$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa File: f7262f57-ce99-39cb-b66b-7cc44160ea61.roa (raw, json) Hash identifier: QSWJ66y4AFHl+/UuvDIQj4VIZ4we1m+PY441+DD4LBI= Subject key identifier: 6D:47:47:04:6B:7E:9C:70:13:F2:B4:E0:FA:6C:26:26:31:60:A8:86 Certificate issuer: /CN=b76a56d7-e03c-4adc-a642-166acb54d72b Certificate serial: 010D0C9F4328584B715CAB9928890513E8AC2400 Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 32277 IP address blocks: 206.125.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ab:99:28:89:05:13:e8:ac:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ad5ea32c-fb17-4d84-8a12-915cf5a018c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:72:64:6a:9d:64:57:37:1c:db:2b:f1:1e: 1c:44:02:ab:01:aa:39:3d:e7:5a:53:67:a0:0f:7a: be:00:75:b8:f4:b8:c4:f5:74:0c:0b:fa:ae:50:cc: 4b:dd:c4:bb:b5:de:b9:ca:7b:ae:ee:44:f3:a6:10: c7:99:a7:1e:55:97:e6:07:13:d0:6c:38:86:3e:43: 66:b0:a8:23:ee:76:44:fd:ea:53:be:dc:2f:19:4e: d3:18:72:fb:21:0e:4a:ff:d2:e5:2c:fe:f0:71:03: bf:a5:71:e8:bd:aa:86:29:a1:d2:52:87:ac:47:69: 47:72:5a:04:33:75:bd:3d:48:01:bc:d8:61:e2:67: 32:26:db:3e:2e:38:6d:bb:ce:ce:39:04:d2:b8:ef: 93:2a:75:73:30:7a:76:da:6b:a6:a9:b1:97:6a:0e: 3e:93:a8:e3:cf:2c:cb:1a:06:5b:23:3c:71:59:26: 66:38:df:e2:73:02:ac:61:95:8e:53:07:b0:ed:98: 04:85:9c:a1:7c:30:15:0c:10:09:d8:f8:90:67:33: ce:1a:39:95:8e:4d:43:98:02:2c:bd:dc:29:5d:ff: 77:45:2a:b1:95:86:5b:12:7e:4c:ef:18:a4:a5:18: ed:ef:25:62:11:8d:5d:0e:87:67:39:3c:a9:75:87: 63:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:47:04:6B:7E:9C:70:13:F2:B4:E0:FA:6C:26:26:31:60:A8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl X509v3 Authority Key Identifier: keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer sbgp-ipAddrBlock: critical IPv4: 206.125.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c8:fc:ac:08:2e:d3:cd:b3:99:29:0c:8f:94:f3:fa:90:8c: 1f:62:e9:3e:84:7b:ac:78:6d:8c:6f:95:64:9d:14:ec:0f:2f: 46:c1:da:44:04:2e:bc:01:f5:fd:e5:94:d8:5c:e3:ee:c8:40: 3b:18:05:09:c8:19:92:4a:5e:22:28:a1:7e:b6:d5:28:3f:8a: ad:9e:2f:92:a5:a3:2c:c4:49:42:d0:5e:ac:86:55:1f:b4:c4: 95:8d:06:af:f4:5b:64:be:b9:52:6b:cd:90:51:48:bd:be:42: 31:1f:ef:e3:3d:b9:c9:3a:ff:57:8b:92:99:9f:f5:79:39:1f: ea:28:86:28:c7:6f:10:42:35:75:51:94:c9:29:c4:7a:e3:61: d4:7e:19:a0:50:f0:2a:38:60:b9:65:cc:c8:fa:56:8d:57:82: 1c:90:53:3a:56:a5:0b:31:dd:cc:7f:6f:1e:10:6a:6c:a5:f2: d1:3a:0a:8a:91:42:60:e3:78:6f:55:7b:5e:8e:4c:4d:26:9a: ff:b7:cc:b6:a8:e2:2d:4f:15:ec:49:74:df:0f:16:65:dc:5e: d5:66:f2:c5:2a:16:29:7a:5d:2d:de:05:9c:cc:53:6c:72:8b: 2a:59:34:96:19:12:ec:d6:ec:06:da:bd:26:dc:82:d3:e1:b9: 38:20:17:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKuZKIkFE+isJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2YTU2ZDctZTAzYy00YWRjLWE2NDItMTY2YWNiNTRk NzJiMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWQ1ZWEzMmMtZmIxNy00ZDg0LThhMTItOTE1Y2Y1YTAxOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyFyZGqdZFc3HNsr8R4cRAKrAao5PedaU2eg D3q+AHW49LjE9XQMC/quUMxL3cS7td65ynuu7kTzphDHmaceVZfmBxPQbDiGPkNm sKgj7nZE/epTvtwvGU7TGHL7IQ5K/9LlLP7wcQO/pXHovaqGKaHSUoesR2lHcloE M3W9PUgBvNhh4mcyJts+Ljhtu87OOQTSuO+TKnVzMHp22mumqbGXag4+k6jjzyzL GgZbIzxxWSZmON/icwKsYZWOUwew7ZgEhZyhfDAVDBAJ2PiQZzPOGjmVjk1DmAIs vdwpXf93RSqxlYZbEn5M7xikpRjt7yViEY1dDodnOTypdYdjwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1HRwRrfpxwE/K04PpsJiYxYKiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZh NTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZhY2I1NGQ3MmIvZjcyNjJmNTctY2U5OS0z OWNiLWI2NmItN2NjNDQxNjBlYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjc2YTU2ZDctZTAzYy00YWRjLWE2 NDItMTY2YWNiNTRkNzJiL2I3NmE1NmQ3LWUwM2MtNGFkYy1hNjQyLTE2NmFjYjU0 ZDcyYi5jcmwwHwYDVR0jBBgwFoAUZ2s+IQIFKGkxD9bQHKbhPruP6MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZhNTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZh Y2I1NGQ3MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzn3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjI/KwILtPNs5kpDI+U8/qQjB9i6T6Ee6x4bYxvlWSdFOwPL0bB2kQE LrwB9f3llNhc4+7IQDsYBQnIGZJKXiIooX621Sg/iq2eL5KloyzESULQXqyGVR+0 xJWNBq/0W2S+uVJrzZBRSL2+QjEf7+M9uck6/1eLkpmf9Xk5H+oohijHbxBCNXVR lMkpxHrjYdR+GaBQ8Co4YLllzMj6Vo1XghyQUzpWpQsx3cx/bx4Qamyl8tE6CoqR QmDjeG9Ve16OTE0mmv+3zLao4i1PFexJdN8PFmXcXtVm8sUqFil6XS3eBZzMU2xy iypZNJYZEuzW7AbavSbcgtPhuTggFyA= -----END CERTIFICATE-----Generated at Tue Nov 4 04:02:06 2025 by rpki-client