$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa File: 956cee3a-4407-3b22-a099-0422e4180296.roa (raw, json) Hash identifier: GLl7MlqIos/0lZepmYKMqT7+tlsALlSIxYzn3UC4cu4= Subject key identifier: 6D:AF:E9:76:A7:BA:A9:36:DA:54:AB:29:CD:D8:E8:54:C6:D5:55:FD Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B48E1B8413C7E694D94BFDF80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 25668 IP address blocks: 207.194.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b8:41:3c:7e:69:4d:94:bf:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e1ecf5eb-10b2-43d8-8532-b7f76939a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3c:86:0a:6e:3e:14:93:38:bc:04:be:07:bf: 88:60:c7:eb:81:11:26:1e:e4:97:59:1c:4e:7f:66: 07:40:d9:e6:ca:74:31:2d:d0:f0:4c:c3:7c:ca:40: 43:db:d6:21:62:04:b7:c7:67:1e:da:97:45:4f:d0: 4a:cc:42:6a:33:56:25:3f:a1:52:ea:89:0c:b0:cd: 2b:7a:18:8c:23:2d:b1:0d:47:ac:dd:a5:0c:c5:3b: 27:da:cd:17:6c:93:46:75:61:68:8c:94:4b:c4:b3: 22:ba:b8:ba:2f:a0:10:5e:82:29:52:9f:f5:9f:a8: b8:6f:12:39:2e:38:18:b9:83:2c:10:aa:01:ed:49: 36:c4:df:43:22:2f:7c:e6:bb:3b:81:05:d6:0a:ba: 73:50:c0:05:a4:5e:95:94:8f:47:46:24:19:2c:7d: 02:10:7f:7f:68:44:57:0e:b4:ca:29:7b:f9:a4:73: f2:46:d8:ab:89:0f:6f:bf:78:65:c8:31:e1:ee:91: 07:11:ad:85:00:9a:c3:ea:fd:a0:49:68:7a:38:61: 82:6c:6b:9a:2e:0e:dc:3e:11:8c:15:0f:bc:d0:0d: 19:7f:65:09:ef:94:a6:96:a3:bc:ed:74:64:87:5f: ba:f9:b7:4e:bc:fc:50:78:c9:30:1c:64:9c:b1:61: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AF:E9:76:A7:BA:A9:36:DA:54:AB:29:CD:D8:E8:54:C6:D5:55:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:9d:21:0c:9c:15:05:84:f2:9d:a5:cd:6c:70:39:c4:54:b9: 10:44:91:37:86:6c:40:e9:bc:a1:45:e5:ea:72:4f:33:78:6b: 5c:6d:ec:ad:a5:ab:d5:fa:26:d2:51:05:90:ef:8e:06:72:f9: 5b:b1:93:ef:30:22:6d:7a:7e:61:c9:02:b1:7e:66:e3:43:76: 7d:b9:e4:36:aa:e9:82:6a:60:b7:2a:34:5d:89:57:0d:1a:f1: 41:13:f2:30:10:bb:74:f3:48:3e:c2:44:08:21:c4:9a:10:88: 35:5b:9b:b4:dd:76:2b:4a:4d:47:77:47:bb:9e:73:4d:29:b7: 61:fa:6a:81:f0:78:3a:7e:c6:94:34:83:06:d6:da:05:0a:d1: 47:68:76:07:c9:df:98:3d:36:28:01:a2:ce:52:0c:1e:8d:e3: 05:76:89:6a:54:a4:6a:d6:15:b8:64:a5:5a:5c:fe:01:63:fe: 6b:8e:b1:e3:0a:c2:97:ec:ca:03:69:a1:1f:d3:cd:e3:8d:a8: 63:55:46:c2:e2:7f:7c:14:76:67:ed:d7:e5:35:3d:07:f3:39: c6:17:44:0f:f6:3e:f1:4d:f7:0c:63:22:7a:41:fc:62:96:22: 9f:5f:c2:00:bf:03:89:ce:85:15:a2:94:57:dd:eb:76:12:5e: 70:0e:7a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bhBPH5pTZS/34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTFlY2Y1ZWItMTBiMi00M2Q4LTg1MzItYjdmNzY5MzlhN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTyGCm4+FJM4vAS+B7+IYMfrgREmHuSXWRxO f2YHQNnmynQxLdDwTMN8ykBD29YhYgS3x2ce2pdFT9BKzEJqM1YlP6FS6okMsM0r ehiMIy2xDUes3aUMxTsn2s0XbJNGdWFojJRLxLMiuri6L6AQXoIpUp/1n6i4bxI5 LjgYuYMsEKoB7Uk2xN9DIi985rs7gQXWCrpzUMAFpF6VlI9HRiQZLH0CEH9/aERX DrTKKXv5pHPyRtiriQ9vv3hlyDHh7pEHEa2FAJrD6v2gSWh6OGGCbGuaLg7cPhGM FQ+80A0Zf2UJ75SmlqO87XRkh1+6+bdOvPxQeMkwHGScsWEXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2v6Xanuqk22lSrKc3Y6FTG1VX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTU2Y2VlM2EtNDQwNy0z YjIyLWEwOTktMDQyMmU0MTgwMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALudIQycFQWE8p2lzWxwOcRUuRBEkTeGbEDpvKFF5epyTzN4a1xt7K2l q9X6JtJRBZDvjgZy+Vuxk+8wIm16fmHJArF+ZuNDdn255Daq6YJqYLcqNF2JVw0a 8UET8jAQu3TzSD7CRAghxJoQiDVbm7TdditKTUd3R7uec00pt2H6aoHweDp+xpQ0 gwbW2gUK0UdodgfJ35g9NigBos5SDB6N4wV2iWpUpGrWFbhkpVpc/gFj/muOseMK wpfsygNpoR/TzeONqGNVRsLif3wUdmft1+U1PQfzOcYXRA/2PvFN9wxjInpB/GKW Ip9fwgC/A4nOhRWilFfd63YSXnAOetk= -----END CERTIFICATE-----Generated at Fri Oct 24 08:20:50 2025 by rpki-client