$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa File: 71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa (raw, json) Hash identifier: dLBk19NFzNmmgbd67Th8y2JOKhsEK08xDmC9DZlC9aQ= Subject key identifier: 71:B9:F6:73:41:88:33:B6:5B:25:AE:A3:28:C0:48:4D:C2:8D:36:63 Certificate issuer: /CN=7398f99d-b512-4640-b38b-2c84db430afb Certificate serial: 010D0C9F4328584B56D7442077171456FF8F1C00 Authority key identifier: 85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 206.204.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:44:20:77:17:14:56:ff:8f:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7398f99d-b512-4640-b38b-2c84db430afb Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=f3be880d-813f-48d5-bce9-86ab8e288e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1e:05:e7:ee:ac:cb:23:c3:16:ab:da:27:2c: 5a:e7:8f:5f:fb:bc:74:09:e5:06:19:2f:fd:22:ea: 1b:58:1f:89:80:e3:46:29:7d:ad:86:f1:48:71:b3: b7:94:78:74:2a:a9:b4:0c:b3:fd:32:14:ef:1e:b8: 76:4d:0f:04:12:ec:3b:30:05:93:fb:c9:12:eb:3e: 23:c2:cb:a4:0d:32:f5:4c:84:7c:dc:00:cf:43:0a: 88:ad:c6:4e:5f:fc:d5:77:a0:9c:75:8e:16:f2:db: 24:dd:64:6f:d7:3b:4a:93:34:ff:89:15:1d:7e:25: 36:89:42:62:7a:30:68:75:29:f9:03:5c:97:11:02: 4c:1c:5d:ef:65:bf:de:be:b4:db:63:71:2d:4c:dc: 7c:1e:a2:32:1c:3d:fb:d0:39:91:da:0f:4a:cb:35: 1a:b9:85:24:8b:af:c1:e2:52:86:24:8c:52:5d:6e: 14:da:e0:7d:df:75:af:16:87:24:56:f8:6e:3f:0f: 77:3e:ee:0d:80:16:98:6c:5f:d9:39:e2:ed:2d:77: 53:4b:1a:0c:32:9b:c4:72:5e:fe:70:13:be:9d:65: 4f:fe:b7:17:b8:c5:be:ab:ca:fa:bf:c9:7e:12:5a: c1:d0:9e:67:86:07:09:0f:00:5f:77:07:65:76:73: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B9:F6:73:41:88:33:B6:5B:25:AE:A3:28:C0:48:4D:C2:8D:36:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl X509v3 Authority Key Identifier: keyid:85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer sbgp-ipAddrBlock: critical IPv4: 206.204.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:42:46:92:ed:d4:87:5a:d4:a0:c5:0e:d5:14:32:9b:ae:21: f1:2f:eb:09:17:5d:c1:c3:fb:b5:81:da:90:81:00:fd:75:95: 0a:20:23:e1:a3:07:7d:99:fc:bf:2a:7e:96:df:f7:ac:1a:62: 7a:13:87:d3:89:3c:a4:69:37:d1:77:c7:93:da:63:0a:35:32: 6d:d5:91:48:4e:ec:20:75:b7:0d:c6:c6:fc:01:37:ab:c4:17: d4:d9:1a:3c:ce:8d:30:6f:5f:f0:fa:44:fc:59:79:ab:a5:8e: f7:0f:26:bb:f6:01:cc:0e:f8:4d:5f:40:a8:f4:a1:20:c2:1c: 3c:9c:f3:6e:6f:f2:5d:c2:c0:aa:65:7c:72:27:62:17:bb:3b: 0f:55:3b:b8:69:00:22:8f:33:74:78:ed:bf:65:b3:26:cc:fa: 57:33:d0:14:6a:69:39:9b:39:0a:d6:c2:e1:26:48:a0:7a:73: a4:bc:89:32:45:d3:64:54:be:7d:0a:57:f0:10:51:1b:06:29: 7b:9b:19:04:5e:4e:e7:25:63:bc:cd:3d:0e:19:86:ea:67:52: 77:df:92:e1:95:34:34:71:08:15:66:5b:fd:39:9f:cd:ce:d1: 8c:a0:9d:86:fa:14:e9:f1:22:ca:6d:fc:9e:52:97:6e:c9:0b: 87:ec:00:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10QgdxcUVv+PHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM5OGY5OWQtYjUxMi00NjQwLWIzOGItMmM4NGRiNDMw YWZiMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjNiZTg4MGQtODEzZi00OGQ1LWJjZTktODZhYjhlMjg4ZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh4F5+6syyPDFqvaJyxa549f+7x0CeUGGS/9 IuobWB+JgONGKX2thvFIcbO3lHh0Kqm0DLP9MhTvHrh2TQ8EEuw7MAWT+8kS6z4j wsukDTL1TIR83ADPQwqIrcZOX/zVd6CcdY4W8tsk3WRv1ztKkzT/iRUdfiU2iUJi ejBodSn5A1yXEQJMHF3vZb/evrTbY3EtTNx8HqIyHD370DmR2g9KyzUauYUki6/B 4lKGJIxSXW4U2uB933WvFockVvhuPw93Pu4NgBaYbF/ZOeLtLXdTSxoMMpvEcl7+ cBO+nWVP/rcXuMW+q8r6v8l+ElrB0J5nhgcJDwBfdwdldnPeuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG59nNBiDO2WyWuoyjASE3CjTZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4 Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0ZGI0MzBhZmIvNzFiODEyZjctMzhkNC0z YzBlLWJjZDktNzMzNTQ2YjhhZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzM5OGY5OWQtYjUxMi00NjQwLWIz OGItMmM4NGRiNDMwYWZiLzczOThmOTlkLWI1MTItNDY0MC1iMzhiLTJjODRkYjQz MGFmYi5jcmwwHwYDVR0jBBgwFoAUheeQdgYu1GrTYvqeznJWQpq2z8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0 ZGI0MzBhZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsz6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClCRpLt1Ida1KDFDtUUMpuuIfEv6wkXXcHD+7WB2pCBAP11lQogI+Gj B32Z/L8qfpbf96waYnoTh9OJPKRpN9F3x5PaYwo1Mm3VkUhO7CB1tw3GxvwBN6vE F9TZGjzOjTBvX/D6RPxZeauljvcPJrv2AcwO+E1fQKj0oSDCHDyc825v8l3CwKpl fHInYhe7Ow9VO7hpACKPM3R47b9lsybM+lcz0BRqaTmbOQrWwuEmSKB6c6S8iTJF 02RUvn0KV/AQURsGKXubGQReTuclY7zNPQ4ZhupnUnffkuGVNDRxCBVmW/05n83O 0YygnYb6FOnxIspt/J5Sl27JC4fsAAY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:40 2025 by rpki-client