$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca681caa-02bd-360b-8322-79541fff40fb.roa File: ca681caa-02bd-360b-8322-79541fff40fb.roa (raw, json) Hash identifier: gylHTfbEOGBpZ9Ot+h7vgqZM+vdHpxxz+8+1sI1X6FU= Subject key identifier: 41:B4:C0:37:07:BE:E1:88:C4:4A:5F:97:6F:3D:C4:34:1A:01:AF:A3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11CADBA49E8DFA63AEAF80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca681caa-02bd-360b-8322-79541fff40fb.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 21564 IP address blocks: 198.166.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ca:db:a4:9e:8d:fa:63:ae:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=20842e7e-de8d-4154-9a9e-a4155f3def4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:fb:dc:84:e7:a0:25:76:d6:30:2d:5a:c0: 41:9a:c5:35:59:6d:34:e5:eb:14:34:aa:97:c0:4d: 20:52:e4:0c:cd:c3:69:18:f9:78:29:0a:49:fc:01: 49:32:28:cb:90:7f:15:78:e0:60:9a:7c:c1:d6:ed: 7b:a2:a9:72:1b:35:a3:b4:fd:9f:5b:2c:db:7e:b7: 16:ee:b6:8c:a3:dd:07:b9:67:a9:ae:76:59:e9:d9: ca:3d:83:5b:81:1a:92:9f:b9:b6:4d:d6:b7:cc:96: be:69:4d:32:1f:db:a8:10:40:84:c2:15:60:85:a0: c9:27:0f:b7:62:38:6c:bd:de:70:41:41:26:f2:8a: b9:ac:58:ac:36:60:d5:8a:41:97:32:ce:e4:b6:67: e7:4e:c6:ee:8c:b6:f2:5f:26:62:94:a0:93:d3:47: 09:fc:0c:d9:67:a4:4b:72:3c:d6:b7:5b:05:a7:19: a0:06:e3:03:81:14:a0:cd:fe:5d:db:82:60:8e:91: 61:ce:11:f1:4b:69:b6:be:eb:35:4c:7b:a5:9b:be: 0c:0e:d2:fa:cb:a1:3f:06:85:b2:05:7d:9c:05:50: fb:94:70:cb:cd:7f:ce:31:f5:a3:c7:7a:c6:7c:f5: 8d:ac:0d:1d:56:75:c7:d7:8a:18:a5:04:de:e8:56: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B4:C0:37:07:BE:E1:88:C4:4A:5F:97:6F:3D:C4:34:1A:01:AF:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca681caa-02bd-360b-8322-79541fff40fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.166.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:43:4f:8c:e0:70:0b:bb:15:f4:19:d1:9f:34:ee:07:60:ba: 36:d2:fd:c3:50:01:d9:84:59:34:c2:fd:5c:6e:b0:66:5b:47: e7:6c:d3:8d:38:98:66:76:ac:19:72:ac:65:21:69:b1:9c:6a: 9e:4e:f3:eb:6e:0c:10:ef:5e:63:0d:e2:03:50:e2:b0:7e:64: c3:6f:29:5d:ab:f0:f3:e6:99:e3:e9:c0:4d:88:9c:68:1c:ff: 63:fd:72:22:64:cf:3c:e4:84:88:b9:75:d9:ea:4a:03:ab:ef: c0:98:17:5b:a6:a4:70:bb:e1:c1:93:d6:51:31:f3:bb:2a:be: e7:74:49:85:d1:1d:ef:59:59:3d:89:a3:48:98:e2:3a:50:2a: 5c:0c:81:ed:68:0c:6c:b2:3a:0c:fb:24:ea:fd:8f:47:8e:c0: 0a:d5:e5:cf:de:73:8e:7a:0f:dd:1d:1f:1c:b6:37:d1:41:40: eb:de:4d:2b:2b:7d:9b:21:1e:48:d3:52:14:6e:38:6c:03:7c: 72:df:44:da:cc:66:c7:5a:2f:1f:63:be:77:62:1e:96:89:6b: 21:81:00:e0:a0:6d:ef:06:16:9e:d3:91:f2:f3:87:12:57:f4: 74:58:0f:97:b2:1a:d2:22:32:a9:e9:97:56:63:8a:79:38:62: 84:6a:c4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcrbpJ6N+mOur4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MjA4NDJlN2UtZGU4ZC00MTU0LTlhOWUtYTQxNTVmM2RlZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WX73ITnoCV21jAtWsBBmsU1WW005esUNKqX wE0gUuQMzcNpGPl4KQpJ/AFJMijLkH8VeOBgmnzB1u17oqlyGzWjtP2fWyzbfrcW 7raMo90HuWeprnZZ6dnKPYNbgRqSn7m2Tda3zJa+aU0yH9uoEECEwhVghaDJJw+3 Yjhsvd5wQUEm8oq5rFisNmDVikGXMs7ktmfnTsbujLbyXyZilKCT00cJ/AzZZ6RL cjzWt1sFpxmgBuMDgRSgzf5d24JgjpFhzhHxS2m2vus1THulm74MDtL6y6E/BoWy BX2cBVD7lHDLzX/OMfWjx3rGfPWNrA0dVnXH14oYpQTe6FZEXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG0wDcHvuGIxEpfl289xDQaAa+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2E2ODFjYWEtMDJiZC0z NjBiLTgzMjItNzk1NDFmZmY0MGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlDT4zgcAu7FfQZ0Z807gdgujbS/cNQAdmEWTTC/VxusGZbR+ds0404 mGZ2rBlyrGUhabGcap5O8+tuDBDvXmMN4gNQ4rB+ZMNvKV2r8PPmmePpwE2InGgc /2P9ciJkzzzkhIi5ddnqSgOr78CYF1umpHC74cGT1lEx87sqvud0SYXRHe9ZWT2J o0iY4jpQKlwMge1oDGyyOgz7JOr9j0eOwArV5c/ec456D90dHxy2N9FBQOveTSsr fZshHkjTUhRuOGwDfHLfRNrMZsdaLx9jvndiHpaJayGBAOCgbe8GFp7TkfLzhxJX 9HRYD5eyGtIiMqnpl1Zjink4YoRqxFM= -----END CERTIFICATE-----Generated at Fri Oct 24 08:24:29 2025 by rpki-client