$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/e65e9656-246e-34d6-a363-6319cd2ae985.roa File: e65e9656-246e-34d6-a363-6319cd2ae985.roa (raw, json) Hash identifier: GC14z4PVGwLBHYqHXO77JencVzEng0qRAYS0zfdbF40= Subject key identifier: 88:F1:3C:8C:C1:1D:BB:DA:4B:D4:35:37:08:75:FA:B8:B5:DE:5D:B5 Certificate issuer: /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5 Certificate serial: 010D0C9F4328584BABFD0669AA42B16FAAF0B640 Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/e65e9656-246e-34d6-a363-6319cd2ae985.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 24440 IP address blocks: 206.168.200.0/24 maxlen: 24 206.168.201.0/24 maxlen: 24 206.168.202.0/24 maxlen: 24 206.168.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:06:69:aa:42:b1:6f:aa:f0:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f814f4aa-75b6-47ec-a1ce-5d15574cd8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b1:77:88:bb:af:3f:a5:25:4d:39:85:21:07: d5:e8:4b:08:2c:60:84:75:7d:fc:a5:25:94:67:6e: 92:3e:b5:38:d7:9b:90:73:c7:d4:e5:ed:eb:58:61: cf:68:fc:a5:16:2b:20:d7:67:42:d3:06:9d:5d:98: 0a:97:df:0e:5a:43:3b:74:83:e6:5f:b8:93:1d:05: 4b:74:83:42:e9:01:67:19:99:ba:21:db:7a:85:ef: 15:97:bf:24:f6:17:5d:ec:fb:7b:df:ea:e8:25:5f: 7b:ef:45:00:14:3b:91:46:c8:d3:8a:83:6d:f6:46: 58:b0:ba:d6:6f:84:4d:40:27:87:af:5c:31:90:6d: 67:89:14:53:b7:45:5e:97:83:fd:4c:34:0a:a5:25: 2c:67:c8:7d:6e:c6:4d:7a:4e:11:4c:1e:49:e0:31: 9a:c7:58:9c:f7:24:79:e3:4b:43:a8:1c:a6:7c:51: 5b:a0:3a:56:82:28:12:f0:51:2d:27:02:a8:c4:a5: 5c:28:9d:f6:e9:c4:ad:5e:87:f3:08:24:fe:02:2c: 55:5b:06:f8:fe:a1:df:24:70:0c:fd:56:14:0e:c5: b4:84:ac:eb:f8:dc:00:2a:d0:78:df:91:9e:88:5f: ff:1b:68:ff:32:26:f3:fd:c8:d2:db:ff:d1:dd:42: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F1:3C:8C:C1:1D:BB:DA:4B:D4:35:37:08:75:FA:B8:B5:DE:5D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/e65e9656-246e-34d6-a363-6319cd2ae985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl X509v3 Authority Key Identifier: keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer sbgp-ipAddrBlock: critical IPv4: 206.168.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7f:2a:0b:81:6d:72:2f:82:bd:60:b2:61:91:8c:e7:b6:bd: 65:ff:df:5a:a8:ef:87:3d:2d:6f:97:84:e9:96:d8:e3:04:54: 8b:ca:d4:ed:a1:ee:b3:56:66:0b:eb:f8:fb:1f:2c:86:e4:93: 47:5f:f2:cd:1f:7e:c7:b9:64:ea:00:6f:78:6a:e4:56:54:2d: 27:6b:83:b0:23:e2:60:a6:84:ec:6e:46:74:61:c7:6a:20:82: 87:3c:ee:f8:42:f1:a7:5f:6e:c8:c9:b1:1f:ba:8c:86:c4:f5: 17:22:04:04:be:91:82:ba:a2:31:9d:76:36:24:11:02:87:77: 1c:6c:17:09:d7:cd:f8:d5:3a:0e:e9:cd:4b:a9:45:14:a7:31: 56:d6:78:d4:c1:c9:a2:09:b6:d5:d4:0a:40:56:ed:3c:a9:ce: ed:da:50:5a:8d:df:c2:da:a8:0e:7b:76:47:87:ba:7b:60:a5: 92:95:5f:a3:e6:2b:35:e0:44:8f:c6:fb:4c:9f:32:e2:bd:50: 6d:cd:5e:a8:d4:37:2b:e5:a8:e2:86:71:17:0c:71:fa:80:13: b4:9b:a9:a3:78:b5:63:f8:84:33:76:fa:de:f8:f1:f1:ea:38: 03:ce:6b:89:5b:32:b2:a6:72:b3:68:df:5e:41:4b:9d:e7:25: e9:5a:1b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QZpqkKxb6rwtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJiMTk5NmUtMzcxZi00MmMwLWI1MTUtZTJmODc2M2Vk N2M1MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZjgxNGY0YWEtNzViNi00N2VjLWExY2UtNWQxNTU3NGNkOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77F3iLuvP6UlTTmFIQfV6EsILGCEdX38pSWU Z26SPrU415uQc8fU5e3rWGHPaPylFisg12dC0wadXZgKl98OWkM7dIPmX7iTHQVL dINC6QFnGZm6Idt6he8Vl78k9hdd7Pt73+roJV9770UAFDuRRsjTioNt9kZYsLrW b4RNQCeHr1wxkG1niRRTt0Vel4P9TDQKpSUsZ8h9bsZNek4RTB5J4DGax1ic9yR5 40tDqBymfFFboDpWgigS8FEtJwKoxKVcKJ326cStXofzCCT+AixVWwb4/qHfJHAM /VYUDsW0hKzr+NwAKtB435GeiF//G2j/Mibz/cjS2//R3ULnZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjxPIzBHbvaS9Q1Nwh1+ri13l21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMmIx OTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4NzYzZWQ3YzUvZTY1ZTk2NTYtMjQ2ZS0z NGQ2LWEzNjMtNjMxOWNkMmFlOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjJiMTk5NmUtMzcxZi00MmMwLWI1 MTUtZTJmODc2M2VkN2M1LzIyYjE5OTZlLTM3MWYtNDJjMC1iNTE1LWUyZjg3NjNl ZDdjNS5jcmwwHwYDVR0jBBgwFoAUo348kCeHbN+ipm+1GmaAC06M0a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMmIxOTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4 NzYzZWQ3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF/KguBbXIvgr1gsmGRjOe2vWX/31qo74c9LW+XhOmW2OMEVIvK1O2h 7rNWZgvr+PsfLIbkk0df8s0ffse5ZOoAb3hq5FZULSdrg7Aj4mCmhOxuRnRhx2og goc87vhC8adfbsjJsR+6jIbE9RciBAS+kYK6ojGddjYkEQKHdxxsFwnXzfjVOg7p zUupRRSnMVbWeNTByaIJttXUCkBW7Typzu3aUFqN38LaqA57dkeHuntgpZKVX6Pm KzXgRI/G+0yfMuK9UG3NXqjUNyvlqOKGcRcMcfqAE7SbqaN4tWP4hDN2+t748fHq OAPOa4lbMrKmcrNo315BS53nJelaG6c= -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:51 2025 by rpki-client