$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa File: 119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa (raw, json) Hash identifier: kW4UIXn8YHdCaKiPFsw/YsmMlkkBRZBWh9cVLvQys4E= Subject key identifier: 46:56:00:CA:E8:DB:57:48:E4:89:24:30:8B:74:13:B9:E9:31:26:63 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5141B6EE8DAD754E61C6D900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 40934 IP address blocks: 209.52.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:b6:ee:8d:ad:75:4e:61:c6:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=eadaa9eb-f04b-48e8-91e7-1c9112d7f49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:30:06:b6:96:c7:13:9f:6f:e7:db:e2:31: 36:7a:3c:b3:e5:17:6b:0b:8c:39:35:61:48:06:07: 5d:87:2f:8c:6d:74:b2:75:9c:d3:e8:35:9a:be:65: af:20:28:4b:56:c0:ac:31:14:c5:9e:21:0b:c5:a6: 93:c4:08:de:00:6c:1b:40:3b:18:7e:de:8c:0f:b5: 34:03:6f:21:ee:4a:32:dd:75:d2:f6:40:a3:ee:e8: 39:71:df:b6:4f:46:bd:24:76:ba:dc:e0:26:3b:56: f6:d5:a2:1b:a7:fc:cb:6c:5e:72:b1:6e:de:97:22: 7e:e9:ad:f0:dc:10:88:5d:22:04:9d:ae:17:0a:a7: b4:2c:53:6f:7d:0f:38:91:95:29:d6:77:c4:e6:f9: 5a:0e:5d:8f:c6:01:a5:6f:77:17:d5:8e:b0:ce:d9: 54:94:9b:e1:5e:05:8f:fe:3e:24:e2:8d:33:6b:eb: c8:e7:cd:59:c3:40:d2:c7:b1:28:af:ab:5b:a4:f5: ac:c2:94:13:7c:9f:84:e0:08:82:70:3b:e6:1e:61: 44:da:32:06:22:fb:7c:0f:63:1e:f3:85:4d:e1:21: 3d:b2:95:2b:a9:aa:eb:cc:f7:9d:64:cc:d0:79:19: 74:1e:b1:f6:5b:bb:23:28:f1:f9:25:02:db:54:21: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:56:00:CA:E8:DB:57:48:E4:89:24:30:8B:74:13:B9:E9:31:26:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:60:8d:66:9c:d2:b2:bb:d1:e3:0a:27:ba:d7:a7:35:95:11: fe:68:aa:91:59:20:f6:ec:9e:9f:7e:8b:df:c5:7f:2d:72:d6: 27:70:bc:08:09:4e:35:51:28:b3:55:2e:b1:80:3e:a4:6e:45: 9d:b2:12:df:de:c2:66:0a:b3:fb:5b:3e:eb:64:fa:62:79:0f: fa:18:b7:10:6c:01:2b:92:3a:e5:d1:ed:a2:4e:27:de:a5:82: b8:7c:69:65:95:97:94:9a:82:08:fa:a6:60:2f:90:da:aa:27: 1b:95:39:89:81:02:d3:9c:8f:57:85:2f:f9:82:1e:9c:0f:71: 30:93:fe:8f:6d:f9:d4:a9:59:3d:32:7b:33:26:d5:d7:30:21: 51:9c:24:34:ea:f0:49:02:3f:76:fa:75:08:91:90:42:7f:df: e4:28:87:03:78:14:26:c4:04:3e:dd:8a:bb:dd:92:21:fc:3d: 43:8a:20:bd:ad:87:99:98:6d:05:db:c7:06:26:fb:93:24:1c: 1a:be:d9:77:24:6f:6c:ba:c7:a7:94:50:52:97:48:85:94:58: 50:03:39:b3:83:fa:6f:4a:80:b2:13:91:ad:47:6a:70:13:1d: 2c:d6:1a:99:af:3d:8f:03:37:e4:08:24:69:a6:58:8e:64:b2: 38:72:73:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbbuja11TmHG2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZWFkYWE5ZWItZjA0Yi00OGU4LTkxZTctMWM5MTEyZDdmNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcAwBraWxxOfb+fb4jE2ejyz5RdrC4w5NWFI Bgddhy+MbXSydZzT6DWavmWvIChLVsCsMRTFniELxaaTxAjeAGwbQDsYft6MD7U0 A28h7koy3XXS9kCj7ug5cd+2T0a9JHa63OAmO1b21aIbp/zLbF5ysW7elyJ+6a3w 3BCIXSIEna4XCqe0LFNvfQ84kZUp1nfE5vlaDl2PxgGlb3cX1Y6wztlUlJvhXgWP /j4k4o0za+vI581Zw0DSx7Eor6tbpPWswpQTfJ+E4AiCcDvmHmFE2jIGIvt8D2Me 84VN4SE9spUrqarrzPedZMzQeRl0HrH2W7sjKPH5JQLbVCGJCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZWAMro21dI5IkkMIt0E7npMSZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTE5ZjlhYmYtZjZiZi0z NWI1LWEwMTEtNzE1YWEwYzk3ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFgjWac0rK70eMKJ7rXpzWVEf5oqpFZIPbsnp9+i9/Ffy1y1idwvAgJ TjVRKLNVLrGAPqRuRZ2yEt/ewmYKs/tbPutk+mJ5D/oYtxBsASuSOuXR7aJOJ96l grh8aWWVl5Saggj6pmAvkNqqJxuVOYmBAtOcj1eFL/mCHpwPcTCT/o9t+dSpWT0y ezMm1dcwIVGcJDTq8EkCP3b6dQiRkEJ/3+QohwN4FCbEBD7dirvdkiH8PUOKIL2t h5mYbQXbxwYm+5MkHBq+2Xckb2y6x6eUUFKXSIWUWFADObOD+m9KgLITka1HanAT HSzWGpmvPY8DN+QIJGmmWI5ksjhyc9Q= -----END CERTIFICATE-----Generated at Sun Oct 19 20:19:36 2025 by rpki-client