$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa File: 6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa (raw, json) Hash identifier: 6NvmituUSYwpNhdkZpgUBEtiIYdyG3xQqir4YIBx17M= Subject key identifier: FF:34:3C:3C:4D:21:DB:30:FD:C1:89:45:58:7B:7B:CD:2D:D8:62:08 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B1806E38A1DEDEC2FCD658980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 998 IP address blocks: 72.25.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e3:8a:1d:ed:ec:2f:cd:65:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=2ad57575-e980-4b8d-ba7d-9406743c00f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:d0:7f:1f:29:fd:4d:3c:cc:3d:f7:2a:d7: 3c:02:42:94:d7:53:b3:f4:7d:a1:b1:ca:e8:35:8c: c9:4c:34:9b:88:66:66:af:79:e0:5c:24:ca:83:88: 01:dc:c0:8a:3e:1d:f8:59:58:37:19:34:41:7d:29: f5:0c:26:09:0b:32:93:b7:61:1b:95:4f:eb:4a:54: fe:c6:5e:1c:3a:9b:fb:ee:bb:81:00:54:35:8e:55: 3e:fa:e2:8a:6e:38:71:a0:a9:04:09:a2:58:d3:42: 6e:fb:ec:07:d6:f8:7d:7e:cc:dd:5b:87:29:20:e3: 1c:9a:63:93:9f:68:9a:4d:2b:50:ec:b9:03:8f:41: fe:44:ba:22:60:80:da:3c:a8:4a:a6:63:4a:db:78: f0:ca:86:26:20:f7:41:8e:98:1e:09:ce:40:d8:2d: 48:55:ab:0b:e0:64:c3:7e:7b:5f:65:ef:d2:07:61: ce:de:4d:db:92:d8:cd:93:97:ab:88:af:8a:e1:b0: 08:ed:6f:fa:ea:d4:b4:57:f5:aa:a9:e5:f9:ba:46: f8:76:f1:ba:45:db:cd:92:34:a4:de:45:ad:26:95: 67:9d:b1:f7:49:42:38:aa:b7:fc:30:63:d0:33:50: 64:2c:01:26:89:32:23:eb:aa:11:18:83:12:65:9a: ef:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:34:3C:3C:4D:21:DB:30:FD:C1:89:45:58:7B:7B:CD:2D:D8:62:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6f9619f9-f5ea-3cd1-a331-9d03606f3e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 72.25.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:53:d6:ed:0f:2b:13:56:13:12:ab:39:a6:c4:dd:e8:c8:d6: d7:7f:bf:2c:21:4b:96:47:86:32:73:57:ca:47:c5:92:ef:50: 65:ef:06:5c:30:a4:87:d5:d6:a9:9a:2f:de:30:55:22:64:57: 4e:90:7c:e5:24:4e:5c:d1:7f:9f:70:e7:77:eb:ce:f6:74:3b: 3d:3c:7a:54:e0:f2:31:6a:33:41:07:62:b1:97:69:a0:58:bf: ba:e8:fd:46:d7:ad:5b:fb:86:a4:44:ff:1b:97:72:ea:2e:e7: 33:27:51:57:34:98:ba:64:19:2c:e8:90:46:53:7d:d9:44:49: 58:e4:93:73:a4:cd:a8:ce:7e:7b:ab:79:e4:14:f8:b5:8c:55: 1e:3c:13:81:95:2f:c0:76:2b:3e:18:ad:12:2f:71:54:cf:33: 05:08:44:cf:7f:81:db:6c:74:04:32:b4:1f:c3:c6:dd:ef:b6: 78:e7:0c:c4:ec:11:2b:93:6d:3d:be:4a:5e:c3:db:9e:b4:ad: f0:64:84:2a:3e:20:f0:9a:92:d2:60:a1:b4:8c:0b:ad:45:a9: 0b:2f:f0:e7:80:87:79:bb:a4:06:c1:9d:c7:ee:78:9d:52:3a: 4c:f0:01:fb:bd:e6:f2:83:90:5d:e0:e4:1d:a9:38:f8:2b:95: 92:0d:02:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuOKHe3sL81liYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MmFkNTc1NzUtZTk4MC00YjhkLWJhN2QtOTQwNjc0M2MwMGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW3Qfx8p/U08zD33Ktc8AkKU11Oz9H2hscro NYzJTDSbiGZmr3ngXCTKg4gB3MCKPh34WVg3GTRBfSn1DCYJCzKTt2EblU/rSlT+ xl4cOpv77ruBAFQ1jlU++uKKbjhxoKkECaJY00Ju++wH1vh9fszdW4cpIOMcmmOT n2iaTStQ7LkDj0H+RLoiYIDaPKhKpmNK23jwyoYmIPdBjpgeCc5A2C1IVasL4GTD fntfZe/SB2HO3k3bktjNk5eriK+K4bAI7W/66tS0V/WqqeX5ukb4dvG6RdvNkjSk 3kWtJpVnnbH3SUI4qrf8MGPQM1BkLAEmiTIj66oRGIMSZZrvHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP80PDxNIdsw/cGJRVh7e80t2GIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmY5NjE5ZjktZjVlYS0z Y2QxLWEzMzEtOWQwMzYwNmYzZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZT1u0PKxNWExKrOabE3ejI1td/vywhS5ZHhjJzV8pHxZLvUGXvBlww pIfV1qmaL94wVSJkV06QfOUkTlzRf59w53frzvZ0Oz08elTg8jFqM0EHYrGXaaBY v7ro/UbXrVv7hqRE/xuXcuou5zMnUVc0mLpkGSzokEZTfdlESVjkk3OkzajOfnur eeQU+LWMVR48E4GVL8B2Kz4YrRIvcVTPMwUIRM9/gdtsdAQytB/Dxt3vtnjnDMTs ESuTbT2+Sl7D2560rfBkhCo+IPCaktJgobSMC61FqQsv8OeAh3m7pAbBncfueJ1S OkzwAfu95vKDkF3g5B2pOPgrlZINAn4= -----END CERTIFICATE-----Generated at Mon Sep 8 22:25:30 2025 by rpki-client