$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa File: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (raw, json) Hash identifier: KebL9jylRxBbE+y7rAXJQcXHePCz+t/4LzLE9ysAe58= Subject key identifier: E6:15:7B:85:5D:3A:E9:1A:EF:D3:C0:1F:96:5D:0B:28:D2:76:77:01 Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584BAA97A4FEB40CCA2B3E8F1180 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 206.41.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a4:fe:b4:0c:ca:2b:3e:8f:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=d5235d66-321b-40c6-9f59-9996e139fec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d7:b5:0e:b4:5e:a4:1e:9d:ea:6a:cb:20:de: 9e:b5:c0:7a:f9:e4:cd:00:12:67:75:22:13:c6:2a: fb:83:71:c8:e4:4e:f6:63:cd:dd:d5:45:78:cf:21: 9a:ad:46:1d:ef:f7:7c:9f:ac:7a:82:88:43:69:a4: 5b:b3:2c:34:d4:9d:ae:c8:ae:01:dd:84:bb:e9:9d: 37:3e:5a:ad:b6:26:31:54:46:9b:a6:22:a6:11:b7: c4:32:9c:65:ce:6f:31:5a:50:cc:04:0a:b1:d0:f2: 84:8e:64:70:fe:44:9e:16:3f:e8:ef:d8:3f:0a:ac: 5a:1c:f4:93:2b:d7:cf:94:64:6a:a2:0c:b8:7a:2a: 94:3a:44:7c:7f:71:e6:0c:8a:fc:44:fa:97:67:16: e7:8b:84:cc:25:81:8d:b2:44:bb:2a:1b:5f:1c:4f: 96:4c:4c:76:37:95:4b:5e:cd:61:75:70:56:7f:df: c8:9c:62:f9:a4:3a:b5:13:d4:bd:9a:f7:da:26:4c: 26:16:28:01:65:f5:08:f6:7c:14:04:05:3e:2e:fa: df:33:4c:9e:95:9b:8f:28:a1:4c:b7:07:6e:d2:2b: 06:40:75:80:b7:c8:d7:ef:8f:5d:71:87:0f:42:db: 51:16:5b:76:3d:eb:cf:0e:85:ec:20:86:3a:38:58: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:15:7B:85:5D:3A:E9:1A:EF:D3:C0:1F:96:5D:0B:28:D2:76:77:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: 206.41.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ab:6b:b1:6d:28:73:8e:ed:0b:f5:8e:b5:5a:a4:5e:d1:91: 0c:5c:b3:a6:a0:f0:93:2d:10:00:91:b0:3f:cd:da:93:20:41: ca:51:d1:34:d5:27:7e:68:66:cb:23:da:20:75:b4:97:49:89: 21:ed:b8:c4:03:9a:af:64:28:06:7d:4d:cc:e7:b0:67:0f:19: 7d:b4:8b:74:51:9a:c6:bc:16:c3:ce:74:b8:85:79:05:79:e0: 3d:8f:cb:ef:0a:7b:2a:ed:e1:c3:89:4c:25:dd:5e:0a:e9:68: 71:ed:fa:49:bb:8d:c8:16:6d:13:74:01:bf:da:f3:29:5e:32: 5f:74:7a:91:92:c9:ff:57:35:e4:eb:43:a8:56:d8:da:70:79: 51:44:ad:64:5a:08:51:73:0a:7f:a9:4d:e3:c3:08:2b:0d:92: 6f:33:64:ed:49:f2:fa:0c:53:0e:37:20:2f:10:ae:1e:bc:fe: f3:13:f5:36:75:24:ec:bb:fb:d1:fc:04:36:f2:24:62:ae:c8: d9:a9:4f:6b:5e:9d:36:9f:ad:de:b8:54:c8:0c:f1:85:66:b1: cf:5a:a5:3e:6b:39:ec:c3:39:09:2b:27:2d:d7:b6:d7:8f:53: 3e:30:de:92:70:82:29:c6:c8:3f:47:cb:fb:7b:c4:bb:05:bf: d8:85:c9:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6T+tAzKKz6PEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZDUyMzVkNjYtMzIxYi00MGM2LTlmNTktOTk5NmUxMzlmZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNe1DrRepB6d6mrLIN6etcB6+eTNABJndSIT xir7g3HI5E72Y83d1UV4zyGarUYd7/d8n6x6gohDaaRbsyw01J2uyK4B3YS76Z03 PlqttiYxVEabpiKmEbfEMpxlzm8xWlDMBAqx0PKEjmRw/kSeFj/o79g/CqxaHPST K9fPlGRqogy4eiqUOkR8f3HmDIr8RPqXZxbni4TMJYGNskS7KhtfHE+WTEx2N5VL Xs1hdXBWf9/InGL5pDq1E9S9mvfaJkwmFigBZfUI9nwUBAU+LvrfM0yelZuPKKFM twdu0isGQHWAt8jX749dcYcPQttRFlt2PevPDoXsIIY6OFiQzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYVe4VdOuka79PAH5ZdCyjSdncBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvZmMyYmVlZGYtY2FmYy0z NjU4LWIzZGQtMTI1ZjJiYTNkMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2ra7FtKHOO7Qv1jrVapF7RkQxcs6ag8JMtEACRsD/N2pMgQcpR0TTV J35oZssj2iB1tJdJiSHtuMQDmq9kKAZ9TcznsGcPGX20i3RRmsa8FsPOdLiFeQV5 4D2Py+8Keyrt4cOJTCXdXgrpaHHt+km7jcgWbRN0Ab/a8yleMl90epGSyf9XNeTr Q6hW2NpweVFErWRaCFFzCn+pTePDCCsNkm8zZO1J8voMUw43IC8Qrh68/vMT9TZ1 JOy7+9H8BDbyJGKuyNmpT2tenTafrd64VMgM8YVmsc9apT5rOezDOQkrJy3XtteP Uz4w3pJwginGyD9Hy/t7xLsFv9iFyZI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:29:38 2025 by rpki-client