$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa File: 43abee32-0b0c-3284-ab75-86047f53ab34.roa (raw, json) Hash identifier: DLRlvSpsW/7+rS+pHHfNi7hbWHAkm6PTpH7Hz5VY/h0= Subject key identifier: E8:21:7D:F2:2C:38:D6:8B:E7:71:C0:48:F8:6C:C9:A8:3A:4F:D8:98 Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa Certificate serial: 010D0C9F4328584B67974450774A1477D08C1400 Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 13821 IP address blocks: 206.218.248.0/24 maxlen: 24 206.218.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:44:50:77:4a:14:77:d0:8c:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1c73e2dc-168c-48a6-a5e2-ee44e4bc1ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6f:a9:bf:6a:7d:76:dd:8c:53:56:bf:12:11: 29:ce:f4:63:2f:c2:e7:a7:00:6a:da:c1:f9:48:d6: 10:04:60:40:17:b4:8b:fd:0c:b4:43:f3:87:a5:b0: e2:b5:ad:a3:2c:e4:42:5a:a8:12:37:3b:0a:e1:21: 3b:6e:f1:6e:01:a4:5d:b7:1a:8a:a2:ab:c7:24:3e: 08:8a:ff:bd:22:e2:4d:5c:22:4a:47:11:89:8d:74: fb:66:b3:f8:92:6d:65:02:f7:fb:25:5f:b1:4d:99: 01:f7:62:b1:c3:ac:ec:06:1b:77:b3:d0:f1:43:4b: 18:e4:c0:31:72:a5:d2:1b:17:f1:d9:a9:bc:da:02: 54:01:fc:53:f6:7c:fa:41:27:a4:1f:f2:25:16:bf: 15:20:f3:95:c1:ee:5d:30:4a:e3:e6:eb:97:e9:eb: bb:12:41:9b:53:c2:c6:17:f6:f6:26:5f:2e:3e:1f: 6a:40:60:fe:05:ee:4b:65:5a:5f:0d:6f:79:24:ae: 4c:ec:ac:bc:62:03:ab:e2:c6:87:e9:7f:3a:71:b2: a2:6d:ae:51:a0:47:6b:67:74:5e:2f:9a:ac:e7:ea: 38:24:3e:dc:66:28:32:56:cf:99:dc:f9:1c:8a:82: 92:f4:57:65:50:32:64:95:6f:4e:96:ff:22:b7:25: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:21:7D:F2:2C:38:D6:8B:E7:71:C0:48:F8:6C:C9:A8:3A:4F:D8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl X509v3 Authority Key Identifier: keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer sbgp-ipAddrBlock: critical IPv4: 206.218.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:18:32:db:f6:88:4e:f7:2f:8e:77:4b:d2:7a:f3:b4:89:09: 6b:c4:49:3c:08:76:5a:38:66:43:a2:be:ba:d1:7a:02:2a:7d: e6:8d:62:32:10:73:50:74:a0:d2:e4:c8:25:b9:c8:97:f0:df: 88:b1:c0:26:28:e9:69:1b:b6:a7:ce:cb:c6:14:d3:1b:33:c1: ed:a9:92:7b:4a:28:75:db:14:76:3c:11:b7:02:63:9f:b7:f3: b2:33:e9:c2:87:76:4f:a6:03:0d:37:31:18:95:7b:68:ee:0c: 65:a4:d5:59:46:e6:6a:3c:c1:b8:22:0c:39:50:3e:0c:9f:be: 83:e6:09:d2:5e:21:82:17:44:30:52:93:20:3f:c8:13:24:d1: dc:62:31:23:09:52:da:44:31:9f:e2:27:96:1e:8a:16:56:b1: 63:6f:12:5d:ae:ce:f1:07:22:5e:3b:15:32:0e:5c:eb:2e:6c: 20:67:de:be:c3:ff:31:1d:2e:e7:04:b2:3d:54:fb:8a:a8:93: 09:01:8d:bf:89:a8:14:2a:ca:1f:13:32:fd:17:8e:55:e9:ee: a1:25:6d:dd:ec:7a:9c:d1:e0:5e:65:bd:91:10:cc:54:dc:4f: b8:d2:fb:d5:59:2f:eb:26:10:30:8a:dc:fe:38:5a:13:56:35: 00:44:fb:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0RQd0oUd9CMFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1NTk1NmYtNzE0Mi00NTNhLThhZWEtMTc3YTY4NGRk N2FhMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWM3M2UyZGMtMTY4Yy00OGE2LWE1ZTItZWU0NGU0YmMxY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG+pv2p9dt2MU1a/EhEpzvRjL8LnpwBq2sH5 SNYQBGBAF7SL/Qy0Q/OHpbDita2jLORCWqgSNzsK4SE7bvFuAaRdtxqKoqvHJD4I iv+9IuJNXCJKRxGJjXT7ZrP4km1lAvf7JV+xTZkB92Kxw6zsBht3s9DxQ0sY5MAx cqXSGxfx2am82gJUAfxT9nz6QSekH/IlFr8VIPOVwe5dMErj5uuX6eu7EkGbU8LG F/b2Jl8uPh9qQGD+Be5LZVpfDW95JK5M7Ky8YgOr4saH6X86cbKiba5RoEdrZ3Re L5qs5+o4JD7cZigyVs+Z3PkcioKS9FdlUDJklW9Olv8ityWcVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOghffIsONaL53HASPhsyag6T9iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1 OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdhNjg0ZGQ3YWEvNDNhYmVlMzItMGIwYy0z Mjg0LWFiNzUtODYwNDdmNTNhYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzU1NTk1NmYtNzE0Mi00NTNhLThh ZWEtMTc3YTY4NGRkN2FhLzM1NTU5NTZmLTcxNDItNDUzYS04YWVhLTE3N2E2ODRk ZDdhYS5jcmwwHwYDVR0jBBgwFoAUTnp2SaFOHZM02c2odqnRmGb0SA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdh Njg0ZGQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBztr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsYMtv2iE73L453S9J687SJCWvESTwIdlo4ZkOivrrRegIqfeaNYjIQ c1B0oNLkyCW5yJfw34ixwCYo6WkbtqfOy8YU0xszwe2pkntKKHXbFHY8EbcCY5+3 87Iz6cKHdk+mAw03MRiVe2juDGWk1VlG5mo8wbgiDDlQPgyfvoPmCdJeIYIXRDBS kyA/yBMk0dxiMSMJUtpEMZ/iJ5YeihZWsWNvEl2uzvEHIl47FTIOXOsubCBn3r7D /zEdLucEsj1U+4qokwkBjb+JqBQqyh8TMv0XjlXp7qElbd3sepzR4F5lvZEQzFTc T7jS+9VZL+smEDCK3P44WhNWNQBE+/M= -----END CERTIFICATE-----Generated at Mon Nov 3 04:48:25 2025 by rpki-client