$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa File: 6758e236-250b-3365-a146-9e1a9f1e2a79.roa (raw, json) Hash identifier: IU9dcI542pgJ0eOCUuTlReLQ3s6rQTGJQKuvoGLE1zc= Subject key identifier: 99:6F:5A:32:1A:18:3E:87:A7:77:43:57:8F:5B:41:ED:CB:04:0F:43 Certificate issuer: /CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Certificate serial: 010D0C9F4328584B6BC75A5D6752F941FEA17600 Authority key identifier: 0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 25819 IP address blocks: 23.181.112.0/24 maxlen: 24 2602:fc6d::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5a:5d:67:52:f9:41:fe:a1:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=33a20c15-9702-438c-9188-214b560f128a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:f0:73:68:6c:81:f0:f0:01:4e:18:e7:c0: 9e:12:c7:6a:18:31:13:ae:aa:53:12:f3:a1:7f:3f: 98:ed:61:4e:ff:94:1d:22:fe:d5:cd:11:f7:b7:a8: ce:7b:1c:1f:bf:42:d8:de:e2:3a:f6:37:01:dc:fa: 6c:4f:14:f0:b6:58:07:3b:d2:28:f7:2f:ad:d9:4a: 06:e1:9c:82:1e:ec:ec:da:a0:f6:78:35:00:6d:2d: 91:77:f3:13:1e:fe:06:17:5d:ed:10:43:d0:9a:73: 7e:4a:dd:58:95:37:23:64:da:e5:40:88:dd:53:e1: 2d:dd:0d:cc:46:c9:f6:cd:e1:33:16:77:21:26:ea: 13:f5:3d:d9:3a:47:fc:52:e7:68:01:fa:9b:e6:37: 58:30:d3:8a:6a:94:24:2c:26:92:39:09:bd:c9:c9: 6e:3f:af:d4:11:68:b7:c7:f9:2b:c1:24:e3:d2:fe: af:a4:b2:15:12:57:75:42:24:a3:af:96:2c:a0:12: 35:69:0e:39:50:92:76:86:e7:79:e4:7e:0a:99:ae: e0:c3:dd:df:2c:87:6d:b4:cf:6c:c3:2c:c4:25:be: 44:44:36:b8:3c:d6:16:0b:db:26:07:bf:c7:d5:b1: ca:c6:29:71:d6:b9:60:fa:31:ed:31:b3:27:a2:f2: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6F:5A:32:1A:18:3E:87:A7:77:43:57:8F:5B:41:ED:CB:04:0F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl X509v3 Authority Key Identifier: keyid:0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer sbgp-ipAddrBlock: critical IPv4: 23.181.112.0/24 IPv6: 2602:fc6d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ac:88:80:13:54:b0:aa:3f:78:16:dc:f9:c1:7c:61:09:fd: d0:b1:15:b1:04:16:b9:af:25:2a:4e:d0:6e:25:f2:73:46:75: 0a:3a:87:61:97:92:de:cd:8e:5d:a9:e5:27:7d:79:da:a2:7d: b0:91:68:5f:78:22:66:fd:d7:f7:63:f9:09:63:3a:01:30:c7: 2d:9d:cd:fb:5c:32:a8:69:05:90:44:fe:37:d8:5d:70:57:40: 89:7e:bc:48:dd:8d:7b:00:42:43:fd:bb:4f:da:1b:f4:08:57: b1:f6:02:81:34:ae:be:84:e6:cb:93:d3:fd:c9:64:c6:4a:0a: 11:5a:25:ad:70:00:b1:ae:43:15:e8:c8:89:1f:01:52:67:e9: 9b:5e:37:2a:b7:d1:31:1e:82:fb:47:3e:3f:bb:a5:ed:55:df: 3f:ac:11:bd:47:db:ca:ac:da:33:d9:67:6a:bd:3b:7c:bb:93: 91:d6:0d:34:23:20:65:28:3f:23:df:6e:c7:98:89:01:56:29: a0:e0:96:3b:86:f9:9a:14:e3:88:60:51:45:4c:59:7d:7d:7a: bb:fe:d2:16:c5:a8:90:f5:1c:11:f6:d1:00:34:9c:1b:4d:83: ed:b8:48:1d:90:f8:14:ee:9e:53:45:c8:18:54:53:6e:2c:d8: d6:fa:cf:73 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtrx1pdZ1L5Qf6hdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3YmYtZTUxYmEwMjlk NDRjMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MzNhMjBjMTUtOTcwMi00MzhjLTkxODgtMjE0YjU2MGYxMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm7wc2hsgfDwAU4Y58CeEsdqGDETrqpTEvOh fz+Y7WFO/5QdIv7VzRH3t6jOexwfv0LY3uI69jcB3PpsTxTwtlgHO9Io9y+t2UoG 4ZyCHuzs2qD2eDUAbS2Rd/MTHv4GF13tEEPQmnN+St1YlTcjZNrlQIjdU+Et3Q3M Rsn2zeEzFnchJuoT9T3ZOkf8UudoAfqb5jdYMNOKapQkLCaSOQm9ycluP6/UEWi3 x/krwSTj0v6vpLIVEld1QiSjr5YsoBI1aQ45UJJ2hud55H4Kma7gw93fLIdttM9s wyzEJb5ERDa4PNYWC9smB7/H1bHKxilx1rlg+jHtMbMnovK5GwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJlvWjIaGD6Hp3dDV49bQe3LBA9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlm NjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFiYTAyOWQ0NGMvNjc1OGUyMzYtMjUwYi0z MzY1LWExNDYtOWUxYTlmMWUyYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3 YmYtZTUxYmEwMjlkNDRjLzNjOWY2MGQ0LWNmYmQtNGY2ZC05N2JmLWU1MWJhMDI5 ZDQ0Yy5jcmwwHwYDVR0jBBgwFoAUDxcdvoCm4oEQi7dn8WDJN3kHwLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlmNjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFi YTAyOWQ0NGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7VwMA4E AgACMAgDBgAmAvxtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxrIiAE1Swqj94Ftz5wXxhCf3QsRWxBBa5 ryUqTtBuJfJzRnUKOodhl5LezY5dqeUnfXnaon2wkWhfeCJm/df3Y/kJYzoBMMct nc37XDKoaQWQRP432F1wV0CJfrxI3Y17AEJD/btP2hv0CFex9gKBNK6+hObLk9P9 yWTGSgoRWiWtcACxrkMV6MiJHwFSZ+mbXjcqt9ExHoL7Rz4/u6XtVd8/rBG9R9vK rNoz2WdqvTt8u5OR1g00IyBlKD8j327HmIkBVimg4JY7hvmaFOOIYFFFTFl9fXq7 /tIWxaiQ9RwR9tEANJwbTYPtuEgdkPgU7p5TRcgYVFNuLNjW+s9z -----END CERTIFICATE-----Generated at Fri Oct 17 11:30:09 2025 by rpki-client