$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa File: 283f3339-2271-3365-b5e0-e0cbd98ce2be.roa (raw, json) Hash identifier: S0dvv/QKC7yQIVIdv3Cgtn6d/OGCkmr/jcU/1DED4Ss= Subject key identifier: CE:43:C9:12:9D:14:D6:0C:29:D7:DA:27:B0:79:70:C8:13:9F:77:5E Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e Certificate serial: 010D0C9F4328584B3C51B5AA8D895CA4CC6B58C0 Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 13737 IP address blocks: 206.212.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b5:aa:8d:89:5c:a4:cc:6b:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=9229d74e-3833-4c03-bf6d-ea2d76a3bb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:c5:ab:5f:2e:ba:5b:e0:11:12:26:87:6d: 52:6f:a4:04:c9:78:5c:fe:42:ee:d9:53:f3:81:89: 21:27:88:d8:05:31:39:20:76:95:09:a5:8a:35:3b: 1b:0a:6f:6d:f2:27:41:0f:05:ea:d8:35:31:70:f9: 4f:b1:75:4b:c1:58:33:cd:2e:eb:3f:06:ee:4e:e1: 08:9b:09:5a:11:88:03:0c:5b:61:1b:a0:8b:bf:3f: 49:96:02:c3:2c:f2:e0:76:5e:45:d0:de:c2:62:2c: d7:d5:6f:1f:4a:fd:9d:01:df:a7:a1:d1:16:f2:1d: 49:78:d1:92:c1:cb:57:32:2c:ad:77:21:41:72:3f: 91:d8:76:00:a2:45:03:1d:00:51:9f:51:b9:6a:dc: 14:22:63:5d:d6:2b:83:4e:33:c8:ad:76:f2:e9:f1: fd:1f:0e:85:42:4d:ff:e4:70:42:c6:dd:0a:ef:ec: 68:b0:5c:cb:bc:42:79:19:c1:78:4c:97:5f:88:60: 51:e2:43:4d:e1:d3:df:32:72:fc:05:2e:f2:54:18: 51:c9:52:e6:20:f5:61:c1:a0:62:2b:74:6a:b0:f3: c9:57:f8:db:67:2e:21:46:b3:28:83:d3:f0:16:6c: 87:4d:3f:e3:7e:2a:ec:c6:36:13:20:27:2f:26:3a: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:43:C9:12:9D:14:D6:0C:29:D7:DA:27:B0:79:70:C8:13:9F:77:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl X509v3 Authority Key Identifier: keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer sbgp-ipAddrBlock: critical IPv4: 206.212.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:03:07:38:a5:6e:43:2d:f2:6a:b4:fa:4c:6a:ea:bb:d0:4a: c1:1e:02:00:39:fb:1e:98:96:ba:2f:52:cc:74:c6:3d:ab:50: 88:34:c0:b3:30:88:e1:23:bf:f3:95:48:43:d5:5b:64:6a:51: 3b:e9:0d:51:20:c2:d8:36:2a:82:a6:6b:27:6d:34:2a:05:2a: ba:96:b4:3b:eb:28:4a:19:7a:06:08:2d:e8:2f:06:84:ff:3b: 0a:e4:9b:5b:7e:8f:16:9d:24:33:31:cf:b8:dd:a9:a4:a2:64: d4:51:ff:05:cc:61:0a:06:74:ee:2a:f9:2f:00:47:6a:ed:75: 92:3c:3a:3d:fe:ea:1f:7e:6c:e8:90:d7:6e:a0:bb:04:87:c3: f7:a8:e3:37:d9:5c:7b:06:a3:62:c7:ad:ff:ef:aa:32:02:af: 99:68:c6:1c:6b:98:28:35:c9:c0:73:93:cd:3b:a6:79:3f:80: e3:d8:4b:cb:df:1a:1b:35:40:c7:31:17:e1:71:70:59:82:80: b5:f4:a0:ae:12:5c:d7:4b:41:7b:3c:3d:13:e3:76:e0:38:6a: 0c:aa:e2:1d:fb:9a:12:27:ac:5f:c5:70:7c:2e:02:f6:2c:33: 26:96:a2:d6:ab:cc:e9:d3:5b:6f:b7:4f:7e:ec:16:12:6e:11: b9:15:b3:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbWqjYlcpMxrWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1 MzJlMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk OTIyOWQ3NGUtMzgzMy00YzAzLWJmNmQtZWEyZDc2YTNiYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXrFq18uulvgERImh21Sb6QEyXhc/kLu2VPz gYkhJ4jYBTE5IHaVCaWKNTsbCm9t8idBDwXq2DUxcPlPsXVLwVgzzS7rPwbuTuEI mwlaEYgDDFthG6CLvz9JlgLDLPLgdl5F0N7CYizX1W8fSv2dAd+nodEW8h1JeNGS wctXMiytdyFBcj+R2HYAokUDHQBRn1G5atwUImNd1iuDTjPIrXby6fH9Hw6FQk3/ 5HBCxt0K7+xosFzLvEJ5GcF4TJdfiGBR4kNN4dPfMnL8BS7yVBhRyVLmIPVhwaBi K3RqsPPJV/jbZy4hRrMog9PwFmyHTT/jfirsxjYTICcvJjpO9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5DyRKdFNYMKdfaJ7B5cMgTn3deMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvMjgzZjMzMzktMjI3MS0z MzY1LWI1ZTAtZTBjYmQ5OGNlMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3 NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztT/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsDBzilbkMt8mq0+kxq6rvQSsEeAgA5+x6YlrovUsx0xj2rUIg0wLMw iOEjv/OVSEPVW2RqUTvpDVEgwtg2KoKmaydtNCoFKrqWtDvrKEoZegYILegvBoT/ Owrkm1t+jxadJDMxz7jdqaSiZNRR/wXMYQoGdO4q+S8AR2rtdZI8Oj3+6h9+bOiQ 126guwSHw/eo4zfZXHsGo2LHrf/vqjICr5loxhxrmCg1ycBzk807pnk/gOPYS8vf Ghs1QMcxF+FxcFmCgLX0oK4SXNdLQXs8PRPjduA4agyq4h37mhInrF/FcHwuAvYs MyaWotarzOnTW2+3T37sFhJuEbkVs38= -----END CERTIFICATE-----Generated at Sat Oct 11 18:29:59 2025 by rpki-client