$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa File: 1791e969-7c08-3e78-95e8-9199c2d5752a.roa (raw, json) Hash identifier: Na6DXO2mCpAyXUu5KtJXb85gOhe9xlPvngK3BnduJOE= Subject key identifier: B5:E2:DB:46:04:69:90:B9:EF:74:EA:21:54:44:79:D4:BB:4B:C8:49 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73A1F8301EFFE2CDA1F00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 7861 IP address blocks: 209.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3a:1f:83:01:ef:fe:2c:da:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=63b07f68-b9cb-45c4-8e06-60907c04fe53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:f5:0a:c4:93:cf:a3:7e:76:e0:c0:eb:40: fc:e3:3e:37:c2:59:8f:5c:da:d7:f4:61:79:da:60: 42:01:a9:e5:0a:ac:f3:ee:5c:bb:84:60:b6:85:a9: 0b:1e:b1:55:00:ae:14:fb:6a:0c:e1:b8:6a:98:f6: 7d:72:12:67:71:d2:91:0e:81:5e:22:ed:c9:f0:7a: 95:5f:c8:d0:d2:65:f0:bd:b5:b7:1c:ee:8f:f2:d1: cf:45:bf:9d:ec:f4:a9:bf:9f:1c:4b:a6:d7:be:b3: 22:3b:1e:66:d2:0a:5c:92:44:e1:ab:fc:fa:b1:e0: 3e:83:6b:2c:99:ca:b2:0a:a8:a1:8a:95:15:50:4a: 87:e0:30:8e:2b:5a:be:fa:9d:7b:3f:21:07:ef:42: cd:78:97:81:3d:23:ca:df:c3:db:94:fb:c7:dd:4b: 56:96:71:49:20:47:4d:91:bc:e6:f4:ef:9a:c9:71: 6c:82:d4:5f:bc:c9:74:94:3d:a6:50:a2:a4:03:d5: f2:1a:b7:d6:65:bb:5c:23:09:d2:ee:34:2d:45:77: f3:d9:5e:2d:aa:19:98:f5:1c:04:88:d6:0f:45:e6: 2b:97:90:fd:68:e2:57:89:72:1f:8e:48:7d:e0:41: 10:b1:9a:82:1c:cb:c9:f2:b5:3a:d4:2f:e3:b3:66: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E2:DB:46:04:69:90:B9:EF:74:EA:21:54:44:79:D4:BB:4B:C8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:08:58:40:70:e3:8b:53:7b:14:a6:1e:1a:76:7f:f6:ad:82: ea:de:de:63:b9:d1:49:33:a9:ae:4f:c6:ed:59:fb:c3:37:97: 12:7c:ae:95:c7:a8:5d:0d:96:2e:64:ac:2b:90:c8:82:cb:07: 06:76:33:61:ae:25:23:70:fd:82:e1:0d:76:ef:cc:92:15:3d: 0e:e0:f9:4a:2a:3d:46:38:c0:6b:28:e5:99:a5:e9:83:1f:51: 4c:a4:27:cb:67:03:5e:49:7c:05:81:20:44:9e:e6:25:2c:14: a8:95:70:bf:10:73:9d:d1:06:1b:58:7f:e2:79:8a:67:3d:3c: 3f:ad:35:08:12:cf:e4:6f:ff:e6:37:0f:20:08:c3:88:f4:47: 2f:ae:3f:ac:0d:44:07:92:c5:8e:ab:ec:6c:a9:f3:f6:fd:cd: 84:c1:03:d5:68:04:89:d8:50:fd:50:b9:86:01:59:c3:c9:38: 6f:28:bd:41:f6:b5:d1:96:88:5f:c3:6f:cc:73:1c:1b:31:20: 90:3e:e0:96:68:ae:5d:cf:b4:1e:78:cf:06:df:3a:a3:dc:e3: 63:02:35:7b:59:dd:b6:f8:08:c8:44:8d:ba:9e:cc:42:ad:b4: 4a:8a:4d:45:9f:10:ec:23:45:46:0c:55:d7:ce:47:5a:bf:19: 4d:28:5c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpzofgwHv/izaHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NjNiMDdmNjgtYjljYi00NWM0LThlMDYtNjA5MDdjMDRmZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19v1CsSTz6N+duDA60D84z43wlmPXNrX9GF5 2mBCAanlCqzz7ly7hGC2hakLHrFVAK4U+2oM4bhqmPZ9chJncdKRDoFeIu3J8HqV X8jQ0mXwvbW3HO6P8tHPRb+d7PSpv58cS6bXvrMiOx5m0gpckkThq/z6seA+g2ss mcqyCqihipUVUEqH4DCOK1q++p17PyEH70LNeJeBPSPK38PblPvH3UtWlnFJIEdN kbzm9O+ayXFsgtRfvMl0lD2mUKKkA9XyGrfWZbtcIwnS7jQtRXfz2V4tqhmY9RwE iNYPReYrl5D9aOJXiXIfjkh94EEQsZqCHMvJ8rU61C/js2ZjcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXi20YEaZC573TqIVREedS7S8hJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTc5MWU5NjktN2MwOC0z ZTc4LTk1ZTgtOTE5OWMyZDU3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4IWEBw44tTexSmHhp2f/atgure3mO50Ukzqa5Pxu1Z+8M3lxJ8rpXH qF0Nli5krCuQyILLBwZ2M2GuJSNw/YLhDXbvzJIVPQ7g+UoqPUY4wGso5Zml6YMf UUykJ8tnA15JfAWBIESe5iUsFKiVcL8Qc53RBhtYf+J5imc9PD+tNQgSz+Rv/+Y3 DyAIw4j0Ry+uP6wNRAeSxY6r7Gyp8/b9zYTBA9VoBInYUP1QuYYBWcPJOG8ovUH2 tdGWiF/Db8xzHBsxIJA+4JZorl3PtB54zwbfOqPc42MCNXtZ3bb4CMhEjbqezEKt tEqKTUWfEOwjRUYMVdfOR1q/GU0oXG8= -----END CERTIFICATE-----Generated at Sun Oct 19 22:36:00 2025 by rpki-client