$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/72c38e4f-19e3-3972-b66c-a5638aa927c2.roa File: 72c38e4f-19e3-3972-b66c-a5638aa927c2.roa (raw, json) Hash identifier: cswi4PcFE2+nJkWksSqhCUjKzco2d/qhaun+6gzKI3o= Subject key identifier: 57:4A:66:58:34:49:5A:E8:74:53:95:B7:1E:C0:43:E0:4E:CA:78:08 Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584B852A5BA5D13D1984EC24CCE8 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/72c38e4f-19e3-3972-b66c-a5638aa927c2.roa Signing time: Tue 14 Oct 2025 15:15:33 +0000 ROA not before: Tue 14 Oct 2025 15:15:33 +0000 ROA not after: Mon 12 Jan 2026 16:15:33 +0000 asID: 834 IP address blocks: 206.174.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:2a:5b:a5:d1:3d:19:84:ec:24:cc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Oct 14 15:15:33 2025 GMT Not After : Jan 12 16:15:33 2026 GMT Subject: CN=31fa7dc6-231f-4d7f-8a71-dee287522425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:38:a7:68:ba:53:79:5b:4e:84:db:e8:9c: ed:1e:10:62:f1:02:77:bb:4a:23:5c:09:db:d8:af: 6f:f5:4d:74:14:00:58:e3:14:bb:5e:2a:72:56:13: c4:f2:86:33:73:bb:22:ac:8a:e0:52:53:96:8b:8c: 77:2f:51:75:47:50:1c:cb:68:5d:4c:c8:10:f7:d5: 80:22:43:7a:83:c9:6a:33:4c:cb:0c:f6:4f:c7:4b: ff:27:f3:92:66:e7:aa:c3:41:64:e6:4e:5f:ed:06: 19:95:f8:d3:2e:e4:00:a0:b2:3c:ea:44:59:e1:d3: 43:18:cc:e5:2c:96:f6:ee:be:f7:e3:05:99:99:96: fe:c1:f6:b1:13:12:dd:91:b2:8e:2e:91:52:00:b8: b6:56:06:ff:6d:b6:d2:3c:de:07:07:93:59:f8:69: 37:aa:b2:a5:14:a6:4e:4b:ed:a1:e7:d0:58:fb:0b: 87:e2:01:f8:2a:22:c8:fb:33:33:76:03:cd:75:6c: 3b:0a:46:d0:49:1e:cf:29:df:0a:57:a0:03:ea:a7: 9f:6e:38:2b:69:a3:37:65:0f:bc:f1:5b:4e:c8:6c: 47:f9:29:c9:c6:50:86:76:50:e5:b0:7b:e8:98:9c: 79:02:e2:c8:d6:08:c4:11:17:e2:d0:c6:98:eb:f8: ec:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:66:58:34:49:5A:E8:74:53:95:B7:1E:C0:43:E0:4E:CA:78:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/72c38e4f-19e3-3972-b66c-a5638aa927c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f1:d8:9b:1f:b2:21:43:09:a9:19:17:42:4f:83:17:fe:da: c7:c9:20:2d:01:a1:01:76:ad:a2:3c:a7:a3:67:eb:c7:96:b6: c9:db:25:bc:22:5a:3b:65:d0:ad:a0:bc:b1:7b:37:d1:92:6a: 35:3c:9b:44:6a:59:8e:1a:8f:47:3d:aa:90:19:94:46:8d:6c: 06:f4:b3:a5:10:16:0b:f5:1a:5a:72:4e:50:cf:64:10:ad:75: 7b:67:a7:52:24:20:4b:25:42:f6:f2:11:97:36:c8:b8:3a:03: 20:29:cc:1c:8d:4d:30:78:2a:43:c5:ec:e8:27:ad:a8:f1:f2: 8c:37:16:39:df:68:61:80:78:92:21:e1:1f:cd:a2:c8:5a:a1: 90:e4:f6:4d:79:2c:64:85:fa:75:fb:39:09:73:20:71:64:d3: 18:b7:be:36:52:3f:33:b3:86:68:ee:a1:a9:f8:3a:ee:67:45: 35:db:76:95:03:de:21:6a:e9:fe:4f:1a:08:f9:39:e7:70:b6: 49:29:5f:3d:a4:af:63:f9:2f:47:e3:f4:77:14:d4:00:11:fc: fc:8d:a7:bb:bf:19:34:a6:09:32:4e:54:40:fd:a5:93:60:b2: 75:c8:4c:cb:04:28:f2:6f:fe:c6:42:f7:ff:12:60:a5:d2:cb: 93:66:85:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFKlul0T0ZhOwkzOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MTAxNDE1MTUzM1oXDTI2MDExMjE2MTUzM1owLzEtMCsGA1UEAxMk MzFmYTdkYzYtMjMxZi00ZDdmLThhNzEtZGVlMjg3NTIyNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQY4p2i6U3lbToTb6JztHhBi8QJ3u0ojXAnb 2K9v9U10FABY4xS7XipyVhPE8oYzc7sirIrgUlOWi4x3L1F1R1Acy2hdTMgQ99WA IkN6g8lqM0zLDPZPx0v/J/OSZueqw0Fk5k5f7QYZlfjTLuQAoLI86kRZ4dNDGMzl LJb27r734wWZmZb+wfaxExLdkbKOLpFSALi2Vgb/bbbSPN4HB5NZ+Gk3qrKlFKZO S+2h59BY+wuH4gH4KiLI+zMzdgPNdWw7CkbQSR7PKd8KV6AD6qefbjgraaM3ZQ+8 8VtOyGxH+SnJxlCGdlDlsHvomJx5AuLI1gjEERfi0MaY6/jseQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdKZlg0SVrodFOVtx7AQ+BOyngIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvNzJjMzhlNGYtMTllMy0z OTcyLWI2NmMtYTU2MzhhYTkyN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzq6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLx2JsfsiFDCakZF0JPgxf+2sfJIC0BoQF2raI8p6Nn68eWtsnbJbwi Wjtl0K2gvLF7N9GSajU8m0RqWY4aj0c9qpAZlEaNbAb0s6UQFgv1GlpyTlDPZBCt dXtnp1IkIEslQvbyEZc2yLg6AyApzByNTTB4KkPF7Ognrajx8ow3FjnfaGGAeJIh 4R/NoshaoZDk9k15LGSF+nX7OQlzIHFk0xi3vjZSPzOzhmjuoan4Ou5nRTXbdpUD 3iFq6f5PGgj5OedwtkkpXz2kr2P5L0fj9HcU1AAR/PyNp7u/GTSmCTJOVED9pZNg snXITMsEKPJv/sZC9/8SYKXSy5Nmhf0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:39 2025 by rpki-client