$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf86e7f1-3074-362e-973b-72c15cbff25f.roa File: bf86e7f1-3074-362e-973b-72c15cbff25f.roa (raw, json) Hash identifier: KSy5LBQWwUzKzN7ZrRMI6Y3pjQRKNZDnhVnJ1pr9ks4= Subject key identifier: 86:70:8C:08:E8:71:8C:A0:47:60:36:9F:E5:27:7C:59:31:3F:6B:08 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5141BA37E8579447BD91B800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf86e7f1-3074-362e-973b-72c15cbff25f.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 399778 IP address blocks: 208.181.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ba:37:e8:57:94:47:bd:91:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=bc852232-c595-4c6b-86f2-c2d1239fde58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:b2:b4:1d:d2:c5:2f:d4:d0:53:76:72:4d: 5f:e9:2d:7a:e8:58:51:38:f5:fc:27:e5:2d:32:c0: 3f:5a:50:8f:4e:55:be:a6:51:dd:8a:3e:04:61:b9: 50:19:15:fc:d9:ff:6e:03:83:b9:67:8b:a8:c9:ec: a5:21:b2:ea:a6:63:8e:1f:6f:e7:aa:e2:b7:6d:55: ff:bd:3e:7a:9d:40:fb:e1:d6:e1:7d:ed:a0:a8:a4: 2f:6e:74:9c:32:46:1c:b3:8c:91:22:d9:8d:7a:a9: 8b:e4:f4:2c:4d:0b:be:b9:02:1e:9d:e2:f3:e6:ba: ed:f4:dd:30:d4:d4:e2:a5:45:af:ea:45:c3:b5:ce: 0a:52:76:e0:a5:23:6d:a1:40:86:30:e9:f5:99:8b: 50:90:a0:81:3f:92:62:b7:ea:e8:9f:06:48:0d:b4: 35:e8:7e:67:98:f2:0c:bd:76:24:eb:b5:a6:a7:d7: 47:d1:cb:e2:04:28:36:d6:67:f5:0e:0e:7c:ba:72: 3c:22:12:54:e8:d8:e3:9d:97:d3:2d:b4:15:f3:9d: 5a:dd:ba:4a:94:cf:a8:67:46:93:e6:b5:72:1f:cb: 1d:d5:dc:6e:88:19:22:1f:b4:61:ee:55:df:01:9a: 69:fb:bc:8b:6a:95:0b:f8:5d:fc:f2:8b:6d:ea:86: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:8C:08:E8:71:8C:A0:47:60:36:9F:E5:27:7C:59:31:3F:6B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf86e7f1-3074-362e-973b-72c15cbff25f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6f:c9:98:cf:6f:09:3f:ac:11:31:64:29:b0:c1:57:15:62: 14:6c:fe:56:ae:b8:49:77:09:9e:dd:1a:dc:a4:ba:e6:0b:11: 44:a7:08:6e:ba:06:b3:9c:4b:b4:b4:86:aa:df:3e:2c:da:f7: dd:45:e9:5f:d4:b4:e9:b3:3b:99:56:48:44:4d:0c:cb:46:52: d3:b7:a1:fe:2e:dc:e1:e5:4e:c8:c4:85:a8:d2:43:dc:b5:a2: 19:07:62:22:64:17:3c:9c:77:a6:5c:89:28:c8:82:3c:a9:2f: 76:ea:e0:29:e3:63:cf:2d:09:aa:44:f6:04:d8:c9:26:4d:9c: d7:26:39:66:e3:f9:7f:dd:14:68:0d:1a:3d:fb:43:bc:e6:84: d6:cc:d3:5b:15:bb:8f:d3:41:58:8f:17:45:a9:52:b5:bb:7a: a0:ad:56:a6:11:4b:f8:fe:55:ed:89:0d:7a:aa:57:04:2d:c2: 9e:f4:8a:88:2d:70:62:cb:7c:38:22:27:57:9f:21:76:31:5e: 3b:ce:d4:98:ed:88:ef:b6:e3:4b:59:df:6d:25:2f:eb:f3:97: 68:be:84:aa:db:f5:2d:28:8a:5a:39:2e:8f:1b:0b:3f:c4:ab: 53:f9:ce:d7:c5:8e:1e:ed:ef:f9:f2:e0:a0:b1:bf:ec:68:57: 5d:84:a1:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbo36FeUR72RuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YmM4NTIyMzItYzU5NS00YzZiLTg2ZjItYzJkMTIzOWZkZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+mytB3SxS/U0FN2ck1f6S166FhROPX8J+Ut MsA/WlCPTlW+plHdij4EYblQGRX82f9uA4O5Z4uoyeylIbLqpmOOH2/nquK3bVX/ vT56nUD74dbhfe2gqKQvbnScMkYcs4yRItmNeqmL5PQsTQu+uQIeneLz5rrt9N0w 1NTipUWv6kXDtc4KUnbgpSNtoUCGMOn1mYtQkKCBP5Jit+ronwZIDbQ16H5nmPIM vXYk67Wmp9dH0cviBCg21mf1Dg58unI8IhJU6NjjnZfTLbQV851a3bpKlM+oZ0aT 5rVyH8sd1dxuiBkiH7Rh7lXfAZpp+7yLapUL+F388ott6oYb9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZwjAjocYygR2A2n+UnfFkxP2sIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmY4NmU3ZjEtMzA3NC0z NjJlLTk3M2ItNzJjMTVjYmZmMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1vyZjPbwk/rBExZCmwwVcVYhRs/lauuEl3CZ7dGtykuuYLEUSnCG66 BrOcS7S0hqrfPiza991F6V/UtOmzO5lWSERNDMtGUtO3of4u3OHlTsjEhajSQ9y1 ohkHYiJkFzycd6ZciSjIgjypL3bq4CnjY88tCapE9gTYySZNnNcmOWbj+X/dFGgN Gj37Q7zmhNbM01sVu4/TQViPF0WpUrW7eqCtVqYRS/j+Ve2JDXqqVwQtwp70iogt cGLLfDgiJ1efIXYxXjvO1JjtiO+240tZ320lL+vzl2i+hKrb9S0oilo5Lo8bCz/E q1P5ztfFjh7t7/ny4KCxv+xoV12EoZM= -----END CERTIFICATE-----Generated at Fri Oct 24 08:22:19 2025 by rpki-client