$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa File: 3925ee21-557f-30f9-94cf-08e3240595ed.roa (raw, json) Hash identifier: crVZSA3nFsCqwJfrtmWF58UPVEFgZPRnPjdY7/UfAR4= Subject key identifier: 80:BC:9B:72:97:27:58:0B:FF:D4:AA:EE:14:96:74:F7:36:13:09:E8 Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945 Certificate serial: 010D0C9F4328584BB45D0C23AC7A6BC046FFF480 Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 48678 IP address blocks: 192.101.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0c:23:ac:7a:6b:c0:46:ff:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03866eb-6362-4657-aa66-83307258d945 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=603ea107-d52a-4dec-a1b9-fe7481e11e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:35:ec:04:e1:76:80:ea:82:6c:21:8a:9c: f9:46:5e:aa:b1:bb:ef:a1:55:de:b4:fb:1e:19:8b: b6:24:67:5e:90:ff:e5:b8:d2:4b:a2:51:18:93:1e: 45:61:65:0e:d3:b2:dc:12:cc:5c:d2:05:f9:7f:ec: dd:4c:0a:7c:b6:e8:31:5c:dc:16:da:40:49:aa:b4: f2:73:81:15:f5:58:e0:cd:6b:7c:1d:dd:51:9a:90: 58:fe:82:78:e0:18:7a:32:f5:c1:1a:00:4a:df:10: 02:24:bd:fd:78:85:7e:c3:a5:4e:87:06:48:41:6b: af:a6:be:fe:2a:9b:92:22:a2:06:5e:28:58:48:48: d3:7f:c0:28:6f:83:ef:dd:41:91:73:86:ea:cf:d6: c8:a5:22:ba:66:dd:e5:41:c3:fb:01:70:cf:c1:05: 17:ab:2e:28:e6:cf:4a:d7:11:ee:96:31:20:13:82: 82:7e:f5:19:b9:5a:71:72:49:c1:0f:7b:19:2e:0a: 33:85:dd:da:8c:38:34:ad:26:13:22:89:99:6b:a6: d8:73:3d:55:a2:cb:92:17:01:8a:40:d4:60:b5:90: 51:e6:90:08:41:5f:84:d5:1d:5b:82:da:ee:42:2c: 07:e7:b0:5b:90:a8:0f:4b:df:71:2a:28:11:ee:56: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BC:9B:72:97:27:58:0B:FF:D4:AA:EE:14:96:74:F7:36:13:09:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/3925ee21-557f-30f9-94cf-08e3240595ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl X509v3 Authority Key Identifier: keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer sbgp-ipAddrBlock: critical IPv4: 192.101.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:65:d1:24:53:23:ae:01:47:35:72:22:63:5a:fa:94:a5:f4: 3c:e0:c1:ab:cd:d2:fa:76:2d:df:75:07:5d:8a:66:b1:2a:5f: 49:88:e2:a6:c8:53:52:71:08:40:ab:21:1e:1d:7e:e2:db:ca: 27:27:c3:4d:3b:42:e3:a1:fa:c0:20:db:85:c2:cf:79:57:f5: 06:1d:f8:b1:48:e1:9e:25:87:81:5f:02:35:df:ee:17:84:ae: 63:02:2d:a4:e8:c7:eb:c4:5f:df:c8:29:39:59:fc:5a:0f:b0: 7c:db:12:a8:f5:89:5c:b5:80:0c:af:d8:dc:3b:96:fb:96:4f: 8e:57:ec:e6:a6:3e:23:b4:11:3d:80:53:1a:d8:be:83:b3:d3: 67:08:56:68:21:21:8a:13:4d:59:44:a8:3f:1c:e0:88:c3:79: 5f:dc:c6:bf:9d:38:dc:f4:45:1f:82:fa:03:dc:32:66:16:db: 12:c1:cd:85:67:95:5c:a7:2c:db:52:7d:3d:3d:cc:60:cf:ee: 97:bf:0b:c2:92:a4:79:8b:94:21:11:30:a6:6b:a9:e9:27:47: a3:32:70:e6:70:50:d7:67:a3:1a:0d:a1:94:a1:98:4b:0d:ad: 68:39:f3:e7:9f:0a:10:c0:99:03:7a:9d:fb:e3:94:29:c1:02: ae:ef:11:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQwjrHprwEb/9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk OTQ1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NjAzZWExMDctZDUyYS00ZGVjLWExYjktZmU3NDgxZTExZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMY17AThdoDqgmwhipz5Rl6qsbvvoVXetPse GYu2JGdekP/luNJLolEYkx5FYWUO07LcEsxc0gX5f+zdTAp8tugxXNwW2kBJqrTy c4EV9VjgzWt8Hd1RmpBY/oJ44Bh6MvXBGgBK3xACJL39eIV+w6VOhwZIQWuvpr7+ KpuSIqIGXihYSEjTf8Aob4Pv3UGRc4bqz9bIpSK6Zt3lQcP7AXDPwQUXqy4o5s9K 1xHuljEgE4KCfvUZuVpxcknBD3sZLgozhd3ajDg0rSYTIomZa6bYcz1VosuSFwGK QNRgtZBR5pAIQV+E1R1bgtruQiwH57BbkKgPS99xKigR7lagQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC8m3KXJ1gL/9Sq7hSWdPc2EwnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4 NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvMzkyNWVlMjEtNTU3Zi0z MGY5LTk0Y2YtMDhlMzI0MDU5NWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4 ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtl0SRTI64BRzVyImNa+pSl9DzgwavN0vp2Ld91B12KZrEqX0mI4qbI U1JxCECrIR4dfuLbyicnw007QuOh+sAg24XCz3lX9QYd+LFI4Z4lh4FfAjXf7heE rmMCLaTox+vEX9/IKTlZ/FoPsHzbEqj1iVy1gAyv2Nw7lvuWT45X7OamPiO0ET2A UxrYvoOz02cIVmghIYoTTVlEqD8c4IjDeV/cxr+dONz0RR+C+gPcMmYW2xLBzYVn lVynLNtSfT09zGDP7pe/C8KSpHmLlCERMKZrqeknR6MycOZwUNdnoxoNoZShmEsN rWg58+efChDAmQN6nfvjlCnBAq7vEdI= -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:06 2025 by rpki-client