$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e219ec6-2ff3-315c-9d3e-9fb95322eb5b.roa File: 6e219ec6-2ff3-315c-9d3e-9fb95322eb5b.roa (raw, json) Hash identifier: imkRyoDvBMUk9RRgN9S7aWLTVor6lHoaUYLu4qII7A0= Subject key identifier: CF:EC:91:09:90:C9:32:D6:FE:B3:10:30:2B:3B:7A:5A:57:15:99:47 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C685F94603697E6EE6C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e219ec6-2ff3-315c-9d3e-9fb95322eb5b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 6171 IP address blocks: 206.75.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c6:85:f9:46:03:69:7e:6e:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=0cccdeae-2e89-4d37-b91e-9d63393cae2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:88:f2:79:2c:c5:f4:81:a1:ae:f6:90:0a: 50:f2:bb:f8:2c:92:4d:06:c6:e8:a5:ec:12:ac:69: 17:65:69:16:f0:27:aa:d4:de:29:dc:93:f5:99:16: c2:fb:5b:26:94:47:60:11:ad:76:65:87:4b:52:b0: ee:19:07:0b:fa:25:a6:e0:50:a7:d7:5a:72:b0:d0: f5:87:00:56:8b:cf:49:e5:12:ee:2a:18:5e:1a:fa: ff:a7:ce:b6:3c:1f:cb:b0:cd:0b:cd:28:5d:7b:54: 66:d2:19:49:8c:96:14:41:d6:49:2b:06:98:02:de: a3:ea:4c:a6:4b:6f:45:c9:c7:a4:73:e4:81:ae:95: b8:00:0e:d9:e7:1e:c9:cc:05:f4:ca:38:d1:2c:1c: 22:3d:fb:49:9e:3a:3a:bd:3e:f8:ee:00:08:c5:a3: 6c:05:55:e4:94:a6:7f:23:71:95:3e:54:8b:8d:6f: aa:3b:58:96:f7:7c:87:bb:c8:cb:77:07:12:b4:d4: fb:fa:32:a7:74:b9:0d:19:dc:2f:60:5b:55:ec:82: 0c:5f:1a:ae:71:da:41:63:27:97:4d:5a:4c:08:5f: 1d:84:07:77:f9:af:61:7b:0f:21:be:7c:ed:75:1e: 52:e3:9c:04:e3:94:e0:a4:76:6a:2e:27:ad:6b:cb: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EC:91:09:90:C9:32:D6:FE:B3:10:30:2B:3B:7A:5A:57:15:99:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e219ec6-2ff3-315c-9d3e-9fb95322eb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 206.75.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:23:21:55:4b:47:d3:af:12:e0:47:09:7c:e2:17:22:34:df: 5d:34:be:1d:c6:8a:88:c5:ec:08:f5:85:19:43:65:a8:9d:eb: 3c:e6:77:6c:aa:9c:f1:f2:8f:d7:94:2a:90:b8:9f:e7:4d:e9: ca:8c:d0:14:a2:97:5e:8a:c8:be:c2:ba:f3:f8:a4:ac:3f:66: b4:28:aa:19:5e:fc:48:b3:08:e5:de:02:bc:56:11:6e:69:7c: 03:d9:54:e3:59:f7:32:00:45:96:c0:1c:0e:21:13:b0:99:30: b8:0d:dc:51:93:b1:82:eb:79:35:b0:36:fa:a7:74:22:29:6f: 93:63:19:48:67:e7:d0:d6:35:8e:5d:44:e9:e1:41:ac:7b:0f: d1:b3:b3:07:ed:d3:63:02:09:4a:85:d1:02:67:42:d1:e3:eb: 7a:86:27:2d:44:dc:7f:3d:58:69:f1:3f:4f:47:f4:97:3c:b9: 07:f4:2b:7c:f3:84:29:aa:14:51:67:f0:4d:c3:c7:9f:eb:9b: c2:b5:ee:70:92:da:77:15:15:14:99:8b:38:af:65:e2:18:54: b1:bd:71:9c:ca:4d:49:66:69:53:01:9f:c8:4e:70:b5:68:6b: c0:2d:38:00:be:7d:a9:7e:cd:04:86:9d:52:79:0c:d9:54:98: f1:b5:3e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcaF+UYDaX5u5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MGNjY2RlYWUtMmU4OS00ZDM3LWI5MWUtOWQ2MzM5M2NhZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTuI8nksxfSBoa72kApQ8rv4LJJNBsbopewS rGkXZWkW8Ceq1N4p3JP1mRbC+1smlEdgEa12ZYdLUrDuGQcL+iWm4FCn11pysND1 hwBWi89J5RLuKhheGvr/p862PB/LsM0LzShde1Rm0hlJjJYUQdZJKwaYAt6j6kym S29Fycekc+SBrpW4AA7Z5x7JzAX0yjjRLBwiPftJnjo6vT747gAIxaNsBVXklKZ/ I3GVPlSLjW+qO1iW93yHu8jLdwcStNT7+jKndLkNGdwvYFtV7IIMXxqucdpBYyeX TVpMCF8dhAd3+a9hew8hvnztdR5S45wE45TgpHZqLieta8vqFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/skQmQyTLW/rMQMCs7elpXFZlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmUyMTllYzYtMmZmMy0z MTVjLTlkM2UtOWZiOTUzMjJlYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzkvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEojIVVLR9OvEuBHCXziFyI03100vh3GiojF7Aj1hRlDZaid6zzmd2yq nPHyj9eUKpC4n+dN6cqM0BSil16KyL7CuvP4pKw/ZrQoqhle/EizCOXeArxWEW5p fAPZVONZ9zIARZbAHA4hE7CZMLgN3FGTsYLreTWwNvqndCIpb5NjGUhn59DWNY5d ROnhQax7D9Gzswft02MCCUqF0QJnQtHj63qGJy1E3H89WGnxP09H9Jc8uQf0K3zz hCmqFFFn8E3Dx5/rm8K17nCS2ncVFRSZizivZeIYVLG9cZzKTUlmaVMBn8hOcLVo a8AtOAC+fal+zQSGnVJ5DNlUmPG1PmA= -----END CERTIFICATE-----Generated at Fri Oct 24 08:19:35 2025 by rpki-client