$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa File: 4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa (raw, json) Hash identifier: oVWJ0FRte5PRVjeWhTfPLgjfEwD9vVQSqJWY85k5VW4= Subject key identifier: F4:51:A1:46:AD:CF:8E:AC:B0:EC:F0:16:59:A7:75:6E:0D:48:E8:ED Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584BAD624E4EAE64BCCA44627280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 21723 IP address blocks: 68.182.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4e:4e:ae:64:bc:ca:44:62:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=22d18ad0-58c9-43da-b7d5-4c2f31d79df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:82:2b:85:f6:98:4c:96:53:1e:ff:bb:c5:cd: d4:90:2c:90:44:40:a4:1f:aa:44:21:d9:a7:94:00: c7:7f:3e:f3:7d:bc:03:4c:0a:ee:6b:58:57:c9:dd: 0b:ba:75:74:9b:a7:04:7e:08:b0:84:61:96:9d:65: 86:09:17:ca:d6:65:da:84:f2:bf:7e:fb:6e:d4:70: 60:ee:fa:95:82:61:cd:1c:a0:7f:16:50:02:7e:b6: 23:51:b3:05:ac:a8:4c:fb:c0:17:e1:ee:05:14:46: 33:4f:ab:b2:d1:9c:a7:44:99:21:db:1f:4c:83:79: d9:b7:38:35:30:61:33:54:6a:b3:28:f0:59:f0:a1: f2:45:e1:cf:1d:df:ea:f2:c2:da:93:bb:09:0e:99: 89:b6:ad:14:a9:39:a6:1e:83:42:f0:cc:e3:77:27: a2:9c:49:42:18:b2:e9:c6:27:ca:c6:f0:87:a6:4c: 4c:ad:14:f0:f8:57:55:18:f2:2b:ee:b8:86:77:5e: aa:74:4b:7d:61:4d:19:40:7a:bf:05:62:80:39:6d: 60:19:70:59:78:f7:90:ae:b6:3d:38:98:bc:7c:28: 8e:67:ec:53:e9:53:e4:97:79:52:86:76:27:28:f9: 98:a8:1c:12:b4:2d:29:22:84:54:70:24:0f:0d:b5: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:51:A1:46:AD:CF:8E:AC:B0:EC:F0:16:59:A7:75:6E:0D:48:E8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4d1caa7e-bc43-3eea-8cd1-913f8700410c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:22:89:52:ce:11:bf:c4:0e:fc:6a:7b:9a:77:a2:9b:48:54: 09:61:6e:c2:7c:85:fa:b9:4e:ff:59:38:17:35:2b:8f:cd:86: 51:b2:15:0e:81:c3:35:24:c6:35:aa:a8:a0:84:26:fd:21:11: ba:64:7e:99:57:d2:37:5b:df:29:8c:5e:63:8a:9d:f4:04:b1: bd:b6:c2:2c:74:5b:6f:df:c8:6f:a9:90:a8:06:64:ce:4f:47: 3f:3b:35:61:7e:64:a5:2d:63:91:6f:5b:06:62:ec:4b:4f:d6: 9b:90:c9:da:3a:92:b8:86:e8:e5:ea:17:f7:4e:70:03:d4:2e: 31:1d:37:7e:10:bd:96:0c:c2:d0:06:11:39:11:db:33:d5:2b: 33:a9:b2:91:58:41:0f:27:2e:f0:f1:84:49:25:25:74:e5:13: 54:61:0c:2a:8d:fd:6f:5f:20:6e:90:85:39:1b:fd:62:c9:49: 25:3a:e5:93:65:47:b3:f9:20:87:34:13:15:06:a8:b9:af:56: 58:eb:81:84:13:bd:29:8c:12:76:5b:51:d4:e7:40:d3:87:ce: ac:ef:02:4d:fa:cd:0a:7d:56:7c:51:45:0b:0b:39:ed:7a:e9: c2:65:55:b1:e6:a1:b6:6b:09:80:7d:16:c5:74:a8:fb:bc:23: e3:34:ff:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYk5OrmS8ykRicoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MjJkMThhZDAtNThjOS00M2RhLWI3ZDUtNGMyZjMxZDc5ZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4IrhfaYTJZTHv+7xc3UkCyQRECkH6pEIdmn lADHfz7zfbwDTArua1hXyd0LunV0m6cEfgiwhGGWnWWGCRfK1mXahPK/fvtu1HBg 7vqVgmHNHKB/FlACfrYjUbMFrKhM+8AX4e4FFEYzT6uy0ZynRJkh2x9Mg3nZtzg1 MGEzVGqzKPBZ8KHyReHPHd/q8sLak7sJDpmJtq0UqTmmHoNC8MzjdyeinElCGLLp xifKxvCHpkxMrRTw+FdVGPIr7riGd16qdEt9YU0ZQHq/BWKAOW1gGXBZePeQrrY9 OJi8fCiOZ+xT6VPkl3lShnYnKPmYqBwStC0pIoRUcCQPDbVVuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRRoUatz46ssOzwFlmndW4NSOjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGQxY2FhN2UtYmM0My0z ZWVhLThjZDEtOTEzZjg3MDA0MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERLbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMiiVLOEb/EDvxqe5p3optIVAlhbsJ8hfq5Tv9ZOBc1K4/NhlGyFQ6B wzUkxjWqqKCEJv0hEbpkfplX0jdb3ymMXmOKnfQEsb22wix0W2/fyG+pkKgGZM5P Rz87NWF+ZKUtY5FvWwZi7EtP1puQydo6kriG6OXqF/dOcAPULjEdN34QvZYMwtAG ETkR2zPVKzOpspFYQQ8nLvDxhEklJXTlE1RhDCqN/W9fIG6QhTkb/WLJSSU65ZNl R7P5IIc0ExUGqLmvVljrgYQTvSmMEnZbUdTnQNOHzqzvAk36zQp9VnxRRQsLOe16 6cJlVbHmobZrCYB9FsV0qPu8I+M0/xQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:39:04 2025 by rpki-client