$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/6ac1a8ee-7fc1-379b-9b89-cd587ddac01f.roa File: 6ac1a8ee-7fc1-379b-9b89-cd587ddac01f.roa (raw, json) Hash identifier: WxBd84YXU+g5SHQgG0jxdAvk7ZBdYS1eCNj0euEZqas= Subject key identifier: 4A:F4:4F:68:11:75:93:CB:90:06:05:D0:A3:F7:05:55:E7:96:F2:63 Certificate issuer: /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5 Certificate serial: 010D0C9F4328584B5B0732E1AAE26429803A1780 Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/6ac1a8ee-7fc1-379b-9b89-cd587ddac01f.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 13728 IP address blocks: 207.190.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:32:e1:aa:e2:64:29:80:3a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=3d04dd1b-10fb-4458-8b7c-3ce4061aec09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:d7:0f:bd:27:dd:7d:34:b2:62:59:b6:07: bf:8b:75:e3:52:03:8c:9c:9b:95:47:25:3f:19:ae: 66:b6:cd:df:60:77:2e:1f:61:04:1e:87:9b:70:f0: c6:b4:2d:08:fd:ad:b6:58:83:ec:0f:97:b9:18:cb: 64:e2:ff:24:68:d2:6e:24:df:b0:13:38:fd:c5:5d: 74:ef:dc:8e:10:4e:2a:f1:6b:2f:b4:74:b8:c8:c1: cf:df:2b:29:19:14:8d:e0:b0:52:49:da:df:9a:b2: 90:89:4b:4e:af:14:0d:8b:e8:ba:39:44:a8:de:ef: cf:8c:27:04:3a:42:84:d0:66:1a:cc:5e:83:97:4b: 61:e9:e5:18:d7:4f:78:96:7d:a5:62:94:92:10:50: f6:08:ee:ae:bd:c3:79:c4:dc:b1:4c:c8:9a:a5:25: 47:5d:1c:7e:f7:77:c6:cb:d7:78:e5:a4:54:d4:9c: bc:f0:8a:26:24:ae:81:e9:e4:96:df:63:0a:47:1b: 5c:71:5c:7d:15:fa:40:5c:94:8c:98:bb:92:21:f5: ab:02:e4:0c:57:67:a2:09:01:4d:6b:d8:28:2f:79: 4c:0a:1e:6d:0a:2e:7d:90:1a:4d:dc:13:01:ac:5b: 96:57:86:6e:d0:d7:7f:55:b2:84:30:0a:bb:89:50: c3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F4:4F:68:11:75:93:CB:90:06:05:D0:A3:F7:05:55:E7:96:F2:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/6ac1a8ee-7fc1-379b-9b89-cd587ddac01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl X509v3 Authority Key Identifier: keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer sbgp-ipAddrBlock: critical IPv4: 207.190.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:94:27:08:fe:64:ec:1c:7a:98:07:3a:4d:15:98:dd:5e:79: 64:51:36:1e:9f:37:1e:4c:02:0a:8f:63:48:b6:97:76:78:5a: 5d:52:8a:af:ab:68:4d:26:f8:9a:41:55:97:f3:3d:da:1a:50: a8:6e:52:e3:e9:c8:b4:5e:4d:d6:93:5e:c4:c7:e2:21:e4:5b: e6:6d:e2:45:0a:46:60:f1:ea:6f:3f:78:d2:7b:b7:72:22:b2: 74:79:a0:fe:88:d7:89:85:3d:95:ae:e4:ba:41:dd:40:37:be: d8:b2:52:40:92:89:82:21:af:53:e6:8c:cf:3c:d4:92:2a:23: 16:fa:2b:ce:ef:7b:88:4f:ef:f7:0e:a8:55:cd:3b:4c:d2:4d: 0c:0e:20:43:80:2f:76:6d:c7:6a:99:84:17:db:6b:cf:af:3c: 2b:17:4e:21:01:83:e6:1b:43:8f:d9:c4:ac:f0:32:46:61:1b: dc:ef:4e:06:f4:81:63:da:09:04:5f:67:b2:a5:59:53:ff:f8: 9e:84:73:c9:fd:ea:f9:41:31:04:1e:46:c2:61:7a:81:20:5d: b1:b6:62:f9:b7:29:4c:f9:4d:20:52:65:7e:e0:09:df:2a:c0: c8:cc:10:1d:b7:3b:36:76:0d:76:e9:83:74:85:73:70:63:bb: 86:13:08:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzLhquJkKYA6F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA5MWM5OWYtOWNkNS00ZGIyLTg3MzMtNjdlMjIwMzZl YmI1MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk M2QwNGRkMWItMTBmYi00NDU4LThiN2MtM2NlNDA2MWFlYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVbXD70n3X00smJZtge/i3XjUgOMnJuVRyU/ Ga5mts3fYHcuH2EEHoebcPDGtC0I/a22WIPsD5e5GMtk4v8kaNJuJN+wEzj9xV10 79yOEE4q8WsvtHS4yMHP3yspGRSN4LBSSdrfmrKQiUtOrxQNi+i6OUSo3u/PjCcE OkKE0GYazF6Dl0th6eUY1094ln2lYpSSEFD2CO6uvcN5xNyxTMiapSVHXRx+93fG y9d45aRU1Jy88IomJK6B6eSW32MKRxtccVx9FfpAXJSMmLuSIfWrAuQMV2eiCQFN a9goL3lMCh5tCi59kBpN3BMBrFuWV4Zu0Nd/VbKEMAq7iVDDvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr0T2gRdZPLkAYF0KP3BVXnlvJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MDkx Yzk5Zi05Y2Q1LTRkYjItODczMy02N2UyMjAzNmViYjUvNmFjMWE4ZWUtN2ZjMS0z NzliLTliODktY2Q1ODdkZGFjMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDA5MWM5OWYtOWNkNS00ZGIyLTg3 MzMtNjdlMjIwMzZlYmI1LzQwOTFjOTlmLTljZDUtNGRiMi04NzMzLTY3ZTIyMDM2 ZWJiNS5jcmwwHwYDVR0jBBgwFoAUne4x2r4g6iqWpU02gfpSq75yJXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MDkxYzk5Zi05Y2Q1LTRkYjItODczMy02N2Uy MjAzNmViYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz76sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2UJwj+ZOwcepgHOk0VmN1eeWRRNh6fNx5MAgqPY0i2l3Z4Wl1Siq+r aE0m+JpBVZfzPdoaUKhuUuPpyLReTdaTXsTH4iHkW+Zt4kUKRmDx6m8/eNJ7t3Ii snR5oP6I14mFPZWu5LpB3UA3vtiyUkCSiYIhr1PmjM881JIqIxb6K87ve4hP7/cO qFXNO0zSTQwOIEOAL3Ztx2qZhBfba8+vPCsXTiEBg+YbQ4/ZxKzwMkZhG9zvTgb0 gWPaCQRfZ7KlWVP/+J6Ec8n96vlBMQQeRsJheoEgXbG2Yvm3KUz5TSBSZX7gCd8q wMjMEB23OzZ2DXbpg3SFc3Bju4YTCLA= -----END CERTIFICATE-----Generated at Sat Oct 11 03:02:10 2025 by rpki-client