$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa File: 13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa (raw, json) Hash identifier: QKvpYdori2tA9tE1ymI9+k4TWrnq+H0yzZAIU/XNHIE= Subject key identifier: FE:73:BA:62:3B:1E:59:2F:5A:07:DE:E0:FE:6E:D4:4D:88:43:18:43 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584BA0D26EF37662A5AF0B119BE0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 11427 IP address blocks: 68.182.212.0/22 maxlen: 22 68.182.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6e:f3:76:62:a5:af:0b:11:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=4a633bda-7282-4e1f-99e0-341043d18d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:ce:4b:f3:0e:2c:b7:e8:df:e6:4a:38:7c: 75:1f:5a:2b:74:85:e5:81:82:c7:a9:9d:90:b4:1e: 51:e6:f4:06:2d:ae:8d:58:cf:9d:09:fa:cf:67:56: 67:c0:a5:97:07:4f:b7:a8:a5:93:20:50:60:a1:39: ca:10:21:28:b7:10:01:13:93:53:c2:e2:60:5c:7a: dd:74:c1:0e:93:74:57:89:74:af:b2:d3:40:a9:b9: 9d:d1:c9:d2:7b:77:69:18:3e:49:e5:3f:48:99:43: 22:6c:cd:52:bb:f1:34:9e:c7:7b:50:55:6f:25:6e: 39:22:55:cd:b4:0f:a0:3b:81:04:c2:86:65:ab:fc: d3:6c:5c:58:4b:d9:80:a1:e1:0c:ba:f4:2e:05:3b: c4:f8:8c:59:30:a7:84:ef:56:e1:c1:dd:6c:97:1b: ce:b0:5c:c4:7c:df:76:d4:02:b2:93:1b:6e:21:16: a7:c5:2e:3f:5b:59:81:46:9f:1b:95:f0:bd:f9:d5: 97:3e:02:65:4a:5d:01:39:f4:c3:af:8a:ab:7f:4a: 89:81:f2:e5:5d:78:c2:c2:ab:4c:f2:3d:c3:eb:18: 28:4b:6f:2c:88:7f:39:5d:65:c1:95:15:87:25:0b: d6:5c:a1:72:3c:69:ba:23:55:c7:c5:1f:b5:a8:86: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:73:BA:62:3B:1E:59:2F:5A:07:DE:E0:FE:6E:D4:4D:88:43:18:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.212.0-68.182.219.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:cc:1c:18:c6:e6:dd:0d:4d:05:20:c1:5e:e1:09:a3:2b:9d: 39:c5:dc:bc:8f:69:da:07:43:aa:ab:2c:b5:d0:8d:3f:04:6e: ca:47:00:54:cc:0f:56:e1:45:3a:b0:5f:92:3b:96:1d:6e:d2: 6e:f5:27:a1:02:9b:7d:c2:5a:7d:33:f3:ab:2f:5e:3b:aa:9a: 4d:3b:9b:47:40:51:18:20:cd:0a:2f:19:c3:a8:b2:af:15:45: 07:fa:d7:ee:56:9c:8e:c2:9f:ff:d1:a2:19:08:73:07:b2:3a: a6:73:6c:3b:64:b9:13:b0:4d:00:a0:7c:8f:a4:93:f8:74:18: ad:57:18:93:1a:b0:d3:09:05:af:03:0f:09:d2:6c:0a:19:6e: 5d:ee:78:fb:1e:a0:f0:2b:93:d6:8c:e2:1f:db:01:80:98:0f: bf:3a:5c:60:9e:d5:f4:d6:80:db:f7:c9:e1:8d:5f:56:e6:bd: ee:84:76:ea:44:eb:6d:e9:bd:c1:e0:e5:e2:cc:1f:ee:9d:dd: ff:63:b1:97:f0:73:82:6f:e2:ac:e2:36:4f:a9:f1:48:f7:9c: fd:e7:1c:2c:60:24:c2:c5:fc:ac:d1:88:c0:9b:3a:4e:85:3f: 88:80:c9:70:6c:83:91:07:56:c5:f2:c3:c1:90:95:44:ca:62: 04:82:a9:2b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEug0m7zdmKlrwsRm+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NGE2MzNiZGEtNzI4Mi00ZTFmLTk5ZTAtMzQxMDQzZDE4ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVnOS/MOLLfo3+ZKOHx1H1ordIXlgYLHqZ2Q tB5R5vQGLa6NWM+dCfrPZ1ZnwKWXB0+3qKWTIFBgoTnKECEotxABE5NTwuJgXHrd dMEOk3RXiXSvstNAqbmd0cnSe3dpGD5J5T9ImUMibM1Su/E0nsd7UFVvJW45IlXN tA+gO4EEwoZlq/zTbFxYS9mAoeEMuvQuBTvE+IxZMKeE71bhwd1slxvOsFzEfN92 1AKykxtuIRanxS4/W1mBRp8blfC9+dWXPgJlSl0BOfTDr4qrf0qJgfLlXXjCwqtM 8j3D6xgoS28siH85XWXBlRWHJQvWXKFyPGm6I1XHxR+1qIYS2wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP5zumI7HlkvWgfe4P5u1E2IQxhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTNhNmM0MzctZTQ1OS0z YzA1LWIzZWQtMGZlNTJjZWU4ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJEttQD BAJEttgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAdswcGMbm3Q1NBSDBXuEJoyudOcXcvI9p2gdDqqsstdCN PwRuykcAVMwPVuFFOrBfkjuWHW7SbvUnoQKbfcJafTPzqy9eO6qaTTubR0BRGCDN Ci8Zw6iyrxVFB/rX7lacjsKf/9GiGQhzB7I6pnNsO2S5E7BNAKB8j6ST+HQYrVcY kxqw0wkFrwMPCdJsChluXe54+x6g8CuT1oziH9sBgJgPvzpcYJ7V9NaA2/fJ4Y1f Vua97oR26kTrbem9weDl4swf7p3d/2Oxl/Bzgm/irOI2T6nxSPec/eccLGAkwsX8 rNGIwJs6ToU/iIDJcGyDkQdWxfLDwZCVRMpiBIKpKw== -----END CERTIFICATE-----Generated at Wed Nov 5 06:22:46 2025 by rpki-client