$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa File: 3b563e0a-43f7-39c7-9202-f9be0846f377.roa (raw, json) Hash identifier: O9miui5uOsrYaeL0JKMa9XrofLJxFYIzkSdMx04MWZs= Subject key identifier: BB:91:65:AF:E7:0F:18:B4:26:26:A0:EA:7F:53:53:B5:33:10:F3:06 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B0735CD387400D3123C8E80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 206.108.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:35:cd:38:74:00:d3:12:3c:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9e18fa67-2a37-4690-9e99-81c74b0a0689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:96:41:c4:4d:4b:99:a8:c5:ea:8f:4c:e7: cc:fe:51:dc:eb:b0:63:e1:55:31:cb:ce:b3:9b:e6: c4:95:7f:38:52:35:4b:db:2d:b5:69:c4:eb:c3:e5: 36:e3:f0:63:c9:0a:a8:d8:60:8f:2d:f4:45:65:a9: eb:4f:fd:95:6b:3b:61:d6:c2:f4:c9:e2:4b:d1:45: 8d:dc:50:81:ba:71:ad:81:fe:e7:6b:a6:bc:05:bc: ea:71:5c:57:31:2f:4c:fb:00:3e:ca:b3:3f:03:35: f5:40:72:c2:49:fe:26:49:b0:21:d7:71:61:31:ce: a2:6f:22:80:85:7e:51:eb:be:ef:44:72:71:0e:c4: a8:5d:1c:f6:e0:82:3b:a9:e5:d2:e6:05:0f:d9:06: 98:e8:46:dd:33:34:d7:74:d5:ff:c1:c2:b9:fa:65: e1:68:d0:0c:2f:6c:52:6b:68:db:17:30:29:34:33: 20:58:97:2b:e7:5b:e3:d7:67:2d:0e:02:69:77:7b: 5d:b5:04:a0:1d:7c:20:80:26:3a:1f:ee:57:74:bf: c6:25:40:37:98:dc:85:e7:37:f1:dc:39:f8:ed:53: 25:ae:b0:e2:da:9a:04:2d:f4:d3:1f:9a:45:6c:68: 32:5e:5f:bd:5a:c2:8d:e2:fb:0a:f1:19:8e:13:00: 00:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:91:65:AF:E7:0F:18:B4:26:26:A0:EA:7F:53:53:B5:33:10:F3:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 206.108.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:41:00:c9:9e:a5:95:af:f1:0b:e1:9d:18:0d:eb:d7:79:91: 1a:78:77:d7:71:22:1d:54:d9:0a:60:a0:6b:21:dd:d2:10:6e: 96:3b:2d:03:e9:a0:dc:e3:a2:12:be:7c:1f:ca:1e:cc:f4:c3: c3:a6:da:00:9f:64:b7:f9:18:ae:db:04:1d:26:ff:9e:bb:06: e9:1b:66:16:bf:ce:05:5f:46:92:58:1a:63:5d:78:7e:4d:4a: 80:bb:64:e0:7b:0c:35:05:04:33:06:a8:46:ef:da:14:32:e1: 6f:86:cb:37:5f:4c:4a:1e:fa:c8:70:a1:93:82:78:10:0a:ac: 87:2a:ac:88:9b:93:bb:bb:fb:e0:61:90:d3:e6:fa:67:1d:1b: 2c:c3:11:a6:b4:6f:ec:9f:b0:a6:04:f8:73:7d:28:84:79:94: e5:f2:d7:af:99:f5:a4:60:5f:bc:da:35:6b:e4:40:6c:42:f2: ec:22:83:79:3e:46:3a:80:3f:97:e8:59:c3:ab:3f:e5:e7:1a: 0e:1b:88:44:34:7e:9c:00:e2:be:82:c5:8e:8d:70:07:a4:85: 31:6d:51:68:66:73:2a:d6:c2:63:b8:7a:49:d7:92:5a:58:d5: 00:fa:4e:ee:49:10:6f:17:70:cc:8e:55:1c:b3:d3:13:0b:d7: 66:bb:ba:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzXNOHQA0xI8joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWUxOGZhNjctMmEzNy00NjkwLTllOTktODFjNzRiMGEwNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaeWQcRNS5moxeqPTOfM/lHc67Bj4VUxy86z m+bElX84UjVL2y21acTrw+U24/BjyQqo2GCPLfRFZanrT/2Vazth1sL0yeJL0UWN 3FCBunGtgf7na6a8BbzqcVxXMS9M+wA+yrM/AzX1QHLCSf4mSbAh13FhMc6ibyKA hX5R677vRHJxDsSoXRz24II7qeXS5gUP2QaY6EbdMzTXdNX/wcK5+mXhaNAML2xS a2jbFzApNDMgWJcr51vj12ctDgJpd3tdtQSgHXwggCY6H+5XdL/GJUA3mNyF5zfx 3Dn47VMlrrDi2poELfTTH5pFbGgyXl+9WsKN4vsK8RmOEwAAkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuRZa/nDxi0Jiag6n9TU7UzEPMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2I1NjNlMGEtNDNmNy0z OWM3LTkyMDItZjliZTA4NDZmMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzmzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVBAMmepZWv8QvhnRgN69d5kRp4d9dxIh1U2QpgoGsh3dIQbpY7LQPp oNzjohK+fB/KHsz0w8Om2gCfZLf5GK7bBB0m/567BukbZha/zgVfRpJYGmNdeH5N SoC7ZOB7DDUFBDMGqEbv2hQy4W+GyzdfTEoe+shwoZOCeBAKrIcqrIibk7u7++Bh kNPm+mcdGyzDEaa0b+yfsKYE+HN9KIR5lOXy16+Z9aRgX7zaNWvkQGxC8uwig3k+ RjqAP5foWcOrP+XnGg4biEQ0fpwA4r6CxY6NcAekhTFtUWhmcyrWwmO4eknXklpY 1QD6Tu5JEG8XcMyOVRyz0xML12a7ukw= -----END CERTIFICATE-----Generated at Fri Oct 24 08:22:15 2025 by rpki-client