$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa File: 946b774e-ccb3-388d-8c32-e409c858b27c.roa (raw, json) Hash identifier: Vdyt+i6G+V3S3ELPXT9pRXUwe3nbOqTOXEEAcCncEWg= Subject key identifier: F5:A8:B0:7F:C6:50:2C:D3:6D:89:23:69:E9:53:B5:6E:08:9E:60:CC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B434CAD030448344AD6293B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 54004 IP address blocks: 68.182.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:ad:03:04:48:34:4a:d6:29:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=55902ea0-30e3-40c3-a9b1-b0d0a93d61df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:14:8b:8e:c6:f0:67:2a:be:60:b9:93:ad:08: 1f:69:f2:bc:28:6c:9b:2c:48:0a:41:2d:3c:5c:12: 51:51:83:ce:c9:61:b9:24:40:6d:e9:62:72:36:49: c1:f7:19:b0:3f:48:fa:3b:22:ec:3e:72:a9:f0:2e: 2c:62:b4:b9:94:27:a0:1f:09:72:d5:7a:39:98:c1: 59:e7:ac:86:39:55:b9:37:4f:d5:5a:0e:cc:e2:16: 84:ce:b3:64:7a:fa:df:bd:ca:a7:7d:22:75:89:85: a3:07:4d:d6:e8:88:cf:9b:09:a3:eb:46:af:8b:f1: f3:f4:bf:3f:4b:23:00:86:f4:7d:69:11:7e:9b:4a: fe:8b:17:d6:a7:06:7a:c5:55:7c:9b:55:97:37:f7: e1:b0:5f:80:fc:98:f9:36:28:b3:65:d9:44:3a:dc: 1e:94:64:49:06:9d:17:c0:8c:ed:02:29:33:98:d9: be:b7:59:d1:ad:7d:24:e4:2d:a4:d6:29:09:c1:b7: ef:87:c6:aa:09:3d:66:6e:d0:78:36:bb:fb:8f:83: db:57:e8:5a:94:bb:42:a9:5c:98:b4:9f:86:24:e4: 92:9b:4d:13:0e:8a:c3:6d:b0:4c:a2:d0:de:2c:c9: 92:20:63:85:88:2d:25:d8:c0:ca:3e:86:32:4b:09: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A8:B0:7F:C6:50:2C:D3:6D:89:23:69:E9:53:B5:6E:08:9E:60:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/946b774e-ccb3-388d-8c32-e409c858b27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3e:9e:a4:e3:f2:13:d7:58:71:6f:e9:74:ed:5c:46:6f:86: 86:2d:d9:69:d4:68:61:fd:1a:d6:6a:8e:42:76:5d:10:4e:03: de:f0:33:8b:b3:8f:7c:7f:c9:88:87:50:da:49:da:7b:6c:6c: 11:28:61:ae:aa:9b:9c:1e:3c:48:41:41:6f:3d:79:ec:76:a3: 77:17:26:17:3f:e1:5e:f8:51:ba:6a:fc:03:c4:1c:ac:2b:e8: c1:70:3b:3f:b1:d1:56:37:5c:54:2d:52:60:cf:1a:6e:03:32: 30:13:56:0a:90:ce:0e:bb:19:a4:61:12:77:ab:22:c4:ea:82: 79:cb:77:23:88:3a:c0:69:0a:de:42:04:1c:92:d6:60:69:7e: 66:7c:b6:af:6f:08:56:96:80:df:3a:f9:d1:2f:da:02:e7:09: c6:b3:18:c1:2c:da:a1:be:91:3a:0f:f0:5c:e2:45:7f:26:27: d1:e4:2d:d0:39:a0:35:71:4a:cb:86:64:8a:f3:82:85:2e:64: 01:db:96:9d:7b:4e:c7:0d:9e:0a:37:de:9c:e6:34:51:6b:45: 4d:4b:ba:3b:54:83:6f:13:fc:05:b8:fd:62:04:24:ec:85:15: 35:0b:78:91:cd:0f:53:9b:40:49:12:2e:0f:4d:d8:4f:27:70: ed:dc:eb:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK0DBEg0StYpOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NTU5MDJlYTAtMzBlMy00MGMzLWE5YjEtYjBkMGE5M2Q2MWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhSLjsbwZyq+YLmTrQgfafK8KGybLEgKQS08 XBJRUYPOyWG5JEBt6WJyNknB9xmwP0j6OyLsPnKp8C4sYrS5lCegHwly1Xo5mMFZ 56yGOVW5N0/VWg7M4haEzrNkevrfvcqnfSJ1iYWjB03W6IjPmwmj60avi/Hz9L8/ SyMAhvR9aRF+m0r+ixfWpwZ6xVV8m1WXN/fhsF+A/Jj5NiizZdlEOtwelGRJBp0X wIztAikzmNm+t1nRrX0k5C2k1ikJwbfvh8aqCT1mbtB4Nrv7j4PbV+halLtCqVyY tJ+GJOSSm00TDorDbbBMotDeLMmSIGOFiC0l2MDKPoYySwmpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWosH/GUCzTbYkjaelTtW4InmDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTQ2Yjc3NGUtY2NiMy0z ODhkLThjMzItZTQwOWM4NThiMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRLZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA+nqTj8hPXWHFv6XTtXEZvhoYt2WnUaGH9GtZqjkJ2XRBOA97wM4uz j3x/yYiHUNpJ2ntsbBEoYa6qm5wePEhBQW89eex2o3cXJhc/4V74Ubpq/APEHKwr 6MFwOz+x0VY3XFQtUmDPGm4DMjATVgqQzg67GaRhEnerIsTqgnnLdyOIOsBpCt5C BByS1mBpfmZ8tq9vCFaWgN86+dEv2gLnCcazGMEs2qG+kToP8FziRX8mJ9HkLdA5 oDVxSsuGZIrzgoUuZAHblp17TscNngo33pzmNFFrRU1LujtUg28T/AW4/WIEJOyF FTULeJHND1ObQEkSLg9N2E8ncO3c60g= -----END CERTIFICATE-----Generated at Fri Oct 24 08:19:34 2025 by rpki-client