$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa File: f00f9702-64da-301c-b2bf-95c79284f35e.roa (raw, json) Hash identifier: Hz7hIea46Tys6eXSkDSA+ESpiuQnh8LMtNrWrUMpmjA= Subject key identifier: 2D:06:34:48:CF:17:2B:18:C6:9D:67:0F:61:4A:C2:FB:EB:27:38:55 Certificate issuer: /CN=714cea24-cc07-46e3-abc3-b9e783b4180b Certificate serial: 010D0C9F4328584B92DCEFC48DC03BFC204CE900 Authority key identifier: EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 198394 IP address blocks: 216.104.192.0/24 maxlen: 24 216.104.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:ef:c4:8d:c0:3b:fc:20:4c:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=714cea24-cc07-46e3-abc3-b9e783b4180b Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=67daaf2c-0deb-4acc-8935-206e0c6eebdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:8b:eb:ef:83:55:66:78:9a:5f:d8:45:70: a2:50:ed:d4:d6:2d:10:aa:cd:ad:a9:4c:25:5c:fc: fe:e0:3c:69:8b:5c:8e:b6:b9:9b:4f:61:dc:d0:e2: f3:5d:f0:c5:dc:02:b9:38:48:10:fc:ce:de:5a:f0: ce:a5:45:0d:26:bc:ea:e7:8f:87:0b:af:ec:45:d6: 57:fb:2c:11:81:b0:73:6b:3f:04:34:91:4a:78:c3: 68:75:35:46:42:a2:29:86:ab:47:bd:8a:86:95:e5: 11:ae:92:84:27:20:11:12:00:c3:32:33:b9:9a:83: 0f:f4:e5:99:e7:27:97:f3:ae:cd:93:0f:ab:96:97: 44:04:79:da:f6:91:3c:80:d6:5e:3d:ae:a2:7c:42: 78:da:1a:d5:e2:d9:eb:96:7d:ca:1f:09:23:c2:e4: e1:10:f4:5d:56:22:f7:03:4a:44:22:50:05:66:ca: 7e:11:bb:d6:23:89:43:82:81:7b:17:63:bd:a1:8d: bd:da:de:b0:0b:a8:38:ee:cb:42:f5:81:a2:7d:74: 46:6e:1c:da:04:48:c6:58:09:f1:f7:11:91:a3:1a: 84:cd:64:e6:95:b4:df:ba:f1:df:36:81:04:78:19: 7b:a6:9c:14:41:33:70:4a:6a:db:04:1a:05:f5:f0: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:06:34:48:CF:17:2B:18:C6:9D:67:0F:61:4A:C2:FB:EB:27:38:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl X509v3 Authority Key Identifier: keyid:EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer sbgp-ipAddrBlock: critical IPv4: 216.104.192.0/24 216.104.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7c:dd:d2:cc:ff:68:8b:d5:18:6b:18:61:80:8d:d3:d6:dd: 79:a8:ac:64:4d:ec:20:51:bd:79:a0:6c:d4:7a:c4:d9:49:db: 70:4a:d0:56:f9:59:d0:6d:da:2e:a8:4e:07:40:88:ba:4f:20: 9c:a4:b6:f2:c2:38:59:37:b1:f5:a2:69:76:66:f9:67:63:a3: b8:cc:21:59:e0:03:1d:30:54:27:70:eb:f8:df:f2:66:58:d6: ce:da:03:06:7c:f7:c1:79:cf:7a:c2:a8:4c:04:2a:0d:4d:44: 35:bb:34:80:b6:e7:ee:bd:ed:55:e5:36:cf:8e:d0:81:dd:d2: ee:ed:61:bb:79:1c:9d:40:74:4f:f1:96:ec:66:99:fe:28:5a: 7d:7b:76:0f:eb:0c:85:15:1a:8c:41:7e:c3:1b:58:e7:66:32: a1:36:ff:3c:78:ab:e3:23:cd:fe:50:d4:2c:b6:38:a5:4e:9a: 48:3c:31:2c:6b:7e:9d:04:63:3a:e2:3c:23:d0:fb:f3:7e:fb: 5a:cf:e6:28:a7:01:65:23:c5:94:e8:77:26:23:64:ea:f5:53: 68:0b:c4:34:f0:76:91:70:32:7e:8a:2e:4f:35:a6:1b:79:72: c9:4a:c0:28:a5:84:d7:d1:55:2d:e2:76:7e:35:9f:ce:7b:fb: b8:88:de:95 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuS3O/EjcA7/CBM6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE0Y2VhMjQtY2MwNy00NmUzLWFiYzMtYjllNzgzYjQx ODBiMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NjdkYWFmMmMtMGRlYi00YWNjLTg5MzUtMjA2ZTBjNmVlYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoCL6++DVWZ4ml/YRXCiUO3U1i0Qqs2tqUwl XPz+4Dxpi1yOtrmbT2Hc0OLzXfDF3AK5OEgQ/M7eWvDOpUUNJrzq54+HC6/sRdZX +ywRgbBzaz8ENJFKeMNodTVGQqIphqtHvYqGleURrpKEJyAREgDDMjO5moMP9OWZ 5yeX867Nkw+rlpdEBHna9pE8gNZePa6ifEJ42hrV4tnrln3KHwkjwuThEPRdViL3 A0pEIlAFZsp+EbvWI4lDgoF7F2O9oY292t6wC6g47stC9YGifXRGbhzaBEjGWAnx 9xGRoxqEzWTmlbTfuvHfNoEEeBl7ppwUQTNwSmrbBBoF9fCFHQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC0GNEjPFysYxp1nD2FKwvvrJzhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MTRj ZWEyNC1jYzA3LTQ2ZTMtYWJjMy1iOWU3ODNiNDE4MGIvZjAwZjk3MDItNjRkYS0z MDFjLWIyYmYtOTVjNzkyODRmMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzE0Y2VhMjQtY2MwNy00NmUzLWFi YzMtYjllNzgzYjQxODBiLzcxNGNlYTI0LWNjMDctNDZlMy1hYmMzLWI5ZTc4M2I0 MTgwYi5jcmwwHwYDVR0jBBgwFoAU6refjjpF09onSd2z0EwJLDvrbB4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MTRjZWEyNC1jYzA3LTQ2ZTMtYWJjMy1iOWU3 ODNiNDE4MGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2GjAAwQA 2GjLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIJ83dLM/2iL1RhrGGGAjdPW3XmorGRN7CBRvXmgbNR6xNlJ 23BK0Fb5WdBt2i6oTgdAiLpPIJyktvLCOFk3sfWiaXZm+Wdjo7jMIVngAx0wVCdw 6/jf8mZY1s7aAwZ898F5z3rCqEwEKg1NRDW7NIC25+697VXlNs+O0IHd0u7tYbt5 HJ1AdE/xluxmmf4oWn17dg/rDIUVGoxBfsMbWOdmMqE2/zx4q+Mjzf5Q1Cy2OKVO mkg8MSxrfp0EYzriPCPQ+/N++1rP5iinAWUjxZTodyYjZOr1U2gLxDTwdpFwMn6K Lk81pht5cslKwCilhNfRVS3idn41n857+7iI3pU= -----END CERTIFICATE-----Generated at Sat Oct 25 23:56:29 2025 by rpki-client