$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa File: e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa (raw, json) Hash identifier: rfNIJiUKloHYBA73Am07JChvddy+iH3RRMKgAy3gaRA= Subject key identifier: 72:26:49:91:16:0E:F2:4A:57:95:45:FF:A4:12:52:28:B7:A0:22:D4 Certificate issuer: /CN=911afcc4-db22-4282-acca-e1e676a5ae20 Certificate serial: 010D0C9F4328584B21CC1CA760C8055E0DF6F840 Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 192.206.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1c:a7:60:c8:05:5e:0d:f6:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=384d216d-7ce9-4dc0-afb1-3fe46eb89f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:2f:84:08:f2:8c:4d:89:a9:72:ce:c4:0b: 1d:72:80:ec:1f:b2:92:cd:d5:d4:89:d7:c4:51:85: 36:99:76:a1:99:97:80:e9:c3:8b:36:b2:a0:1a:f9: 29:b5:27:1e:37:7c:5c:dc:40:0b:58:4b:64:3f:6e: fa:98:64:30:ce:04:3a:47:eb:57:5c:d4:c8:0f:a7: 6c:4b:e7:d5:bf:82:c8:96:d4:97:1d:46:5b:5b:c6: 0b:36:0d:d1:04:dd:0c:57:58:e9:c7:b7:fe:d8:f0: 7e:10:f1:43:57:2e:ae:10:6f:94:63:ce:c8:5e:00: c4:c5:6d:0a:27:55:ec:7a:8b:31:36:47:73:8d:0e: a9:46:3c:ed:a4:b9:83:d7:5e:50:17:1a:fe:a4:aa: 52:7e:10:c7:50:a9:06:3a:1f:c6:54:38:b2:30:fd: 48:15:ea:1c:88:ea:71:23:a9:af:78:ea:93:5c:ba: 0b:1e:b8:94:eb:22:7b:b5:d2:ba:ad:e5:aa:28:b0: 1d:65:1c:d5:f1:64:42:20:df:c8:88:0e:83:7b:3b: 64:f1:52:24:b1:7d:fc:fd:f6:a5:77:59:ab:a1:b9: 27:a1:ce:86:53:52:38:ff:75:02:87:0f:34:90:4c: 41:5b:80:3f:90:de:6a:23:04:52:49:22:5c:bd:72: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:26:49:91:16:0E:F2:4A:57:95:45:FF:A4:12:52:28:B7:A0:22:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl X509v3 Authority Key Identifier: keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer sbgp-ipAddrBlock: critical IPv4: 192.206.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b0:03:8b:09:3d:88:20:1a:aa:9f:57:cc:cd:db:84:df:e9: 51:35:b0:8a:de:58:5c:82:3b:ae:59:9d:22:4f:59:60:d9:00: 97:9e:d0:b5:4a:34:4d:88:f9:a6:e0:16:7e:18:3c:2e:2d:8c: 2e:61:da:b1:d2:3d:4d:38:09:ca:e8:bd:99:6b:eb:a3:1f:85: 19:65:6f:ae:90:43:33:a6:6e:0e:58:8d:0b:63:2f:a6:e4:de: ad:99:85:5f:89:b1:d3:2b:55:d6:b9:0f:b8:f5:40:85:29:09: dc:17:c4:62:75:23:0d:3e:52:47:ca:ec:a5:98:31:13:1c:59: 8d:ad:d4:31:53:e1:9c:0d:21:1d:32:c0:7e:f5:64:47:70:2b: d4:b8:56:ba:89:83:60:18:3e:28:2f:d8:90:d1:03:59:71:8c: 37:04:5a:91:b5:19:78:f5:cd:cd:1a:73:df:a7:35:a2:39:15: ea:0b:4b:4b:c4:e0:80:a1:a3:9e:0d:2f:63:b0:76:32:f5:67: 10:36:2e:69:c0:77:41:53:6b:eb:0e:7a:7d:fc:06:8c:72:89: 02:cb:73:a8:37:b1:d1:46:a4:f3:2c:94:f2:36:b0:16:de:c5: b6:1e:94:d1:f9:22:a5:da:e7:0f:f8:cd:6f:e8:a7:91:26:0a: db:1a:95:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBynYMgFXg32+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTExYWZjYzQtZGIyMi00MjgyLWFjY2EtZTFlNjc2YTVh ZTIwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk Mzg0ZDIxNmQtN2NlOS00ZGMwLWFmYjEtM2ZlNDZlYjg5ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbsvhAjyjE2JqXLOxAsdcoDsH7KSzdXUidfE UYU2mXahmZeA6cOLNrKgGvkptSceN3xc3EALWEtkP276mGQwzgQ6R+tXXNTID6ds S+fVv4LIltSXHUZbW8YLNg3RBN0MV1jpx7f+2PB+EPFDVy6uEG+UY87IXgDExW0K J1XseosxNkdzjQ6pRjztpLmD115QFxr+pKpSfhDHUKkGOh/GVDiyMP1IFeociOpx I6mveOqTXLoLHriU6yJ7tdK6reWqKLAdZRzV8WRCIN/IiA6Deztk8VIksX38/fal d1mrobknoc6GU1I4/3UChw80kExBW4A/kN5qIwRSSSJcvXL6TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHImSZEWDvJKV5VF/6QSUii3oCLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MTFh ZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2NzZhNWFlMjAvZTUxOGZhOWYtZTFlYi0z MGFmLThlYWEtYjFlZmE4YzMyNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTExYWZjYzQtZGIyMi00MjgyLWFj Y2EtZTFlNjc2YTVhZTIwLzkxMWFmY2M0LWRiMjItNDI4Mi1hY2NhLWUxZTY3NmE1 YWUyMC5jcmwwHwYDVR0jBBgwFoAUaRq26D5nlEY54u/RTNXkdWk2kOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MTFhZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2 NzZhNWFlMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM7OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSwA4sJPYggGqqfV8zN24Tf6VE1sIreWFyCO65ZnSJPWWDZAJee0LVK NE2I+abgFn4YPC4tjC5h2rHSPU04CcrovZlr66MfhRllb66QQzOmbg5YjQtjL6bk 3q2ZhV+JsdMrVda5D7j1QIUpCdwXxGJ1Iw0+UkfK7KWYMRMcWY2t1DFT4ZwNIR0y wH71ZEdwK9S4VrqJg2AYPigv2JDRA1lxjDcEWpG1GXj1zc0ac9+nNaI5FeoLS0vE 4ICho54NL2OwdjL1ZxA2LmnAd0FTa+sOen38BoxyiQLLc6g3sdFGpPMslPI2sBbe xbYelNH5IqXa5w/4zW/op5EmCtsalVA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:36 2025 by rpki-client