$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa File: 234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa (raw, json) Hash identifier: OQKdtIBcZgd0Hw3Qrl0SsZkZiUhb39fbx1cYQlUWGLY= Subject key identifier: FD:89:73:C0:A8:5D:A4:CB:1C:9E:58:70:88:CE:0E:8B:A0:D4:90:20 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C4EBBD8F7D7AFC439B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.52.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c4:eb:bd:8f:7d:7a:fc:43:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61f74cb1-a458-411c-97c6-90dfcc0aa5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6a:6a:03:22:52:3f:c5:f1:88:e6:6d:2e:13: 33:51:de:82:2b:74:3d:29:28:05:65:5c:aa:a8:5d: dc:52:7b:ed:37:39:90:96:5c:99:58:70:30:88:f5: 6f:b7:4d:49:a1:00:3c:10:c1:9e:47:e2:94:d6:13: a1:de:2a:b9:46:0b:50:04:d5:df:06:46:ed:cf:fe: 56:95:0e:37:28:a8:f7:6a:df:e3:79:62:75:41:60: 49:9b:1f:34:fa:58:80:39:00:cf:40:76:c9:7b:46: f3:d3:51:f8:b9:16:59:51:b5:f5:c1:67:65:c5:41: 1c:93:0f:e4:89:6c:e5:f7:ea:d4:83:f4:81:6f:fb: 57:01:27:30:ee:21:95:b5:2d:10:3f:96:e9:8a:2e: 05:65:1c:f6:6f:22:e5:f6:b2:23:92:83:52:8f:49: 0b:d4:17:13:a1:e0:22:e5:2b:86:48:bd:40:68:c1: 43:44:05:47:a8:59:85:85:9b:79:b0:f7:6d:c6:63: 31:0e:b5:5f:22:cc:6a:64:2d:d4:c9:4e:45:51:b5: b3:a9:d0:e7:50:c4:f1:13:85:27:43:34:03:23:c8: 26:bc:c7:34:a0:34:df:de:a3:c4:18:bd:22:50:2f: bc:bc:f6:36:4d:3b:81:5c:d2:0e:de:fa:ff:5e:6a: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:73:C0:A8:5D:A4:CB:1C:9E:58:70:88:CE:0E:8B:A0:D4:90:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bb:fc:50:fb:e0:cd:07:3e:92:f6:28:d5:e4:04:b4:50:79: 52:47:7f:1b:4e:ad:d0:59:c6:09:52:82:7c:76:a2:e1:18:25: c6:c3:06:83:4f:c1:a5:0e:de:82:16:57:30:fe:c6:b0:4a:ce: 26:38:33:e3:5b:92:0b:d2:0a:76:11:43:d8:47:a7:9c:0d:e6: 04:55:82:c2:43:97:f2:cc:05:32:36:88:5c:23:c0:41:64:ec: 75:5c:4f:9c:6c:2f:f0:63:66:d9:7c:41:93:35:1a:48:c3:61: aa:1c:12:47:db:5c:bb:6f:aa:dc:3b:dd:00:55:c2:f9:45:87: 20:01:bc:ec:7d:a0:d2:27:46:06:13:8c:25:f8:de:ae:73:92: fe:db:bb:0c:a3:27:f9:7f:53:c0:6c:9e:d8:55:7a:51:0b:f4: 2f:12:74:cd:85:63:c6:04:87:e9:44:2e:eb:75:33:88:b2:ed: 93:8c:97:96:17:a3:13:d9:1f:c0:53:e6:c2:00:4a:c3:d1:79: 16:54:9f:22:78:95:d0:ee:e0:40:a2:43:39:3b:37:a7:c0:9c: cd:d4:0e:0a:9c:d0:ea:9c:bb:30:9f:b8:eb:b0:3c:14:2a:64: b1:92:3a:27:58:ce:a0:54:b4:0b:b2:f0:54:de:91:0a:f0:ca: fe:36:61:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8TrvY99evxDm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjFmNzRjYjEtYTQ1OC00MTFjLTk3YzYtOTBkZmNjMGFhNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGpqAyJSP8XxiOZtLhMzUd6CK3Q9KSgFZVyq qF3cUnvtNzmQllyZWHAwiPVvt01JoQA8EMGeR+KU1hOh3iq5RgtQBNXfBkbtz/5W lQ43KKj3at/jeWJ1QWBJmx80+liAOQDPQHbJe0bz01H4uRZZUbX1wWdlxUEckw/k iWzl9+rUg/SBb/tXAScw7iGVtS0QP5bpii4FZRz2byLl9rIjkoNSj0kL1BcToeAi 5SuGSL1AaMFDRAVHqFmFhZt5sPdtxmMxDrVfIsxqZC3UyU5FUbWzqdDnUMTxE4Un QzQDI8gmvMc0oDTf3qPEGL0iUC+8vPY2TTuBXNIO3vr/XmqOCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2Jc8CoXaTLHJ5YcIjODoug1JAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0YTRkN2MtMTZlOC0z N2Y0LWFjMDYtMWRkY2M0NTI4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS7/FD74M0HPpL2KNXkBLRQeVJHfxtOrdBZxglSgnx2ouEYJcbDBoNP waUO3oIWVzD+xrBKziY4M+NbkgvSCnYRQ9hHp5wN5gRVgsJDl/LMBTI2iFwjwEFk 7HVcT5xsL/BjZtl8QZM1GkjDYaocEkfbXLtvqtw73QBVwvlFhyABvOx9oNInRgYT jCX43q5zkv7buwyjJ/l/U8BsnthVelEL9C8SdM2FY8YEh+lELut1M4iy7ZOMl5YX oxPZH8BT5sIASsPReRZUnyJ4ldDu4ECiQzk7N6fAnM3UDgqc0OqcuzCfuOuwPBQq ZLGSOidYzqBUtAuy8FTekQrwyv42YQg= -----END CERTIFICATE-----Generated at Sun Oct 11 10:25:38 2026 by rpki-client