$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3f93a57e-5bb0-3f20-8e24-2a3d3c229b69.roa File: 3f93a57e-5bb0-3f20-8e24-2a3d3c229b69.roa (raw, json) Hash identifier: y1gbex2KmS0KdLZ39Ab4m6j0XKV8oWG5UxJchXhHXXY= Subject key identifier: 8B:A2:3A:CF:AA:53:21:CC:C8:99:D9:59:39:4E:93:6B:24:9B:21:DA Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584B23C08663063B1D0D7DDAC320 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3f93a57e-5bb0-3f20-8e24-2a3d3c229b69.roa Signing time: Tue 09 Sep 2025 17:48:54 +0000 ROA not before: Tue 09 Sep 2025 17:48:54 +0000 ROA not after: Mon 08 Dec 2025 18:48:54 +0000 asID: 5650 IP address blocks: 206.174.128.0/22 maxlen: 24 206.174.144.0/22 maxlen: 24 206.174.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:c0:86:63:06:3b:1d:0d:7d:da:c3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Sep 9 17:48:54 2025 GMT Not After : Dec 8 18:48:54 2025 GMT Subject: CN=0bf182f6-ed63-4006-a014-cb1fb63c1918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:23:90:08:5e:eb:78:3b:cc:e9:b5:e6:bc:d7: 6d:55:c5:f7:81:5a:7a:ad:3b:85:1f:0d:28:52:82: ed:40:4a:ed:d3:ff:3e:ad:a2:ab:40:0a:24:6a:dd: fc:df:ef:aa:a0:b2:19:7d:33:f2:eb:22:b7:da:81: ad:ab:04:12:2d:4c:63:f0:0c:6e:54:9f:92:24:80: 1e:d3:a6:84:76:b0:f1:cf:e2:d3:b6:5b:3e:44:a0: 5e:6e:3e:77:20:da:ba:60:8d:fc:e7:63:28:1a:a2: bc:78:7d:bc:c3:42:d0:e5:1a:91:51:87:7d:bb:4e: b9:b8:4e:9c:dd:0f:67:d0:f9:c9:1c:a3:00:85:ab: c2:e5:8d:e2:8d:a2:8a:14:ca:c2:2f:b4:d5:c0:28: 21:44:c4:2c:1d:20:32:7b:36:e5:de:17:fe:ea:08: 3f:fc:4f:42:16:2b:a3:46:62:37:5f:38:2c:ef:04: 02:0b:55:44:78:cf:ee:28:d7:18:6c:6a:7f:96:45: 82:5b:b7:f4:f4:5c:53:e5:bf:3c:c6:54:f5:a4:87: 65:c3:5c:23:4d:c0:68:ad:70:32:2b:70:38:ed:f9: 8f:e7:3b:7a:ec:37:71:6e:6a:00:35:86:45:90:10: 3b:b6:d5:fd:63:93:8e:14:b6:07:02:e7:9a:c5:cb: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A2:3A:CF:AA:53:21:CC:C8:99:D9:59:39:4E:93:6B:24:9B:21:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/3f93a57e-5bb0-3f20-8e24-2a3d3c229b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.128.0/22 206.174.144.0/22 206.174.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5f:cf:5e:ac:b8:dc:37:13:ff:e8:68:dc:aa:73:e9:21:95: fc:e4:fe:45:92:2f:46:1c:32:a3:75:36:53:65:7e:71:b4:bb: f0:f4:13:2d:2b:aa:b2:b8:44:0c:f6:d8:f0:ec:19:7d:43:ab: 67:a1:44:bd:43:e8:31:b2:8d:35:fe:21:7a:b7:b2:8a:fd:83: 3f:0a:c3:40:25:c8:b6:33:e3:ed:d3:32:af:94:0b:07:08:48: ac:10:e2:a6:c8:1a:2a:10:26:4e:d1:46:62:03:c9:47:77:6d: 4b:d8:82:b4:e9:85:06:d2:a9:82:fe:17:44:a4:48:2e:eb:47: ba:f9:d1:49:37:ea:d7:e5:18:04:57:95:7a:88:6e:52:79:7f: da:45:99:e1:e6:47:ab:8f:21:66:39:c0:ac:8d:93:1b:8e:81: 43:18:88:b9:31:9b:0b:a2:be:f1:f9:35:92:b8:ed:40:a0:90: a7:ee:6e:59:3a:59:d2:e5:0c:35:4a:3a:25:00:f4:aa:2a:45: 5b:f9:7f:27:84:f4:7b:9c:3a:8c:ad:0f:0d:f9:46:b9:d0:b7: 4f:15:fb:4d:6c:1e:db:ea:f7:1b:28:8d:63:5f:a2:c9:5b:43: cc:ea:9f:43:61:75:05:5e:97:45:fa:50:8b:aa:62:52:cd:32: b6:69:8d:25 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsjwIZjBjsdDX3awyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDkwOTE3NDg1NFoXDTI1MTIwODE4NDg1NFowLzEtMCsGA1UEAxMk MGJmMTgyZjYtZWQ2My00MDA2LWEwMTQtY2IxZmI2M2MxOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSOQCF7reDvM6bXmvNdtVcX3gVp6rTuFHw0o UoLtQErt0/8+raKrQAokat383++qoLIZfTPy6yK32oGtqwQSLUxj8AxuVJ+SJIAe 06aEdrDxz+LTtls+RKBebj53INq6YI3852MoGqK8eH28w0LQ5RqRUYd9u065uE6c 3Q9n0PnJHKMAhavC5Y3ijaKKFMrCL7TVwCghRMQsHSAyezbl3hf+6gg//E9CFiuj RmI3Xzgs7wQCC1VEeM/uKNcYbGp/lkWCW7f09FxT5b88xlT1pIdlw1wjTcBorXAy K3A47fmP5zt67DdxbmoANYZFkBA7ttX9Y5OOFLYHAueaxcvwxwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIuiOs+qUyHMyJnZWTlOk2skmyHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvM2Y5M2E1N2UtNWJiMC0z ZjIwLThlMjQtMmEzZDNjMjI5YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCzq6AAwQC zq6QAwQDzq6YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAlfz16suNw3E//oaNyqc+khlfzk/kWSL0YcMqN1 NlNlfnG0u/D0Ey0rqrK4RAz22PDsGX1Dq2ehRL1D6DGyjTX+IXq3sor9gz8Kw0Al yLYz4+3TMq+UCwcISKwQ4qbIGioQJk7RRmIDyUd3bUvYgrTphQbSqYL+F0SkSC7r R7r50Uk36tflGARXlXqIblJ5f9pFmeHmR6uPIWY5wKyNkxuOgUMYiLkxmwuivvH5 NZK47UCgkKfublk6WdLlDDVKOiUA9KoqRVv5fyeE9HucOoytDw35RrnQt08V+01s Htvq9xsojWNfoslbQ8zqn0NhdQVel0X6UIuqYlLNMrZpjSU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:37 2025 by rpki-client