$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa File: 2b8b31f3-1851-38cf-aec8-57909778d471.roa (raw, json) Hash identifier: SrgSBgF4EL+fA6J2yWFI8yOnHtqwwXJVCZYA2LN4hdY= Subject key identifier: EB:9D:74:41:01:8B:65:FF:0A:CE:2D:7E:D4:FF:C8:80:CF:FE:93:9E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B48E1B249983BCA5B6006A680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 25668 IP address blocks: 209.53.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b2:49:98:3b:ca:5b:60:06:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4d4dad61-948a-4e16-91b5-edd2ec526d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:32:69:79:8e:da:dc:ab:20:21:0a:22:eb:20: b8:0f:86:3b:20:6f:6d:29:e4:34:46:b7:e4:d9:30: 78:62:82:a2:f1:f1:e8:61:1b:d3:74:a5:33:40:94: 21:13:b9:bb:4e:73:f9:21:21:71:bd:87:d2:19:dd: 55:cf:43:7b:19:ce:3f:db:cf:86:9b:5e:2a:8d:66: 5a:f3:bc:ec:51:df:4c:49:8c:85:79:70:16:9c:2f: da:9d:6f:f8:a5:ca:2f:15:12:2a:99:f3:cd:d2:0e: 35:76:4e:c4:63:36:24:c1:a5:92:b3:c1:0c:45:1c: 16:73:a0:17:0f:2e:df:f5:09:4c:63:13:28:33:c7: cf:9a:ec:cb:67:02:c6:1e:1a:b6:09:c6:53:c9:1d: cd:7b:a7:cd:6e:13:dc:0b:5a:90:e9:ca:ff:2f:0e: 87:2f:6c:5b:80:60:c8:42:6e:0d:b2:67:84:72:79: 46:f4:4d:78:ea:61:a4:02:64:68:b5:b0:44:77:e3: c8:80:2a:5e:b5:82:b1:b6:9e:00:74:c1:84:8a:6a: a1:76:31:3d:55:4f:59:01:bd:dc:f5:4d:89:88:73: e2:32:0a:c9:9b:78:0c:2e:b5:c6:e2:5f:3f:99:f2: 6a:14:1e:b2:e3:91:c5:5f:dc:8c:1d:e2:aa:86:e9: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:74:41:01:8B:65:FF:0A:CE:2D:7E:D4:FF:C8:80:CF:FE:93:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b8b31f3-1851-38cf-aec8-57909778d471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:02:d3:cb:79:3f:e7:d4:5e:ff:9a:17:ee:3e:ff:16:29:98: fa:46:49:f5:5c:91:61:09:90:25:f3:b7:d8:00:2b:e6:31:f7: 00:1b:9c:ea:a0:7d:44:49:e3:51:d4:04:2e:7d:3d:d0:63:80: 5d:8f:28:27:c7:af:19:7f:0d:b0:21:e8:15:a3:69:79:77:34: c4:5c:5d:38:16:b5:1b:01:37:9a:f1:6a:6b:1b:f0:cd:c2:8b: 67:2b:c0:1b:12:45:e9:c0:db:7c:67:67:11:8b:45:53:b0:fd: f5:a4:7a:70:a9:c7:ce:6b:85:52:b0:aa:bc:bb:4e:5f:fa:d5: 86:4f:e2:2a:cb:07:b7:8f:da:ba:11:af:de:94:43:6f:cd:22: 29:01:ed:29:59:40:98:87:6c:5a:8b:ba:c3:2d:58:66:e5:5d: 3f:7f:df:e1:25:54:7f:d8:14:e4:07:08:b2:29:7b:8b:a1:f0: 44:65:9e:0c:a7:0f:b2:a6:f7:7e:37:50:28:c7:1f:40:9a:56: ad:fc:40:a1:e7:0a:36:79:46:7d:6e:24:3c:7a:39:25:65:c6: 50:ca:86:8b:3c:7d:3c:b9:e1:3a:fe:8d:10:7f:6e:fe:4c:92: 49:e0:01:1d:32:93:be:fb:9c:5e:d3:82:db:8c:35:39:38:40: 35:d0:43:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bJJmDvKW2AGpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGQ0ZGFkNjEtOTQ4YS00ZTE2LTkxYjUtZWRkMmVjNTI2ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzJpeY7a3KsgIQoi6yC4D4Y7IG9tKeQ0Rrfk 2TB4YoKi8fHoYRvTdKUzQJQhE7m7TnP5ISFxvYfSGd1Vz0N7Gc4/28+Gm14qjWZa 87zsUd9MSYyFeXAWnC/anW/4pcovFRIqmfPN0g41dk7EYzYkwaWSs8EMRRwWc6AX Dy7f9QlMYxMoM8fPmuzLZwLGHhq2CcZTyR3Ne6fNbhPcC1qQ6cr/Lw6HL2xbgGDI Qm4NsmeEcnlG9E146mGkAmRotbBEd+PIgCpetYKxtp4AdMGEimqhdjE9VU9ZAb3c 9U2JiHPiMgrJm3gMLrXG4l8/mfJqFB6y45HFX9yMHeKqhukpyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuddEEBi2X/Cs4tftT/yIDP/pOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmI4YjMxZjMtMTg1MS0z OGNmLWFlYzgtNTc5MDk3NzhkNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwC08t5P+fUXv+aF+4+/xYpmPpGSfVckWEJkCXzt9gAK+Yx9wAbnOqg fURJ41HUBC59PdBjgF2PKCfHrxl/DbAh6BWjaXl3NMRcXTgWtRsBN5rxamsb8M3C i2crwBsSRenA23xnZxGLRVOw/fWkenCpx85rhVKwqry7Tl/61YZP4irLB7eP2roR r96UQ2/NIikB7SlZQJiHbFqLusMtWGblXT9/3+ElVH/YFOQHCLIpe4uh8ERlngyn D7Km9343UCjHH0CaVq38QKHnCjZ5Rn1uJDx6OSVlxlDKhos8fTy54Tr+jRB/bv5M kkngAR0yk777nF7TgtuMNTk4QDXQQy4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:08 2025 by rpki-client