c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7B:20:A9:DC:EC:B6:20:2F:A1:3F:67:6D:EF:3A:41:D8:48:37:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl X509v3 Authority Key Identifier: keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer sbgp-ipAddrBlock: critical IPv4: 206.168.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:94:a5:da:e8:d7:89:c4:36:9e:44:60:54:ca:49:66:d3:c2: 8d:8b:16:2f:9f:a5:ad:75:0f:c4:1f:9a:96:0a:91:2e:91:b1: 51:e8:22:23:5a:ab:ad:13:f8:bd:30:81:69:40:3a:f6:23:48: cc:73:20:22:1a:18:e9:81:5c:63:7d:a4:c1:fe:34:1f:b9:3e: 51:59:7d:60:6b:bd:7e:21:f9:ea:d6:da:55:f6:bf:f1:10:63: 0d:bc:e5:f5:8a:29:2c:85:71:7b:03:26:4e:40:e3:be:39:da: ad:fc:28:93:d9:55:24:ab:da:99:be:de:e4:65:53:a9:cd:5a: 5e:c5:cc:a6:6c:58:34:fc:93:4f:54:78:55:56:14:ca:c5:70: e9:a6:9b:b1:23:21:38:09:d8:c8:74:ac:50:d7:80:4e:d5:bd: de:61:f0:c6:f6:3f:b7:10:9a:b7:83:68:ae:e0:96:4f:72:47: ae:a1:15:ea:44:b6:34:0a:7f:54:c2:3f:ab:33:f9:13:72:ed: 5e:d3:34:f3:60:71:61:9c:45:2f:b0:af:7c:4e:a5:16:cd:9f: 28:b3:5f:1f:f2:8f:5e:ad:4e:3a:8a:43:9b:37:5e:82:9e:74: 54:d6:63:f0:9f:7e:ff:78:6e:5c:e0:da:41:7a:f8:ef:c6:0f: 16:2c:fb:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzDOTpyxK2dXzt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYyN2M5MzQtZWJjNi00NGE0LWJiYTAtYTAzY2M0NjUz MzRiMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZDczZjMxZTktMDgxNS00YWRmLWFjNzAtY2Q4YzBiNmZlZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzVpW+CgTpdoFxbe+OCnPD2go85FsMLHBr7h kT8lWds3DDGqP8KIqG+wmSMssnmmFeKBUh5n5oW+Guprxt7X1CyPiCFelQnzxC9q XTP5SjG6nHnPfsXUnI0LJ17rg6oKqORO8tekm1i5+Q1dRKLbyHA4blusT6Dt5l61 STRx2tgEQvI5BKdc+16+jv2Pu1eBzJqtPEIuUpJkpzBYMCgKauimwebSK8dnv9Nt X0fHRZ9LVbl2h1VtWU/5cxO+CJ+YXcTZpc+BrFk9+n+LSl3Nx6NacvvceiZYo8el id94LHUYxUD7EAuPs4j69xSLCcYuqu3znMudsFPk8Dz3AWEcqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF7IKnc7LYgL6E/Z23vOkHYSDfNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3 YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNjYzQ2NTMzNGIvMjY4ZGExNTgtOWE2Ni0z OTFmLTkzNzMtMzhjZTAwNzRkNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGYyN2M5MzQtZWJjNi00NGE0LWJi YTAtYTAzY2M0NjUzMzRiLzhmMjdjOTM0LWViYzYtNDRhNC1iYmEwLWEwM2NjNDY1 MzM0Yi5jcmwwHwYDVR0jBBgwFoAU4bkaPPumXs0F9g4Sq6n1oxOo8WkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNj YzQ2NTMzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6Updro14nENp5EYFTKSWbTwo2LFi+fpa11D8QfmpYKkS6RsVHoIiNa q60T+L0wgWlAOvYjSMxzICIaGOmBXGN9pMH+NB+5PlFZfWBrvX4h+erW2lX2v/EQ Yw285fWKKSyFcXsDJk5A47452q38KJPZVSSr2pm+3uRlU6nNWl7FzKZsWDT8k09U eFVWFMrFcOmmm7EjITgJ2Mh0rFDXgE7Vvd5h8Mb2P7cQmreDaK7glk9yR66hFepE tjQKf1TCP6sz+RNy7V7TNPNgcWGcRS+wr3xOpRbNnyizXx/yj16tTjqKQ5s3XoKe dFTWY/Cffv94blzg2kF6+O/GDxYs+88= -----END CERTIFICATE-----Generated at Sat Oct 11 15:05:43 2025 by rpki-client