$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa File: 1791e969-7c08-3e78-95e8-9199c2d5752a.roa (raw, json) Hash identifier: p39OfdTbrZR/LcVY+rrNTK/t/gAdE/Eg98o+3tGUz18= Subject key identifier: 64:17:4D:99:A6:4F:8B:32:45:06:E3:00:0C:56:4D:C2:9F:79:4A:9B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FB7FCD9A77CD60AB7C8C Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7861 IP address blocks: 209.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fb:7f:cd:9a:77:cd:60:ab:7c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=60bbd7e5-0eec-47bd-beb2-84cad6f7f4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e4:f6:05:fd:11:6e:e6:fe:a4:a1:11:0c:64: d9:df:3a:59:5c:f8:d8:e1:e8:ac:49:b2:2f:89:59: a4:d9:43:1f:61:0e:95:d0:8c:d9:7c:f3:14:42:bf: dd:f9:7e:81:75:f7:89:52:51:00:7d:38:6a:4c:9b: 5b:6e:99:d8:e1:ca:c2:ba:7e:80:92:51:a6:82:48: b3:2d:bb:12:e1:e2:0b:77:50:4d:c8:7c:cb:63:cd: a6:38:c2:5c:dd:9f:b9:03:d7:14:ba:44:ee:6e:92: 82:fe:c4:49:e9:fa:b2:6f:e8:2f:90:5a:6d:0f:b7: e4:61:bd:86:68:f5:85:b6:be:e2:af:5a:4d:4e:8b: c0:5d:3b:06:dc:21:62:f5:36:01:ff:30:16:30:27: 09:fd:f2:e8:35:03:8d:d4:57:aa:2e:80:9b:1b:e6: 02:37:7d:6d:8c:dd:5f:42:b5:c4:76:e1:f3:ec:e0: f7:01:74:6d:ed:72:51:ae:af:a4:ed:57:73:15:5f: a4:75:ab:7d:e3:a6:7b:d2:2e:6c:de:b3:dc:56:cc: 51:3a:53:d9:31:00:75:d6:27:2f:90:b9:d7:84:cb: e2:c5:be:54:08:75:73:a8:66:a9:ba:fe:54:56:f0: 51:22:70:7b:e3:a3:3a:b0:52:cb:4d:71:a2:07:11: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:17:4D:99:A6:4F:8B:32:45:06:E3:00:0C:56:4D:C2:9F:79:4A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1791e969-7c08-3e78-95e8-9199c2d5752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5c:dd:8f:fa:f7:ce:50:87:25:9f:16:b4:4e:ab:b4:52:5f: 8c:bb:bc:e3:cd:28:21:6f:08:66:91:84:cc:7a:74:42:57:17: d0:78:e1:11:8a:ae:c8:e3:c6:bf:f8:1a:52:32:6a:9a:d4:e4: d1:5a:98:e3:7c:ca:07:6a:e4:ea:96:a3:d8:70:63:5e:17:00: bd:31:08:12:fb:95:c5:79:39:11:32:ea:b2:37:8c:af:87:e6: 57:95:54:e1:9d:cc:19:ef:c8:68:f0:84:c3:45:11:82:18:13: 84:bc:4b:2b:d5:5f:79:96:62:4a:12:61:4d:df:b5:26:65:ea: 92:a5:bc:d7:dd:35:53:f0:c2:2b:2f:44:c3:5a:06:ea:9d:cf: b9:c5:f9:e1:77:b0:a9:55:fb:4e:3b:a3:7b:57:bc:71:92:1d: 99:7a:fd:d7:f5:d1:7c:29:0b:9c:f6:6e:c1:92:2a:f6:79:f6: 34:bf:64:28:4e:bf:d1:34:4e:96:b5:2d:79:4e:31:52:ca:f8: c2:2d:4f:ba:7f:7c:59:87:8b:e2:9e:63:e9:d2:46:95:f3:1d: 00:3a:b8:5c:f1:0e:fb:9b:2e:b5:fb:8e:84:9c:3e:56:2e:ef: 7b:10:9c:76:92:31:56:6b:f4:cb:90:0d:e0:bd:a0:2f:80:73: da:a0:43:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/t/zZp3zWCrfIwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjBiYmQ3ZTUtMGVlYy00N2JkLWJlYjItODRjYWQ2ZjdmNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeT2Bf0Rbub+pKERDGTZ3zpZXPjY4eisSbIv iVmk2UMfYQ6V0IzZfPMUQr/d+X6BdfeJUlEAfThqTJtbbpnY4crCun6AklGmgkiz LbsS4eILd1BNyHzLY82mOMJc3Z+5A9cUukTubpKC/sRJ6fqyb+gvkFptD7fkYb2G aPWFtr7ir1pNTovAXTsG3CFi9TYB/zAWMCcJ/fLoNQON1FeqLoCbG+YCN31tjN1f QrXEduHz7OD3AXRt7XJRrq+k7VdzFV+kdat946Z70i5s3rPcVsxROlPZMQB11icv kLnXhMvixb5UCHVzqGapuv5UVvBRInB746M6sFLLTXGiBxE7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQXTZmmT4syRQbjAAxWTcKfeUqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTc5MWU5NjktN2MwOC0z ZTc4LTk1ZTgtOTE5OWMyZDU3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtc3Y/6985QhyWfFrROq7RSX4y7vOPNKCFvCGaRhMx6dEJXF9B44RGK rsjjxr/4GlIyaprU5NFamON8ygdq5OqWo9hwY14XAL0xCBL7lcV5OREy6rI3jK+H 5leVVOGdzBnvyGjwhMNFEYIYE4S8SyvVX3mWYkoSYU3ftSZl6pKlvNfdNVPwwisv RMNaBuqdz7nF+eF3sKlV+047o3tXvHGSHZl6/df10XwpC5z2bsGSKvZ59jS/ZChO v9E0Tpa1LXlOMVLK+MItT7p/fFmHi+KeY+nSRpXzHQA6uFzxDvubLrX7joScPlYu 73sQnHaSMVZr9MuQDeC9oC+Ac9qgQ7k= -----END CERTIFICATE-----Generated at Thu Oct 8 13:23:46 2026 by rpki-client