$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/62b5a6c7-bb38-38c8-ada8-f9fd7398bca0.roa File: 62b5a6c7-bb38-38c8-ada8-f9fd7398bca0.roa (raw, json) Hash identifier: lZob0fOO2Bsg8mFlWwslMBUs15Ac1ZNOWAKCx4NDqWo= Subject key identifier: B9:81:D8:D2:6F:9D:FC:9E:E9:1A:2D:DF:9E:48:19:3D:8A:42:CC:C3 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584BB2F82F09EC8D6D6298D67980 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/62b5a6c7-bb38-38c8-ada8-f9fd7398bca0.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 16570 IP address blocks: 204.138.49.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:2f:09:ec:8d:6d:62:98:d6:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=30ff38fd-2d9e-4d0b-9659-348051b897e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:8a:66:b4:75:e1:2f:7d:4d:f4:ad:17:e7: 99:4b:f9:52:3f:06:d0:5f:d7:06:81:35:cf:db:fe: 50:81:5c:12:be:3e:81:22:60:6e:85:e4:1b:ee:4c: f8:9e:83:7e:ee:cd:6c:58:42:d2:e1:d9:ff:42:19: ef:a2:c6:0d:06:09:5e:93:d6:2b:73:33:0d:87:88: 26:af:f1:60:42:2e:16:32:fd:7f:fb:94:f5:1c:d6: 46:04:39:7b:02:5c:4d:d5:7a:49:f7:cb:23:77:4b: 2c:d7:2e:fa:cf:23:cf:24:b4:f7:97:6e:c3:42:ac: e7:76:0e:0b:0a:ae:a1:89:48:ce:4f:0b:94:a2:37: f0:1c:a8:cd:ee:3b:2a:16:7f:64:fb:ea:7c:1b:43: 8c:2d:3c:f9:ba:76:17:dc:74:70:48:10:a1:a7:31: ea:2c:a8:ce:53:86:7a:1d:24:7c:76:1e:64:c7:8f: 57:a8:5c:e4:46:e5:e6:d0:f6:27:1e:6a:32:ad:1e: 4e:10:08:73:27:19:89:9a:40:ea:96:83:14:aa:7d: 76:84:96:37:d9:cb:bf:ac:c4:81:50:fe:d8:5d:9c: 82:1d:17:21:e9:e1:ed:f5:f9:93:09:77:05:0d:f8: 0d:40:1c:ad:f6:d2:46:51:c0:3a:2d:43:71:66:7f: 9f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:81:D8:D2:6F:9D:FC:9E:E9:1A:2D:DF:9E:48:19:3D:8A:42:CC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/62b5a6c7-bb38-38c8-ada8-f9fd7398bca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 204.138.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:57:b5:a5:cf:80:6a:9d:d0:c6:dd:19:d2:a6:24:47:a0:01: dc:96:95:e7:c0:9a:cf:41:e9:f1:54:75:e8:22:98:51:7a:16: c3:b4:bd:d1:83:eb:99:9c:93:56:db:39:a8:07:68:04:51:6d: 6d:38:0f:b2:87:15:f1:9a:eb:00:a8:f4:46:35:02:86:36:6d: 0e:b4:7c:f1:0e:a7:14:73:95:9a:16:5b:50:ba:4c:48:6e:ee: 71:03:9f:f0:f6:51:dc:e5:cf:f8:06:6b:f5:fb:57:ee:8c:3e: 3b:54:1c:c1:80:aa:44:66:7c:88:34:9a:92:54:f4:41:cd:9d: cf:76:7b:4f:09:b0:d6:01:6c:01:bc:f7:f7:d5:a4:47:08:8e: 7e:4a:38:3b:1b:68:e0:10:57:74:05:8e:45:61:82:db:42:ef: 75:48:11:ff:e8:ac:6d:ec:e3:75:9c:87:46:fb:40:fc:d1:67: 4a:6c:fc:15:42:a8:71:6d:b9:74:6f:4b:f9:37:38:a1:52:d4: 5d:53:bc:73:4b:4a:38:8a:f3:31:d2:f1:7a:14:52:5f:fb:fe: f0:31:a3:ba:14:05:4c:ff:23:a7:79:14:e8:87:ef:ba:60:83: 29:26:45:c0:5d:2b:6b:06:d4:fc:e9:87:7e:65:86:76:fa:38: 10:b7:b8:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+C8J7I1tYpjWeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MzBmZjM4ZmQtMmQ5ZS00ZDBiLTk2NTktMzQ4MDUxYjg5N2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL+KZrR14S99TfStF+eZS/lSPwbQX9cGgTXP 2/5QgVwSvj6BImBuheQb7kz4noN+7s1sWELS4dn/QhnvosYNBglek9YrczMNh4gm r/FgQi4WMv1/+5T1HNZGBDl7AlxN1XpJ98sjd0ss1y76zyPPJLT3l27DQqzndg4L Cq6hiUjOTwuUojfwHKjN7jsqFn9k++p8G0OMLTz5unYX3HRwSBChpzHqLKjOU4Z6 HSR8dh5kx49XqFzkRuXm0PYnHmoyrR5OEAhzJxmJmkDqloMUqn12hJY32cu/rMSB UP7YXZyCHRch6eHt9fmTCXcFDfgNQByt9tJGUcA6LUNxZn+fPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmB2NJvnfye6Rot355IGT2KQszDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvNjJiNWE2YzctYmIzOC0z OGM4LWFkYTgtZjlmZDczOThiY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIoxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdXtaXPgGqd0MbdGdKmJEegAdyWlefAms9B6fFUdegimFF6FsO0vdGD 65mck1bbOagHaARRbW04D7KHFfGa6wCo9EY1AoY2bQ60fPEOpxRzlZoWW1C6TEhu 7nEDn/D2Udzlz/gGa/X7V+6MPjtUHMGAqkRmfIg0mpJU9EHNnc92e08JsNYBbAG8 9/fVpEcIjn5KODsbaOAQV3QFjkVhgttC73VIEf/orG3s43Wch0b7QPzRZ0ps/BVC qHFtuXRvS/k3OKFS1F1TvHNLSjiK8zHS8XoUUl/7/vAxo7oUBUz/I6d5FOiH77pg gykmRcBdK2sG1Pzph35lhnb6OBC3uJU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:19:05 2025 by rpki-client