$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa File: 2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa (raw, json) Hash identifier: fkamT2XZ8u9DQT3PzZuQgwq+Me19+cT7ryjRCNzHxjo= Subject key identifier: 15:0C:BC:C1:B0:8A:88:51:5C:40:9B:0E:A0:74:6A:7B:05:BD:A5:52 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D4AC79B789F062C9D980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.171.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d4:ac:79:b7:89:f0:62:c9:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=91e2d4e3-74bc-4186-8abd-773961db9214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:ee:7b:cf:5f:e4:a2:20:5f:a4:b4:9e:4c: c8:c8:f3:45:94:6f:4d:fb:39:38:33:f2:16:ad:a6: 56:c6:98:78:6f:e8:18:1f:d8:24:7a:c0:27:f1:0c: 55:1f:ac:5e:c3:ca:7f:23:a3:bb:c3:1e:a3:9a:ba: e5:6a:d2:c5:9b:b4:ed:ce:01:fd:e1:21:19:90:9f: 43:2d:82:d8:89:a3:3d:62:ad:a5:e7:83:6e:cc:43: d9:71:22:2e:93:87:10:36:dd:43:1e:a0:57:fb:e4: c3:7b:12:b1:44:03:11:8b:fd:18:67:da:63:a3:9b: fc:ca:3a:41:ba:7c:42:9c:86:3a:ca:10:ef:c7:6e: 32:a5:4f:f9:fd:13:00:13:f0:ff:c5:a4:31:5e:14: 79:41:0b:79:72:d3:89:c4:3b:19:78:8d:17:ff:7b: 91:d7:03:37:11:09:f4:d3:72:a8:9c:b0:cb:e4:10: bc:41:47:24:56:67:c8:f0:e8:26:01:be:79:e2:46: 31:65:f2:d7:4e:fb:7b:af:79:fb:9e:0c:f3:c3:24: 8f:c5:a2:a7:36:d5:3c:33:68:58:45:42:e3:b1:96: de:3c:ef:d5:97:cb:41:45:43:95:9e:ac:4e:d9:08: 3e:5d:c1:02:cb:ec:63:ab:dc:f7:bc:15:93:9a:7d: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0C:BC:C1:B0:8A:88:51:5C:40:9B:0E:A0:74:6A:7B:05:BD:A5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2c7c68e3-af0b-3c06-81b1-fb16b7a6aade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:08:7a:64:9a:ea:3d:c7:29:61:ba:57:5f:41:57:7d:15:de: ae:0b:a7:73:de:b2:7b:91:a3:0d:04:aa:57:78:97:a6:a4:a9: 23:fb:36:15:b5:9f:cf:43:70:93:38:35:48:18:05:5b:15:d4: c3:0e:21:a8:ef:d7:b7:ef:79:de:7d:49:6f:a7:ca:57:d4:51: b4:7f:32:95:04:de:30:0c:7b:7e:f8:b4:8c:ef:1b:21:4d:ba: ef:7b:6e:4f:ab:7f:ce:7c:83:7f:e6:6d:21:c6:66:97:33:93: 3a:d1:7d:93:d4:89:fb:9d:92:ff:b6:53:53:ec:fe:2a:f6:50: 58:0b:77:13:e3:3c:24:20:b2:64:6c:08:5a:c3:a2:2a:c5:99: 92:51:84:0c:f0:1e:b1:55:48:7d:bb:0b:56:47:8c:26:1a:d9: fd:4f:9f:8d:4d:a3:15:5f:ab:dd:67:bc:89:a7:d9:bf:a9:97: ac:e0:d6:f9:64:de:0d:4d:b0:0b:2a:ee:f7:23:1f:de:cf:75: 9f:90:8b:05:5a:df:bf:fd:3e:a6:05:16:6b:51:93:2c:70:3c: 79:e6:8f:b7:00:77:9b:41:ef:52:f5:68:8f:e3:c1:a1:2d:df: d7:79:a4:ea:6b:f7:cd:c7:4e:f6:74:ec:a4:3d:4a:5d:59:9c: 05:91:f6:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdSsebeJ8GLJ2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk OTFlMmQ0ZTMtNzRiYy00MTg2LThhYmQtNzczOTYxZGI5MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvLue89f5KIgX6S0nkzIyPNFlG9N+zk4M/IW raZWxph4b+gYH9gkesAn8QxVH6xew8p/I6O7wx6jmrrlatLFm7TtzgH94SEZkJ9D LYLYiaM9Yq2l54NuzEPZcSIuk4cQNt1DHqBX++TDexKxRAMRi/0YZ9pjo5v8yjpB unxCnIY6yhDvx24ypU/5/RMAE/D/xaQxXhR5QQt5ctOJxDsZeI0X/3uR1wM3EQn0 03KonLDL5BC8QUckVmfI8OgmAb554kYxZfLXTvt7r3n7ngzzwySPxaKnNtU8M2hY RULjsZbePO/Vl8tBRUOVnqxO2Qg+XcECy+xjq9z3vBWTmn0KRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUMvMGwiohRXECbDqB0ansFvaVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmM3YzY4ZTMtYWYwYi0z YzA2LTgxYjEtZmIxNmI3YTZhYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIIemSa6j3HKWG6V19BV30V3q4Lp3PesnuRow0Eqld4l6akqSP7NhW1 n89DcJM4NUgYBVsV1MMOIajv17fved59SW+nylfUUbR/MpUE3jAMe374tIzvGyFN uu97bk+rf858g3/mbSHGZpczkzrRfZPUifudkv+2U1Ps/ir2UFgLdxPjPCQgsmRs CFrDoirFmZJRhAzwHrFVSH27C1ZHjCYa2f1Pn41NoxVfq91nvImn2b+pl6zg1vlk 3g1NsAsq7vcjH97PdZ+QiwVa37/9PqYFFmtRkyxwPHnmj7cAd5tB71L1aI/jwaEt 39d5pOpr983HTvZ07KQ9Sl1ZnAWR9uM= -----END CERTIFICATE-----Generated at Mon Oct 20 01:15:40 2025 by rpki-client