$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53cd4ba6-63e5-39a8-96e2-ab5e423408e2.roa File: 53cd4ba6-63e5-39a8-96e2-ab5e423408e2.roa (raw, json) Hash identifier: MQDlP6oAu4H9r657R9KYjQN28dg40ZHi+yB7eLrT4jE= Subject key identifier: DB:6E:5C:A8:EB:21:75:E2:4B:85:18:7B:CA:EF:F8:40:C0:AE:92:6A Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584BAA97A3B8E8F2D20C2CA02A00 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53cd4ba6-63e5-39a8-96e2-ab5e423408e2.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 396849 IP address blocks: 206.198.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a3:b8:e8:f2:d2:0c:2c:a0:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=f6d3f243-36ad-4f6b-902a-6ac2c7d2a584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:02:6b:b2:a7:24:9d:a2:64:50:54:c2:2d: 3e:53:dd:88:46:cf:58:33:90:40:d9:7c:04:a9:60: fc:54:c4:30:93:7d:a8:5d:1f:80:22:f3:eb:2b:ce: bb:8b:50:dc:82:0b:b9:2d:c0:8d:87:d2:52:71:be: a0:5b:6d:84:f6:8e:f2:2e:b9:f3:2d:ac:cd:d7:cd: ad:ef:33:59:24:c9:6e:d9:c2:bd:4c:22:ed:41:75: 7e:ce:2b:1a:fa:ce:28:f6:62:df:68:5b:fe:a4:10: ea:23:f9:4d:26:b8:5f:c3:d5:7f:60:fa:ac:68:90: 57:4c:ef:1d:aa:91:7e:c0:27:08:ef:12:7f:16:28: 44:0e:21:ea:e6:f7:cf:25:da:e5:43:f8:3d:47:c4: 7a:95:51:31:de:17:92:be:9a:69:f7:78:75:9c:50: 96:c9:fd:f2:5d:91:0c:3b:d0:14:f5:21:c9:cd:20: b3:a0:cf:48:31:d7:fc:67:14:9e:f8:9f:d7:3a:4d: c4:94:a3:87:e7:9b:85:ab:01:2b:55:c5:19:d5:74: 2b:aa:59:32:d0:07:1b:f6:6e:c5:5f:8f:49:b6:89: f6:8c:05:b5:28:17:ab:86:47:28:c5:10:e6:ce:85: 24:35:b7:e4:75:e5:7f:23:24:76:e7:b2:40:a6:61: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6E:5C:A8:EB:21:75:E2:4B:85:18:7B:CA:EF:F8:40:C0:AE:92:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53cd4ba6-63e5-39a8-96e2-ab5e423408e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 206.198.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ac:b8:17:35:32:36:74:25:3f:b3:60:37:bb:f4:9f:a8:db: bb:c9:10:b7:ca:62:09:bf:c9:e5:27:5a:1f:d3:26:1b:1f:a9: ec:4d:36:aa:63:3f:91:99:cb:af:81:28:14:62:62:ee:9e:b0: 56:a5:42:0f:2f:99:b7:a7:17:d8:57:bf:ec:b9:d1:5f:c5:0f: ac:35:21:63:0f:af:72:ee:b7:9c:1f:40:d5:89:14:a5:fa:6e: a2:ce:14:24:49:c7:a3:9b:ea:48:0e:70:0f:eb:02:1b:88:59: 9f:8f:c1:2a:4c:46:eb:29:bf:34:7b:59:e1:62:87:56:bd:26: 80:e8:c3:90:b3:33:d6:62:6e:e9:01:3d:e2:b3:7f:a9:be:59: d7:f9:2b:7b:3b:52:83:43:b0:01:57:8f:63:fd:21:aa:cf:61: 9d:23:4c:4f:7e:e5:f8:b2:b5:8d:81:c5:4c:7c:36:d7:1a:72: d0:eb:ce:d6:01:f8:95:39:3d:11:34:e8:43:1a:db:aa:16:d6: 80:49:43:d2:e2:89:20:c1:33:e0:a2:c0:1a:8e:da:53:9e:3b: f5:87:eb:bc:73:a3:90:64:ce:4f:39:27:c7:81:ec:e8:9a:85: ea:12:6c:16:8b:9e:dd:5a:c7:4a:d2:78:c3:fd:cd:91:23:a6: fb:da:c2:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6O46PLSDCygKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZjZkM2YyNDMtMzZhZC00ZjZiLTkwMmEtNmFjMmM3ZDJhNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqcCa7KnJJ2iZFBUwi0+U92IRs9YM5BA2XwE qWD8VMQwk32oXR+AIvPrK867i1Dcggu5LcCNh9JScb6gW22E9o7yLrnzLazN182t 7zNZJMlu2cK9TCLtQXV+zisa+s4o9mLfaFv+pBDqI/lNJrhfw9V/YPqsaJBXTO8d qpF+wCcI7xJ/FihEDiHq5vfPJdrlQ/g9R8R6lVEx3heSvppp93h1nFCWyf3yXZEM O9AU9SHJzSCzoM9IMdf8ZxSe+J/XOk3ElKOH55uFqwErVcUZ1XQrqlky0Acb9m7F X49Jton2jAW1KBerhkcoxRDmzoUkNbfkdeV/IyR257JApmFKGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtuXKjrIXXiS4UYe8rv+EDArpJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNTNjZDRiYTYtNjNlNS0z OWE4LTk2ZTItYWI1ZTQyMzQwOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGusuBc1MjZ0JT+zYDe79J+o27vJELfKYgm/yeUnWh/TJhsfqexNNqpj P5GZy6+BKBRiYu6esFalQg8vmbenF9hXv+y50V/FD6w1IWMPr3Lut5wfQNWJFKX6 bqLOFCRJx6Ob6kgOcA/rAhuIWZ+PwSpMRuspvzR7WeFih1a9JoDow5CzM9ZibukB PeKzf6m+Wdf5K3s7UoNDsAFXj2P9IarPYZ0jTE9+5fiytY2BxUx8NtcactDrztYB +JU5PRE06EMa26oW1oBJQ9LiiSDBM+CiwBqO2lOeO/WH67xzo5Bkzk85J8eB7Oia heoSbBaLnt1ax0rSeMP9zZEjpvvawpM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:25 2025 by rpki-client