$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa File: 1454b60f-a984-384e-8d51-13e18a917820.roa (raw, json) Hash identifier: uGKujlohbkAA4UCTxQmNPlv1nb3ezh4DaC7dfpv5dO0= Subject key identifier: DA:3A:FE:AE:DA:64:52:CF:FD:55:D9:DA:5D:65:88:C9:D7:77:B2:F3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4976A738E61D62CF4AA9D800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19341 IP address blocks: 209.20.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:a7:38:e6:1d:62:cf:4a:a9:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a9ccde2b-866d-4965-90b0-b7ef781b7b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:e2:8b:23:36:c4:c4:46:7d:66:74:b1:af: c0:70:39:86:0a:99:4e:10:46:3e:19:a8:35:ab:b2: 48:49:12:d0:fe:00:fa:c1:bb:64:76:8d:8a:9f:e3: 1f:d2:de:20:39:2d:f3:83:7d:68:31:7a:7a:99:f1: 8f:35:00:33:ae:17:f0:fa:70:ee:7e:74:e7:b2:7f: 05:29:15:9f:31:69:76:b3:4d:44:86:06:b6:57:5d: 86:8f:a2:50:4e:04:30:cd:cf:9e:5e:84:ea:87:22: 0f:2d:03:d2:23:8c:e4:2e:30:d4:52:05:04:0e:27: 9a:f8:2f:bb:3b:0d:73:a2:bb:fc:06:6e:8a:90:1f: 2b:93:f9:b4:de:51:5d:cd:a6:af:42:26:a2:61:e7: 60:03:9a:70:ee:09:1b:79:db:20:d6:4c:4f:bc:1c: 76:ea:71:b3:81:62:72:52:2d:65:6e:9e:b4:7e:6f: ee:90:39:5a:90:85:72:79:a7:64:13:57:37:15:f5: 9e:9e:f3:6e:14:10:b8:1b:80:43:95:87:47:91:64: 09:5b:54:be:a2:57:23:8a:91:18:cd:02:3d:a7:f2: 2b:01:fc:51:02:cb:ca:84:1e:88:3e:9d:df:f8:c0: 96:95:94:b1:3c:a3:d3:e1:9a:16:da:45:a1:e3:b8: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3A:FE:AE:DA:64:52:CF:FD:55:D9:DA:5D:65:88:C9:D7:77:B2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e6:e6:29:d1:c3:cb:69:ee:6e:52:ab:b9:f6:df:60:ae:fa: ef:f2:b1:f3:e7:12:29:38:47:67:4d:47:8a:5e:4f:75:51:66: ae:81:1e:57:e8:1c:d2:00:59:67:1c:bd:0f:ca:53:4b:2a:1a: 55:e4:ab:08:9d:9a:f5:9f:9e:4a:1c:18:18:b6:2d:de:34:db: ca:b2:a5:7c:0c:ae:2c:7d:7d:a6:11:c5:9a:23:05:78:80:f3: f9:94:ff:64:f6:cf:cd:9f:9c:c3:63:19:18:02:1c:84:57:ad: 8e:d0:e7:ec:7f:0c:ef:83:18:5d:2f:9a:02:c1:fb:aa:52:44: ad:55:52:79:df:3f:9d:b9:4a:33:79:03:b9:46:cc:7e:63:7a: 20:aa:a0:ec:e7:5c:b3:a9:43:8a:3d:41:80:56:fd:e5:18:7f: 5c:8b:88:be:10:56:fe:32:f3:6c:88:81:92:17:42:ee:ac:e3: 07:47:dc:7a:fd:f3:60:d4:e6:a5:1f:df:55:3f:35:01:d8:68: a2:3a:8a:32:47:50:5b:df:c9:cf:16:d7:28:88:40:a4:e4:c3: fb:bd:12:13:a7:0a:ff:de:44:df:a4:f8:10:69:07:10:a3:21: 1c:d8:e2:38:8d:93:ea:71:8d:b1:7a:ff:22:3c:21:a7:68:71: 7e:c9:ff:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdqc45h1iz0qp2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTljY2RlMmItODY2ZC00OTY1LTkwYjAtYjdlZjc4MWI3YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLziiyM2xMRGfWZ0sa/AcDmGCplOEEY+Gag1 q7JISRLQ/gD6wbtkdo2Kn+Mf0t4gOS3zg31oMXp6mfGPNQAzrhfw+nDufnTnsn8F KRWfMWl2s01Ehga2V12Gj6JQTgQwzc+eXoTqhyIPLQPSI4zkLjDUUgUEDiea+C+7 Ow1zorv8Bm6KkB8rk/m03lFdzaavQiaiYedgA5pw7gkbedsg1kxPvBx26nGzgWJy Ui1lbp60fm/ukDlakIVyeadkE1c3FfWenvNuFBC4G4BDlYdHkWQJW1S+olcjipEY zQI9p/IrAfxRAsvKhB6IPp3f+MCWlZSxPKPT4ZoW2kWh47i5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo6/q7aZFLP/VXZ2l1liMnXd7LzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTQ1NGI2MGYtYTk4NC0z ODRlLThkNTEtMTNlMThhOTE3ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjm5inRw8tp7m5Sq7n232Cu+u/ysfPnEik4R2dNR4peT3VRZq6BHlfo HNIAWWccvQ/KU0sqGlXkqwidmvWfnkocGBi2Ld4028qypXwMrix9faYRxZojBXiA 8/mU/2T2z82fnMNjGRgCHIRXrY7Q5+x/DO+DGF0vmgLB+6pSRK1VUnnfP525SjN5 A7lGzH5jeiCqoOznXLOpQ4o9QYBW/eUYf1yLiL4QVv4y82yIgZIXQu6s4wdH3Hr9 82DU5qUf31U/NQHYaKI6ijJHUFvfyc8W1yiIQKTkw/u9EhOnCv/eRN+k+BBpBxCj IRzY4jiNk+pxjbF6/yI8IadocX7J/+o= -----END CERTIFICATE-----Generated at Sat Sep 26 15:32:24 2026 by rpki-client