$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/70fa27d9-eff7-30b2-8436-887ad9d8093e.roa File: 70fa27d9-eff7-30b2-8436-887ad9d8093e.roa (raw, json) Hash identifier: JfxhSoRfz/T3Zukj+WbXqJVUP0JajDjsb6OHjCLJmcQ= Subject key identifier: 77:36:0B:4C:F1:86:88:67:AE:FF:F3:4F:3E:52:6C:E8:17:A0:7B:88 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B25FC49C11E1C4E5A5651DE40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/70fa27d9-eff7-30b2-8436-887ad9d8093e.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 3257 IP address blocks: 206.214.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:49:c1:1e:1c:4e:5a:56:51:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=c043bff4-dab6-403a-8e7a-a1b3484387b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:54:de:93:94:21:04:98:f3:7f:5c:6c:04:d3: eb:39:f0:44:cd:a8:8d:58:fe:a0:b6:68:62:d7:ff: 6e:44:84:f7:bc:77:7f:35:94:d9:41:5e:37:97:74: 03:5c:29:a1:74:29:5b:b0:3b:6d:2e:39:69:37:7e: ab:18:ff:e6:7a:e5:0f:3d:ae:57:99:39:30:e2:0b: 8c:94:b6:bb:9d:22:c9:ee:9a:64:7d:61:e6:1f:12: 3f:68:02:5b:00:2c:b9:02:2f:45:0f:ad:31:be:7f: 79:dd:a6:b0:4f:07:32:6d:ea:a7:5f:27:43:9b:d1: 14:f1:10:9b:de:ba:97:2b:84:89:20:cf:a1:69:47: d6:6f:5b:46:2b:99:89:26:1a:95:6e:95:78:62:5f: 40:15:05:e5:e5:da:fc:47:d4:48:bc:ec:d2:ca:0a: 15:f7:40:6b:74:70:fd:8f:9f:28:c9:ec:6b:d9:41: 11:ba:4c:ea:d9:69:ca:15:71:02:42:60:9a:95:b1: 1b:f9:89:22:ab:81:75:22:95:6c:4b:69:41:a4:43: 86:82:14:44:05:4b:6e:d6:b9:ae:f3:b5:5e:2e:ae: 0f:44:f1:74:04:f7:a7:56:dc:61:3b:0a:7d:3c:48: 19:cb:dc:e6:5c:a9:42:62:d1:57:d4:12:9d:21:a0: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:0B:4C:F1:86:88:67:AE:FF:F3:4F:3E:52:6C:E8:17:A0:7B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/70fa27d9-eff7-30b2-8436-887ad9d8093e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 206.214.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e5:48:4e:f9:87:2a:eb:51:a3:e3:94:92:15:9d:84:7f:e6: b2:c3:6d:a8:bd:f7:5e:69:b9:43:9c:a2:ae:14:d3:90:33:ef: 14:91:2b:50:9b:b0:1e:04:60:40:67:6f:5e:94:42:b7:f9:eb: 56:7e:a1:74:d0:39:6a:f6:4d:f1:97:a2:cc:b1:40:bb:18:ac: 61:f3:4b:1b:b7:4f:d5:5c:0e:0b:ba:02:46:c2:e9:47:b1:69: 6a:5e:77:e1:b5:80:da:91:1b:74:f0:bd:77:8d:57:3b:96:d9: 68:e9:8e:60:77:bb:84:16:12:a9:30:21:22:29:d8:a5:07:45: 41:53:c0:34:b3:48:e6:e0:ee:f1:48:d9:c7:8b:9a:f0:3e:a7: c6:03:7d:3d:34:a9:cf:9f:62:3c:ef:47:f3:d5:a6:30:d9:70: f5:cd:32:42:8b:c0:23:24:b5:fb:e7:9e:e7:50:06:8e:0a:e0: cb:c0:e8:21:f4:05:69:50:28:d3:16:f4:3a:84:96:00:84:0d: a6:df:fd:96:52:04:3f:6a:1c:08:15:68:0f:82:7c:6c:bd:81: e0:e4:77:ea:f7:33:bc:15:93:4c:9d:eb:db:f7:a4:00:33:f7: c6:bb:c9:45:74:3f:36:e9:44:d0:e4:8e:15:de:5c:d8:8d:59: 0a:5b:3c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EnBHhxOWlZR3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YzA0M2JmZjQtZGFiNi00MDNhLThlN2EtYTFiMzQ4NDM4N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFTek5QhBJjzf1xsBNPrOfBEzaiNWP6gtmhi 1/9uRIT3vHd/NZTZQV43l3QDXCmhdClbsDttLjlpN36rGP/meuUPPa5XmTkw4guM lLa7nSLJ7ppkfWHmHxI/aAJbACy5Ai9FD60xvn953aawTwcybeqnXydDm9EU8RCb 3rqXK4SJIM+haUfWb1tGK5mJJhqVbpV4Yl9AFQXl5dr8R9RIvOzSygoV90BrdHD9 j58oyexr2UERukzq2WnKFXECQmCalbEb+Ykiq4F1IpVsS2lBpEOGghREBUtu1rmu 87VeLq4PRPF0BPenVtxhOwp9PEgZy9zmXKlCYtFX1BKdIaAUCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc2C0zxhohnrv/zTz5SbOgXoHuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNzBmYTI3ZDktZWZmNy0z MGIyLTg0MzYtODg3YWQ5ZDgwOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnlSE75hyrrUaPjlJIVnYR/5rLDbai9915puUOcoq4U05Az7xSRK1Cb sB4EYEBnb16UQrf561Z+oXTQOWr2TfGXosyxQLsYrGHzSxu3T9VcDgu6AkbC6Uex aWped+G1gNqRG3TwvXeNVzuW2WjpjmB3u4QWEqkwISIp2KUHRUFTwDSzSObg7vFI 2ceLmvA+p8YDfT00qc+fYjzvR/PVpjDZcPXNMkKLwCMktfvnnudQBo4K4MvA6CH0 BWlQKNMW9DqElgCEDabf/ZZSBD9qHAgVaA+CfGy9geDkd+r3M7wVk0yd69v3pAAz 98a7yUV0PzbpRNDkjhXeXNiNWQpbPMU= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:31 2025 by rpki-client