$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa File: 06322d38-bbe2-3557-8d34-4a809d951d9d.roa (raw, json) Hash identifier: ouvabCd4qmYO5F8fl5NDg6iRsobRsJGv/6m5nrBWnxE= Subject key identifier: 41:66:DE:DA:A3:2F:65:36:01:56:DE:4D:A1:14:CA:38:0B:F2:E2:83 Certificate issuer: /CN=fc9bd684-883b-41b8-9890-8cd78117898c Certificate serial: 010D0C9F4328584BB2F7BE0C7B07BE821DA3EE80 Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 8137 IP address blocks: 139.104.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:be:0c:7b:07:be:82:1d:a3:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=87642dd0-7ddb-492c-bbde-80856970cbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:c6:b7:5a:49:f4:f4:40:2e:51:91:88:73: 41:f6:db:80:e9:71:b2:ee:07:4d:50:c6:b0:0b:7d: 6c:69:08:ce:56:75:8f:0c:c0:ce:5d:b8:91:44:17: 0c:bb:40:d3:74:2a:df:5c:9a:34:75:8e:e8:b4:1b: a9:cf:eb:5f:f6:7c:76:e9:a2:66:18:17:78:dd:d6: d7:f2:09:72:a6:3a:19:39:8d:db:2f:f4:81:c3:b1: e5:ad:99:ab:14:13:6a:2d:ea:18:b3:fc:72:75:d2: 46:33:05:e9:60:76:8c:35:f8:84:ef:e8:d4:b4:0b: 34:be:75:66:e1:c6:b3:10:49:ce:cc:60:4e:a0:60: 85:e2:dc:57:bb:52:fd:40:54:8f:73:c9:4d:66:57: 97:ef:a0:7d:8c:f4:3d:a1:a1:68:f0:87:37:63:7f: 2b:59:80:0b:63:f2:e9:cb:f3:6d:ed:66:01:47:36: 36:66:0e:0a:3b:d7:ee:01:df:f3:76:27:e7:a1:b6: 34:c3:c6:10:80:0b:3d:5d:69:f7:c1:e9:d3:1e:60: cc:1d:81:34:6e:11:3b:c9:4f:de:c1:71:18:c8:47: db:df:9f:39:92:cc:0f:fb:32:2b:25:92:47:10:5c: ad:85:7b:c8:b2:c9:4e:b3:dd:87:6f:ff:57:72:ea: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:66:DE:DA:A3:2F:65:36:01:56:DE:4D:A1:14:CA:38:0B:F2:E2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/06322d38-bbe2-3557-8d34-4a809d951d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl X509v3 Authority Key Identifier: keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer sbgp-ipAddrBlock: critical IPv4: 139.104.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:59:01:37:ba:5d:dc:25:b8:0c:64:7b:e2:c0:94:fc:1f:73: 3a:da:8b:42:87:ab:f2:37:8d:b7:d7:16:bb:b5:df:bf:a0:8c: 44:d9:26:ac:14:44:16:16:37:1d:9b:a4:eb:70:98:53:c4:ca: 23:ba:f5:e7:25:c8:d8:d1:aa:89:12:b4:01:0d:12:dc:1a:cb: e1:87:44:82:95:d3:8a:ef:ac:b2:d6:09:ca:35:68:eb:03:cf: d5:68:6b:75:7f:21:ab:df:96:e2:fa:0f:45:c7:00:3c:c7:68: 70:10:ad:c3:39:eb:ca:30:89:ae:ba:57:01:82:1c:47:2e:d0: a2:6f:d8:c7:1e:64:29:ab:9e:68:15:70:52:6a:23:c6:44:32: c2:9d:84:2e:f4:b7:96:42:0f:09:4b:9d:eb:b8:68:a7:fd:38: 0e:14:c0:ea:cf:7c:90:f8:71:3c:69:45:bd:b5:81:7d:57:18: 0b:6d:14:7f:e6:3a:d0:5d:44:cc:74:de:11:24:ad:b4:0a:7a: 5b:0a:7d:00:53:ad:9f:ca:28:f3:ee:53:49:7d:ac:f3:ff:a3: 66:5c:4f:50:12:c0:3b:a9:e5:75:30:7b:58:60:29:1d:25:6d: 9c:96:9c:19:78:c7:6b:11:8b:e7:10:a1:0b:d5:69:7a:8f:20: 2d:14:6a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy974Mewe+gh2j7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5YmQ2ODQtODgzYi00MWI4LTk4OTAtOGNkNzgxMTc4 OThjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ODc2NDJkZDAtN2RkYi00OTJjLWJiZGUtODA4NTY5NzBjYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE7Gt1pJ9PRALlGRiHNB9tuA6XGy7gdNUMaw C31saQjOVnWPDMDOXbiRRBcMu0DTdCrfXJo0dY7otBupz+tf9nx26aJmGBd43dbX 8glypjoZOY3bL/SBw7HlrZmrFBNqLeoYs/xyddJGMwXpYHaMNfiE7+jUtAs0vnVm 4cazEEnOzGBOoGCF4txXu1L9QFSPc8lNZleX76B9jPQ9oaFo8Ic3Y38rWYALY/Lp y/Nt7WYBRzY2Zg4KO9fuAd/zdifnobY0w8YQgAs9XWn3wenTHmDMHYE0bhE7yU/e wXEYyEfb3585kswP+zIrJZJHEFythXvIsslOs92Hb/9XcupY6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFm3tqjL2U2AVbeTaEUyjgL8uKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzli ZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3ODExNzg5OGMvMDYzMjJkMzgtYmJlMi0z NTU3LThkMzQtNGE4MDlkOTUxZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5YmQ2ODQtODgzYi00MWI4LTk4 OTAtOGNkNzgxMTc4OThjL2ZjOWJkNjg0LTg4M2ItNDFiOC05ODkwLThjZDc4MTE3 ODk4Yy5jcmwwHwYDVR0jBBgwFoAUUaHv6hItj28wFZq7IItgmAGJg3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzliZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3 ODExNzg5OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi2jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9ZATe6XdwluAxke+LAlPwfczrai0KHq/I3jbfXFru137+gjETZJqwU RBYWNx2bpOtwmFPEyiO69eclyNjRqokStAENEtway+GHRIKV04rvrLLWCco1aOsD z9Voa3V/IavfluL6D0XHADzHaHAQrcM568owia66VwGCHEcu0KJv2MceZCmrnmgV cFJqI8ZEMsKdhC70t5ZCDwlLneu4aKf9OA4UwOrPfJD4cTxpRb21gX1XGAttFH/m OtBdRMx03hEkrbQKelsKfQBTrZ/KKPPuU0l9rPP/o2ZcT1ASwDup5XUwe1hgKR0l bZyWnBl4x2sRi+cQoQvVaXqPIC0UaiI= -----END CERTIFICATE-----Generated at Mon Nov 3 11:43:18 2025 by rpki-client