$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/facaddb3-e453-35b0-9d7d-113be547c25c.roa File: facaddb3-e453-35b0-9d7d-113be547c25c.roa (raw, json) Hash identifier: JBLzj1sjh2p5WkRnjl2iZkUztIvQ7k+lCoEdPB6d5TM= Subject key identifier: 71:4B:1A:4B:69:C5:6D:2C:B0:A7:41:FB:48:D1:4D:4A:C3:58:D4:41 Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584B970D06CD926E81E4A5598040 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/facaddb3-e453-35b0-9d7d-113be547c25c.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 206.83.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:06:cd:92:6e:81:e4:a5:59:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=5b4f42aa-5a56-47ba-a1bf-6c3973b71944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:f6:5a:01:7e:03:1f:dd:ac:7c:94:12:3b: cb:05:1d:eb:30:48:80:f9:46:b5:0d:69:dd:94:41: 01:59:1d:f1:0a:16:45:4b:00:3d:31:8e:7e:8f:69: 26:2a:0f:ae:e4:6f:1d:2e:a1:b4:d5:5c:4f:0c:64: 54:c2:57:de:89:44:c1:a3:87:0a:66:15:77:70:e2: 0c:85:2f:a1:9e:ff:33:6f:0d:0c:6a:62:40:b3:c4: 34:d7:95:f7:97:25:11:fe:33:d7:77:b3:3a:ee:89: ae:05:e3:da:cb:73:b8:60:1d:0a:64:26:cd:15:54: fe:71:a6:b9:ef:b4:e9:cf:24:ce:85:1a:07:48:ff: 6a:14:5a:eb:ef:84:cf:07:80:9d:02:12:28:86:47: 32:86:c4:bb:f8:e1:18:c3:e4:35:9e:39:b7:16:5d: a3:f3:09:00:03:f5:31:ed:bc:02:61:3a:d9:55:15: d7:b1:38:47:6a:cc:f2:dc:9b:2b:63:d3:91:a0:7a: 60:85:f8:5e:6f:d7:3c:ad:84:a2:3e:e0:a9:b9:a8: ba:c2:76:16:c5:8c:e0:96:ef:8f:d2:9a:d3:d1:d2: 06:d2:6b:f2:8e:05:d8:e0:0b:bf:e0:7c:b5:51:6b: 26:34:64:66:7e:ba:59:54:5d:59:40:8b:99:fa:f6: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:1A:4B:69:C5:6D:2C:B0:A7:41:FB:48:D1:4D:4A:C3:58:D4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/facaddb3-e453-35b0-9d7d-113be547c25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv4: 206.83.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f9:b3:4e:6e:35:14:e7:eb:7b:fc:b9:98:f6:0a:ba:fc:08: 3f:7d:18:4a:8e:78:16:ba:be:03:1b:b9:db:35:f7:6b:29:2f: 37:5a:4e:82:97:30:02:49:1b:32:05:2c:06:2a:78:19:b5:b0: 42:00:83:be:00:23:b7:ca:cb:e0:34:44:64:05:52:c1:92:28: c5:2c:a5:c4:a6:c8:8a:25:6c:26:43:eb:9a:a9:53:7d:b3:60: c4:d1:3b:cb:99:f4:30:de:10:d3:28:f9:79:46:da:b7:3e:e3: 6e:d0:ed:db:fe:f7:c7:17:14:15:55:ec:e1:8a:55:b8:4d:04: eb:97:9b:77:58:2b:8b:fa:fb:b2:5b:b5:b1:18:33:b6:2e:2b: b3:c2:8d:ad:e5:7a:7e:58:b1:ae:83:1b:51:eb:04:b4:f2:c2: d1:e5:22:60:95:52:13:b1:32:c0:b3:d8:f5:77:1a:ae:f8:fe: 3a:31:e7:f2:17:12:cf:34:b9:9f:cc:6c:20:4d:4f:28:86:2d: 4e:bc:11:f7:41:ef:89:ed:65:44:35:b5:10:81:d3:6d:50:e3: e4:a9:74:0b:9b:3b:0d:ca:31:2e:d1:81:45:45:e2:d0:11:f8: 81:4d:64:5e:92:0b:22:1a:02:76:b2:0b:63:3e:dc:dc:39:f1: 8d:ce:6d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQbNkm6B5KVZgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NWI0ZjQyYWEtNWE1Ni00N2JhLWExYmYtNmMzOTczYjcxOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVz2WgF+Ax/drHyUEjvLBR3rMEiA+Ua1DWnd lEEBWR3xChZFSwA9MY5+j2kmKg+u5G8dLqG01VxPDGRUwlfeiUTBo4cKZhV3cOIM hS+hnv8zbw0MamJAs8Q015X3lyUR/jPXd7M67omuBePay3O4YB0KZCbNFVT+caa5 77TpzyTOhRoHSP9qFFrr74TPB4CdAhIohkcyhsS7+OEYw+Q1njm3Fl2j8wkAA/Ux 7bwCYTrZVRXXsThHaszy3JsrY9ORoHpghfheb9c8rYSiPuCpuai6wnYWxYzglu+P 0prT0dIG0mvyjgXY4Au/4Hy1UWsmNGRmfrpZVF1ZQIuZ+vY1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFLGktpxW0ssKdB+0jRTUrDWNRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvZmFjYWRkYjMtZTQ1My0z NWIwLTlkN2QtMTEzYmU1NDdjMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzlMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb5s05uNRTn63v8uZj2Crr8CD99GEqOeBa6vgMbuds192spLzdaToKX MAJJGzIFLAYqeBm1sEIAg74AI7fKy+A0RGQFUsGSKMUspcSmyIolbCZD65qpU32z YMTRO8uZ9DDeENMo+XlG2rc+427Q7dv+98cXFBVV7OGKVbhNBOuXm3dYK4v6+7Jb tbEYM7YuK7PCja3len5Ysa6DG1HrBLTywtHlImCVUhOxMsCz2PV3Gq74/jox5/IX Es80uZ/MbCBNTyiGLU68EfdB74ntZUQ1tRCB021Q4+SpdAubOw3KMS7RgUVF4tAR +IFNZF6SCyIaAnayC2M+3Nw58Y3ObaY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:11 2025 by rpki-client