$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa File: 46ab1af1-a77c-32bc-ad68-faa4060a7937.roa (raw, json) Hash identifier: GQTOdNRSSTCtj34BprXwpmPGaGkTcGg6KZzhk7qbuc0= Subject key identifier: E2:EB:68:34:5C:DB:0C:38:A7:49:34:AA:F9:A2:52:03:53:CB:75:57 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6C70772812E96C89B1F8C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 173.213.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:70:77:28:12:e9:6c:89:b1:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=8bf150d1-661b-45e2-8eec-24850817719c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:6a:bb:f8:be:12:cf:49:32:a0:43:92:60: 45:6e:11:5a:50:2f:58:e4:ff:8f:95:63:33:ee:19: ea:8f:4d:fa:42:8b:af:1e:ed:0d:55:ab:de:cd:30: 09:11:d2:f3:3d:e8:af:95:8c:8d:d8:e9:d3:f0:d6: 39:1b:51:28:e1:69:cf:fb:9a:df:e2:e6:af:06:b2: df:1e:3d:75:5a:ba:61:c3:05:ba:06:89:41:4e:2d: de:5a:86:7a:f3:e4:ef:f6:7d:c1:bb:cd:fc:56:45: 09:79:50:d5:42:87:e8:22:ca:30:47:c9:5c:f8:1e: b8:de:15:90:2c:93:c6:46:dd:76:63:e3:e7:cc:4e: 0a:c7:0d:06:2d:7a:1d:99:2e:f2:84:60:0d:ab:d8: d4:5c:5c:98:e3:42:b5:ab:38:40:68:11:f7:db:09: 8c:2c:54:71:33:d7:68:c3:af:86:68:f7:86:a3:97: d9:60:41:e8:03:d7:e1:af:70:02:5e:66:4b:df:55: 0f:f6:5c:df:15:a1:03:b5:46:5f:85:eb:2c:db:bc: 90:d5:ae:53:ca:6e:3b:a9:e6:77:83:14:cd:b0:20: 69:c0:4c:b4:16:e8:59:d3:50:09:91:02:3e:37:a2: 4f:ee:91:db:4a:c8:df:e9:04:b5:a1:a1:28:54:37: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EB:68:34:5C:DB:0C:38:A7:49:34:AA:F9:A2:52:03:53:CB:75:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/46ab1af1-a77c-32bc-ad68-faa4060a7937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.213.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:16:cf:1b:ec:8c:cb:d5:bc:75:a1:ce:8f:43:a8:03:ad:73: 0a:41:cd:18:71:26:48:f2:54:d2:8b:71:48:df:31:03:ba:73: d9:05:26:52:8a:97:be:d1:ca:52:78:4d:f6:23:c0:fa:70:57: 14:ca:ca:bc:8b:1f:2d:a8:3b:92:23:b1:30:dc:9e:fa:cf:06: b9:9c:8b:46:e2:71:46:82:a2:55:2c:b8:81:18:b4:1a:79:a9: 10:66:51:73:8a:76:05:6d:fd:d7:99:f0:23:68:bb:98:4f:ee: 66:98:88:92:0d:14:39:d5:8c:07:ec:a5:c0:18:69:96:a0:e5: a0:d8:62:aa:13:fe:50:a5:d6:87:fc:5a:10:5a:dc:01:2d:21: c1:af:f8:89:f6:78:d5:df:4a:b8:5b:b3:d1:93:a6:45:1a:02: ac:92:de:b4:a6:07:93:d8:1e:fc:53:40:d4:3c:9f:73:c5:37: 3f:06:c2:b7:2f:e7:6f:71:68:ee:e1:0d:a9:57:89:c3:15:40: 78:b4:32:7c:17:7f:04:b3:bb:e6:c2:5f:0f:1d:60:04:aa:ba: 2a:54:39:6b:ab:c5:38:86:54:b4:17:e6:7d:12:ad:54:eb:de: a9:f4:69:67:a4:22:df:96:5c:5a:82:92:21:0a:5a:d5:71:18: 4a:16:c6:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHB3KBLpbImx+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk OGJmMTUwZDEtNjYxYi00NWUyLThlZWMtMjQ4NTA4MTc3MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Fqu/i+Es9JMqBDkmBFbhFaUC9Y5P+PlWMz 7hnqj036QouvHu0NVavezTAJEdLzPeivlYyN2OnT8NY5G1Eo4WnP+5rf4uavBrLf Hj11WrphwwW6BolBTi3eWoZ68+Tv9n3Bu838VkUJeVDVQofoIsowR8lc+B643hWQ LJPGRt12Y+PnzE4Kxw0GLXodmS7yhGANq9jUXFyY40K1qzhAaBH32wmMLFRxM9do w6+GaPeGo5fZYEHoA9fhr3ACXmZL31UP9lzfFaEDtUZfhess27yQ1a5Tym47qeZ3 gxTNsCBpwEy0FuhZ01AJkQI+N6JP7pHbSsjf6QS1oaEoVDdgbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLraDRc2ww4p0k0qvmiUgNTy3VXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDZhYjFhZjEtYTc3Yy0z MmJjLWFkNjgtZmFhNDA2MGE3OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAWzxvsjMvVvHWhzo9DqAOtcwpBzRhxJkjyVNKLcUjfMQO6c9kFJlKK l77RylJ4TfYjwPpwVxTKyryLHy2oO5IjsTDcnvrPBrmci0bicUaColUsuIEYtBp5 qRBmUXOKdgVt/deZ8CNou5hP7maYiJINFDnVjAfspcAYaZag5aDYYqoT/lCl1of8 WhBa3AEtIcGv+In2eNXfSrhbs9GTpkUaAqyS3rSmB5PYHvxTQNQ8n3PFNz8Gwrcv 529xaO7hDalXicMVQHi0MnwXfwSzu+bCXw8dYASquipUOWurxTiGVLQX5n0SrVTr 3qn0aWekIt+WXFqCkiEKWtVxGEoWxnQ= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:35 2025 by rpki-client