$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa File: 646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa (raw, json) Hash identifier: 7FMGcpfQmobj2yJYuskh2AunE1vcNXUyaPS70Mtw1Yc= Subject key identifier: 63:C4:33:EC:52:14:20:2B:73:0C:2D:EF:02:C3:04:1B:6D:96:1B:B3 Certificate issuer: /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441 Certificate serial: 010D0C9F4328584B398702052B323C4EDD9E4800 Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 13649 IP address blocks: 205.207.186.0/24 maxlen: 24 2602:fa4d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:02:05:2b:32:3c:4e:dd:9e:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=3f2bc119-fdbc-4ced-8e87-fafb54941b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:e4:11:f1:46:79:12:2a:e9:3d:4e:56:1f: 89:27:65:6d:ef:5e:44:b2:65:d5:1f:8c:2d:fd:ba: 52:4a:8d:f0:7d:b4:8c:f2:83:c3:49:ed:a7:d2:2c: d4:03:eb:83:38:8d:98:fb:20:8a:60:84:f7:6e:bf: 02:95:b1:6d:f0:13:09:e4:5f:3d:83:25:48:d1:ec: da:c7:fe:46:1a:b6:8b:fc:40:9c:d7:95:a7:a4:d1: d4:80:fb:21:ae:40:58:0a:00:c7:d7:b9:3b:a7:35: e7:b2:0e:a9:5a:db:89:31:e4:9e:c9:e3:7e:71:5c: fa:fc:e0:df:af:95:8a:cd:ca:a5:fa:91:c7:af:60: 03:4d:a7:30:6c:3c:4b:e7:0a:74:d3:0c:2a:1a:17: 2b:e4:6f:68:33:2b:5c:e4:cc:9e:b5:d1:a3:3c:ad: 6f:7a:d4:eb:a6:09:49:6f:45:67:69:9d:59:6c:56: 5f:a7:14:c5:0d:3c:35:f5:0f:c8:50:9e:78:7d:cd: 73:2e:76:ed:e2:3e:f8:26:57:c6:af:c5:0a:c3:9f: 9c:ed:f1:67:45:e3:dd:8a:b3:78:e3:29:da:05:68: e1:27:74:eb:ce:4b:38:0c:31:74:77:56:89:b9:f3: d7:9e:4c:75:0a:53:07:94:9d:fd:a3:65:ef:31:aa: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C4:33:EC:52:14:20:2B:73:0C:2D:EF:02:C3:04:1B:6D:96:1B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl X509v3 Authority Key Identifier: keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer sbgp-ipAddrBlock: critical IPv4: 205.207.186.0/24 IPv6: 2602:fa4d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:13:1e:9b:b6:c8:6c:22:5a:a5:98:af:59:a6:61:5e:35:1f: a3:53:8a:10:b0:66:3e:e1:dd:a7:1c:35:b3:77:fb:7a:ca:45: ad:d7:95:98:e0:4c:a2:49:8c:ad:17:5c:6d:37:0e:b5:04:bb: f7:7e:10:dd:11:1b:32:4d:55:1d:31:6d:5b:00:03:94:4a:a3: 16:47:fd:35:29:36:4e:ed:9f:0a:4b:0f:27:5f:16:fe:7b:bf: cb:94:5e:4c:c2:55:83:7e:ba:fb:b3:a4:94:7a:fe:42:cc:ac: e6:4b:1d:c0:de:85:6b:10:8c:e7:28:f7:61:5f:cc:3a:fb:77: 09:00:1a:91:61:0d:63:17:fd:46:8a:86:bb:e0:67:46:7d:ac: c6:ad:1c:60:3a:ef:c6:7d:f1:d9:c5:74:fa:3d:8f:7c:4e:62: 46:d6:b2:1d:a4:02:1f:89:37:3c:f3:9e:e3:a4:0d:81:91:4e: 8d:c1:9c:f4:8c:25:2e:6c:ad:87:a0:78:0a:ca:e1:a8:91:42: 67:84:d3:07:8b:67:03:f1:40:72:eb:48:c3:98:f5:b6:9b:7c: e6:93:93:46:b1:7a:b2:60:8c:66:de:be:a8:22:6e:d9:78:58: bc:4c:a0:97:18:29:2b:11:4f:8a:e0:0a:18:c3:37:5b:d0:56: 57:2d:d1:cc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEs5hwIFKzI8Tt2eSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E5YmQ1NDgtMTExNy00Y2M2LWEwZDAtOTRkYzUyYTMw NDQxMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk M2YyYmMxMTktZmRiYy00Y2VkLThlODctZmFmYjU0OTQxYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIHkEfFGeRIq6T1OVh+JJ2Vt715EsmXVH4wt /bpSSo3wfbSM8oPDSe2n0izUA+uDOI2Y+yCKYIT3br8ClbFt8BMJ5F89gyVI0eza x/5GGraL/ECc15WnpNHUgPshrkBYCgDH17k7pzXnsg6pWtuJMeSeyeN+cVz6/ODf r5WKzcql+pHHr2ADTacwbDxL5wp00wwqGhcr5G9oMytc5MyetdGjPK1vetTrpglJ b0VnaZ1ZbFZfpxTFDTw19Q/IUJ54fc1zLnbt4j74JlfGr8UKw5+c7fFnRePdirN4 4ynaBWjhJ3Trzks4DDF0d1aJufPXnkx1ClMHlJ39o2XvMarVLQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGPEM+xSFCArcwwt7wLDBBttlhuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYTli ZDU0OC0xMTE3LTRjYzYtYTBkMC05NGRjNTJhMzA0NDEvNjQ2YjEyMDYtY2Y3Yy0z NDNlLTk1ZTUtZDJlNmQyN2E5NWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2E5YmQ1NDgtMTExNy00Y2M2LWEw ZDAtOTRkYzUyYTMwNDQxL2NhOWJkNTQ4LTExMTctNGNjNi1hMGQwLTk0ZGM1MmEz MDQ0MS5jcmwwHwYDVR0jBBgwFoAU5h+XSrnhKEdZh/q/nayMOmk0inQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYTliZDU0OC0xMTE3LTRjYzYtYTBkMC05NGRj NTJhMzA0NDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzc+6MA4E AgACMAgDBgAmAvpNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALEx6btshsIlqlmK9ZpmFeNR+jU4oQsGY+ 4d2nHDWzd/t6ykWt15WY4EyiSYytF1xtNw61BLv3fhDdERsyTVUdMW1bAAOUSqMW R/01KTZO7Z8KSw8nXxb+e7/LlF5MwlWDfrr7s6SUev5CzKzmSx3A3oVrEIznKPdh X8w6+3cJABqRYQ1jF/1Gioa74GdGfazGrRxgOu/GffHZxXT6PY98TmJG1rIdpAIf iTc8857jpA2BkU6NwZz0jCUubK2HoHgKyuGokUJnhNMHi2cD8UBy60jDmPW2m3zm k5NGsXqyYIxm3r6oIm7ZeFi8TKCXGCkrEU+K4AoYwzdb0FZXLdHM -----END CERTIFICATE-----Generated at Sat Oct 11 18:34:40 2025 by rpki-client