$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3ad8a717-79da-354c-a3de-a22628c9d179.roa File: 3ad8a717-79da-354c-a3de-a22628c9d179.roa (raw, json) Hash identifier: 3Ekc2VPzJEWmAkclzQgC4aw2PZtDolnFwQOcIYkvklg= Subject key identifier: 65:94:F6:30:9A:C0:ED:A1:4F:05:B5:EF:2F:B4:4B:A7:03:BE:87:80 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B9995CAFF2FA4D9EC6E8C1900 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3ad8a717-79da-354c-a3de-a22628c9d179.roa Signing time: Tue 21 Oct 2025 22:48:11 +0000 ROA not before: Tue 21 Oct 2025 22:48:11 +0000 ROA not after: Mon 19 Jan 2026 23:48:11 +0000 asID: 209 IP address blocks: 206.103.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:95:ca:ff:2f:a4:d9:ec:6e:8c:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 21 22:48:11 2025 GMT Not After : Jan 19 23:48:11 2026 GMT Subject: CN=7a9117cd-a4dc-4483-acc2-ce1de7937a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:9e:40:2a:a8:23:4e:81:6a:60:c2:01:0f: 9e:25:0b:f8:d2:c4:83:1f:6c:44:a2:7a:f1:21:a2: d1:7b:bb:7d:69:3b:85:67:3b:33:77:34:11:5b:12: 47:61:d4:b1:41:b3:e5:bb:3b:c7:ae:f8:91:9f:bf: a1:21:3b:1c:6a:0e:10:e0:7f:91:43:79:f3:97:0d: bc:13:9f:28:00:6b:5f:8c:c2:54:e1:e8:b6:e5:61: 8b:9c:be:ad:92:5a:c2:fe:3b:12:b0:20:b3:8c:78: ee:54:b2:6e:15:12:26:52:47:2b:ea:a6:85:85:d9: e4:18:96:d1:8f:a0:91:74:aa:d3:94:d4:88:59:97: fe:fb:50:d6:26:00:30:7e:47:a7:cc:30:f3:32:f1: 0b:98:c5:ee:75:40:f4:6f:51:7f:41:73:ea:8e:62: 84:c5:fb:bb:b3:f2:c4:0c:40:ea:6b:d2:24:ef:5d: 22:95:67:f2:42:d1:64:9a:d7:4e:b9:10:e9:3e:fe: c7:1a:4f:cc:32:39:b7:6c:85:fd:af:9b:5f:ef:c9: 60:54:d6:9f:8c:a6:3d:a2:43:b2:dd:71:56:77:d7: ae:43:72:2c:07:3e:93:bb:54:6b:03:ac:46:09:59: f6:3f:72:d5:e0:8e:5f:8f:65:93:0e:0c:85:84:8b: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:F6:30:9A:C0:ED:A1:4F:05:B5:EF:2F:B4:4B:A7:03:BE:87:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3ad8a717-79da-354c-a3de-a22628c9d179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 206.103.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:74:5e:31:7c:4d:01:ad:c7:c9:a8:91:5d:1d:ee:01:9e:53: 71:b0:a1:a9:00:e2:a4:56:7d:6f:0f:ed:d8:37:b0:40:2e:09: 7b:df:66:fa:99:d3:af:6b:33:7e:c0:62:29:be:8c:a8:f6:22: 13:d9:8c:aa:c7:e8:91:4e:16:4d:b3:c6:f8:bc:ba:9a:1a:fb: eb:1a:cd:44:79:3a:af:f7:d2:15:dc:82:f3:fa:31:5a:7d:d4: ff:fd:ac:7c:ec:06:43:c4:5a:61:76:f4:2b:a6:5f:01:31:37: 52:8c:d5:76:34:f7:91:26:bb:0f:0b:82:98:1a:25:c4:2e:60: 6a:2c:de:28:f0:02:da:b8:02:45:76:f7:c3:d0:2d:4c:cf:55: 37:08:cc:ef:e9:cb:e6:71:e7:5d:7f:2c:9e:94:cd:45:96:47: 81:f2:24:9e:35:5d:9a:fb:e6:a2:a4:cb:f0:f8:0e:63:b2:48: 96:ac:52:cc:7b:a3:59:41:ab:3d:3a:3a:50:fe:3d:8b:a3:2c: 38:94:a2:05:8b:d1:25:e2:ab:8b:4e:32:ba:0b:55:b7:71:db: ae:2f:87:21:02:76:b3:53:da:b1:0c:b6:6f:68:0d:b3:25:a0: 9e:b0:0d:62:43:74:b8:b1:80:e0:0a:61:bf:26:9b:3f:54:86: b0:67:1b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZlcr/L6TZ7G6MGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTAyMTIyNDgxMVoXDTI2MDExOTIzNDgxMVowLzEtMCsGA1UEAxMk N2E5MTE3Y2QtYTRkYy00NDgzLWFjYzItY2UxZGU3OTM3YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAqeQCqoI06BamDCAQ+eJQv40sSDH2xEonrx IaLRe7t9aTuFZzszdzQRWxJHYdSxQbPluzvHrviRn7+hITscag4Q4H+RQ3nzlw28 E58oAGtfjMJU4ei25WGLnL6tklrC/jsSsCCzjHjuVLJuFRImUkcr6qaFhdnkGJbR j6CRdKrTlNSIWZf++1DWJgAwfkenzDDzMvELmMXudUD0b1F/QXPqjmKExfu7s/LE DEDqa9Ik710ilWfyQtFkmtdOuRDpPv7HGk/MMjm3bIX9r5tf78lgVNafjKY9okOy 3XFWd9euQ3IsBz6Tu1RrA6xGCVn2P3LV4I5fj2WTDgyFhIvhZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWU9jCawO2hTwW17y+0S6cDvoeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvM2FkOGE3MTctNzlkYS0z NTRjLWEzZGUtYTIyNjI4YzlkMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzmfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR0XjF8TQGtx8mokV0d7gGeU3GwoakA4qRWfW8P7dg3sEAuCXvfZvqZ 069rM37AYim+jKj2IhPZjKrH6JFOFk2zxvi8upoa++sazUR5Oq/30hXcgvP6MVp9 1P/9rHzsBkPEWmF29CumXwExN1KM1XY095Emuw8LgpgaJcQuYGos3ijwAtq4AkV2 98PQLUzPVTcIzO/py+Zx511/LJ6UzUWWR4HyJJ41XZr75qKky/D4DmOySJasUsx7 o1lBqz06OlD+PYujLDiUogWL0SXiq4tOMroLVbdx264vhyECdrNT2rEMtm9oDbMl oJ6wDWJDdLixgOAKYb8mmz9UhrBnG50= -----END CERTIFICATE-----Generated at Tue Oct 28 07:02:48 2025 by rpki-client