$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa File: a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa (raw, json) Hash identifier: c19eAzDzA+XxgGgl4BUUrlcfp1/qlibRwlUZi0wFOBA= Subject key identifier: 42:4B:88:35:C7:AB:F6:3E:65:D6:03:A9:DF:A5:5B:2B:3C:25:8E:F0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B072D6857EDA25363EB7A80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.171.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:2d:68:57:ed:a2:53:63:eb:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=74e5a0f4-d8cc-4953-8d8b-6fad9b92c3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:f9:0a:8d:14:f4:12:95:e9:b1:0b:f9:82: 31:ee:f6:38:1f:52:43:16:50:7e:33:99:f3:6f:b1: 05:ed:e9:e1:fe:24:cd:6c:6b:3f:5a:3b:da:48:84: fe:29:39:a1:71:4c:f0:8e:42:64:da:4e:bf:37:7e: 0e:33:df:c8:2d:12:45:5d:6a:3c:68:c9:7c:33:89: ff:fb:35:9e:2e:3b:d8:18:60:57:04:30:18:e1:b2: 3c:2c:6f:73:c4:a5:ff:03:19:29:e4:98:07:6e:ca: ff:45:05:8b:08:0f:fc:02:cb:09:56:9f:ff:ff:b1: 32:29:51:bf:cd:15:47:42:df:9b:0d:93:c8:4f:06: c9:6a:72:bb:8d:7a:1b:74:9c:14:ec:84:57:0c:18: 7f:83:c7:e7:2c:99:92:75:59:9e:0f:3b:38:a0:78: ad:9f:89:b7:61:f2:bb:80:f3:0f:3e:cd:b0:ab:50: 66:c9:b8:1c:e3:0d:8c:8e:0e:3b:99:60:53:a0:c6: f5:1c:2f:d6:c6:ab:54:ba:d9:ab:fa:f5:47:13:2b: 41:9e:aa:c4:46:b8:9c:79:80:15:03:d1:4a:29:74: 3b:94:de:1d:b5:be:e4:e1:1e:c4:b7:fb:fb:cd:a1: b0:72:dd:e7:eb:8b:78:8d:8f:9b:f8:7a:06:0f:32: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:88:35:C7:AB:F6:3E:65:D6:03:A9:DF:A5:5B:2B:3C:25:8E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:4d:dc:3d:a3:85:9c:3b:fd:ac:3a:2d:ec:de:0d:77:d4:ea: c4:0a:b2:4f:92:78:f3:9e:4f:4f:ca:06:55:f0:f8:8d:28:74: d9:f5:ae:2c:03:7f:d7:45:e3:fe:17:0b:38:e8:66:02:b8:56: b1:20:4f:c5:68:8d:9b:b6:a0:26:84:7f:eb:61:dd:ad:1a:34: 36:7c:6d:f9:86:91:85:b2:99:17:66:8a:36:70:25:f8:53:91: 5b:80:bd:9c:c5:b3:07:ae:6f:42:78:97:68:7a:b2:70:a4:65: 85:0d:19:6c:e4:b7:78:7f:cb:b3:9e:4e:cf:97:86:7d:9c:ec: 96:59:e4:c4:88:aa:56:87:13:7c:8d:54:80:ec:d2:e1:88:52: 1b:e8:23:84:8d:8b:8f:ff:a2:3b:26:53:54:3e:e4:0b:65:80: 5d:23:15:87:ae:4a:ea:20:39:9e:bc:11:27:a3:b5:d7:fe:1e: f4:14:c7:9f:cb:32:16:8f:f4:2b:fa:df:98:1a:a2:b3:34:00: da:0e:01:00:41:a3:cb:c1:bc:3a:44:9b:f9:dc:cc:8d:85:f4: c0:00:e5:4b:63:40:85:c1:e4:36:23:7a:6f:a6:77:41:c0:b7: da:d0:c8:27:d2:6b:2d:f1:9d:6a:44:69:b6:01:b4:fc:3f:43: 2e:de:2e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBy1oV+2iU2PreoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NzRlNWEwZjQtZDhjYy00OTUzLThkOGItNmZhZDliOTJjM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtT5Co0U9BKV6bEL+YIx7vY4H1JDFlB+M5nz b7EF7enh/iTNbGs/WjvaSIT+KTmhcUzwjkJk2k6/N34OM9/ILRJFXWo8aMl8M4n/ +zWeLjvYGGBXBDAY4bI8LG9zxKX/Axkp5JgHbsr/RQWLCA/8AssJVp///7EyKVG/ zRVHQt+bDZPITwbJanK7jXobdJwU7IRXDBh/g8fnLJmSdVmeDzs4oHitn4m3YfK7 gPMPPs2wq1Bmybgc4w2Mjg47mWBToMb1HC/WxqtUutmr+vVHEytBnqrERriceYAV A9FKKXQ7lN4dtb7k4R7Et/v7zaGwct3n64t4jY+b+HoGDzLD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJLiDXHq/Y+ZdYDqd+lWys8JY7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTYxY2JkNGQtNmNlYS0z MmJkLTljNjctN2IxM2JmMmMxNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0asQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxN3D2jhZw7/aw6LezeDXfU6sQKsk+SePOeT0/KBlXw+I0odNn1riwD f9dF4/4XCzjoZgK4VrEgT8VojZu2oCaEf+th3a0aNDZ8bfmGkYWymRdmijZwJfhT kVuAvZzFsweub0J4l2h6snCkZYUNGWzkt3h/y7OeTs+Xhn2c7JZZ5MSIqlaHE3yN VIDs0uGIUhvoI4SNi4//ojsmU1Q+5AtlgF0jFYeuSuogOZ68ESejtdf+HvQUx5/L MhaP9Cv635gaorM0ANoOAQBBo8vBvDpEm/nczI2F9MAA5UtjQIXB5DYjem+md0HA t9rQyCfSay3xnWpEabYBtPw/Qy7eLk0= -----END CERTIFICATE-----Generated at Fri Oct 24 08:21:01 2025 by rpki-client