$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa File: 31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa (raw, json) Hash identifier: EIgZuzg9iwDdvR0EPwZZhRn8/89FyRRVsAmtWMvvzr0= Subject key identifier: 45:B8:4E:94:06:FC:6E:66:AC:DD:C2:3F:D7:87:56:FE:77:F0:9B:B5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73A0B6B3B541826256D40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 7861 IP address blocks: 209.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3a:0b:6b:3b:54:18:26:25:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=de018574-9605-40ff-8c7d-d6b4deedf1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:ca:aa:b5:69:fd:5a:17:61:51:8d:a6:e4: 9f:aa:d3:ea:7b:1b:4c:f5:90:d8:5f:02:fc:27:e4: d0:82:83:f3:38:ed:f5:1e:69:12:e7:cf:30:4f:8e: 58:91:17:49:2a:b9:34:ae:9b:90:1e:98:9a:c9:7d: 62:06:f3:e7:1b:89:7f:48:ae:44:6b:cc:23:8e:1e: de:33:5f:33:f9:8c:d7:50:84:fe:92:7e:9c:be:1e: 12:44:2d:06:f2:86:bd:bc:78:5f:0f:85:27:c4:54: c3:bf:3e:0c:c9:f3:86:dc:a3:ea:6f:64:41:17:67: 50:0e:02:10:da:a6:73:88:43:45:dd:40:72:36:a0: 4b:c0:05:84:2e:29:2f:a3:14:c9:e0:0f:e6:e2:70: 57:9d:03:3a:e6:86:27:69:93:9d:07:26:20:af:e5: 76:eb:de:61:ad:34:97:46:3f:ff:e0:d9:d5:af:6a: e5:8a:8c:15:ff:be:05:2f:db:b3:7a:08:55:dd:88: f0:23:fe:da:89:64:ea:9a:6a:14:eb:62:eb:06:a7: 3f:50:6b:18:87:5a:b0:0d:7d:d0:82:99:19:78:ac: cf:be:3e:27:9e:ee:0a:16:6f:5a:b0:03:a9:cb:c8: c3:a3:a0:be:b4:bb:fd:20:ba:4e:af:80:49:9f:03: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B8:4E:94:06:FC:6E:66:AC:DD:C2:3F:D7:87:56:FE:77:F0:9B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a1:03:d3:3f:f0:13:76:85:81:5c:d4:d6:e2:b6:09:59:27: f6:26:46:5b:79:84:0d:b6:be:79:67:5e:ea:3f:21:7d:78:04: 9d:a0:5a:34:e9:24:78:ad:07:e6:36:c6:75:b6:ec:04:ca:fd: 0c:fa:6e:96:a3:a3:f7:be:4c:60:fa:60:3d:56:a7:4b:7a:3c: fe:cf:6c:e6:4a:b6:ba:27:a8:de:b9:df:a8:eb:c7:d4:d6:fe: 85:02:cd:db:8e:c3:2e:fa:8c:27:6a:6b:f0:8b:20:75:f5:4c: 3f:5e:01:2c:07:e2:59:ee:3e:eb:dc:81:92:2d:19:de:01:63: 28:17:51:20:23:ce:0d:d5:cf:c5:c2:25:48:e9:83:4b:3f:f4: c3:73:54:1a:19:2a:af:fb:73:11:3a:6a:45:1d:b4:15:9a:a0: e4:66:c4:1b:ca:c9:3c:fa:4a:7c:7a:96:20:ea:4d:58:f2:78: 7b:fa:6b:af:96:ad:d8:f7:ec:d2:20:40:92:45:d2:20:23:96: 59:82:a1:06:d0:84:46:88:d7:cf:31:c6:0d:54:1e:cf:51:dc: dc:86:36:f7:c4:63:be:13:1e:d9:4e:2d:1a:bd:87:e9:c0:a3: 15:45:a3:17:99:e7:d7:b0:55:b9:86:4f:c6:85:6b:11:44:1b: 78:df:f1:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpzoLaztUGCYlbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZGUwMTg1NzQtOTYwNS00MGZmLThjN2QtZDZiNGRlZWRmMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntjKqrVp/VoXYVGNpuSfqtPqextM9ZDYXwL8 J+TQgoPzOO31HmkS588wT45YkRdJKrk0rpuQHpiayX1iBvPnG4l/SK5Ea8wjjh7e M18z+YzXUIT+kn6cvh4SRC0G8oa9vHhfD4UnxFTDvz4MyfOG3KPqb2RBF2dQDgIQ 2qZziENF3UByNqBLwAWELikvoxTJ4A/m4nBXnQM65oYnaZOdByYgr+V2695hrTSX Rj//4NnVr2rliowV/74FL9uzeghV3YjwI/7aiWTqmmoU62LrBqc/UGsYh1qwDX3Q gpkZeKzPvj4nnu4KFm9asAOpy8jDo6C+tLv9ILpOr4BJnwNHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW4TpQG/G5mrN3CP9eHVv538Ju1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzE5NTdhMDItYjBlYS0z YWU3LWI1NzctMGYzMTg4ZDNjYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmhA9M/8BN2hYFc1NbitglZJ/YmRlt5hA22vnlnXuo/IX14BJ2gWjTp JHitB+Y2xnW27ATK/Qz6bpajo/e+TGD6YD1Wp0t6PP7PbOZKtronqN6536jrx9TW /oUCzduOwy76jCdqa/CLIHX1TD9eASwH4lnuPuvcgZItGd4BYygXUSAjzg3Vz8XC JUjpg0s/9MNzVBoZKq/7cxE6akUdtBWaoORmxBvKyTz6Snx6liDqTVjyeHv6a6+W rdj37NIgQJJF0iAjllmCoQbQhEaI188xxg1UHs9R3NyGNvfEY74THtlOLRq9h+nA oxVFoxeZ59ewVbmGT8aFaxFEG3jf8SM= -----END CERTIFICATE-----Generated at Sun Oct 19 20:20:06 2025 by rpki-client