$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa File: 33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa (raw, json) Hash identifier: LcA3XVcqJnhJU3AZFjWLOnfsJjp1eX538/6krBO5m8g= Subject key identifier: D8:A7:11:CF:6D:E8:69:9E:70:EE:72:C5:6C:04:75:E2:5A:40:8A:93 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C256CF7456F308C34B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 21723 IP address blocks: 209.53.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c2:56:cf:74:56:f3:08:c3:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=84f26bc8-1846-4569-83eb-739fdf99418c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:07:a3:53:96:3d:70:50:ef:64:62:7a:20: f8:b6:57:82:03:4d:32:58:17:ed:da:9b:02:ac:90: b1:b4:75:c9:88:15:6d:f2:a9:51:45:94:60:71:26: f7:a8:b6:d9:fd:e2:c5:0d:c6:c0:55:d2:6f:5e:fc: ad:ad:d1:62:31:22:a7:9c:10:93:c9:54:c3:93:52: c3:e2:fd:03:8f:9f:1a:5f:91:af:67:12:c0:5c:85: 20:e2:80:96:7f:39:e0:e7:eb:6a:51:ec:d5:38:dd: 60:4d:ae:89:98:73:ec:ad:97:71:ef:4d:b5:f5:4a: a4:37:27:12:c6:88:fa:db:46:de:9e:04:d1:c6:ab: 14:ca:1e:fa:58:88:74:a6:bd:c5:10:e4:3c:21:6a: 0e:3d:04:76:35:be:55:14:80:d0:42:67:6f:23:f4: d6:50:79:ed:1e:83:0f:c0:93:e0:6f:ac:d0:19:fd: 89:d3:f3:fb:19:bf:26:ab:09:44:a5:13:08:30:12: 77:61:c1:27:98:cf:cd:e3:ef:bb:f5:9b:c6:48:0c: 27:43:60:e9:c4:7f:09:c7:03:60:b5:ee:48:f9:7e: 92:5e:a0:49:46:04:ca:dd:47:8f:3c:b0:a8:44:5b: 2f:8c:28:a6:73:38:8b:92:ff:a1:ef:6a:49:9a:4c: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A7:11:CF:6D:E8:69:9E:70:EE:72:C5:6C:04:75:E2:5A:40:8A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:6a:50:cb:50:8a:af:2e:d1:3e:25:4f:b9:27:82:65:7d:aa: f6:a4:38:06:68:73:2e:da:ce:12:5b:59:d5:19:29:dc:f1:18: 4e:ea:f8:a9:f1:dc:38:63:82:68:51:d5:45:72:d7:df:7f:c3: 37:73:a5:8b:7e:8a:32:2a:9c:dc:07:da:52:fd:87:0e:b7:99: de:80:fa:8d:16:80:9e:aa:81:fb:ce:97:6c:82:16:28:44:ae: 6b:13:b6:ac:b8:69:3b:1e:7b:6d:8d:df:c3:b5:fe:9f:7d:91: fa:8a:37:db:99:dd:c0:b3:df:8e:10:00:94:bb:c5:e5:ff:a4: 74:b4:0e:6c:d6:2b:a0:b7:3d:d9:bc:6c:3f:7e:16:62:8b:b1: d3:1d:0a:f6:01:e1:82:03:0c:17:54:d4:c7:bd:42:9b:ae:d4: aa:f4:4c:a1:96:a5:f3:80:f3:8e:4a:97:be:31:94:fb:a2:5b: 47:b5:76:27:f1:dc:23:0f:3b:60:53:43:6c:aa:12:7f:66:ad: 7d:b5:a1:fe:34:85:ab:3a:64:88:1c:60:8f:b7:2b:d7:0a:6c: e3:b6:c5:f0:9d:21:e2:28:61:4a:96:a0:06:ca:7c:71:85:32: 5b:6b:ce:67:eb:16:e8:a8:73:32:dc:cf:7a:6b:3c:89:6e:a8: 53:92:18:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcJWz3RW8wjDSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ODRmMjZiYzgtMTg0Ni00NTY5LTgzZWItNzM5ZmRmOTk0MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUwHo1OWPXBQ72RieiD4tleCA00yWBft2psC rJCxtHXJiBVt8qlRRZRgcSb3qLbZ/eLFDcbAVdJvXvytrdFiMSKnnBCTyVTDk1LD 4v0Dj58aX5GvZxLAXIUg4oCWfzng5+tqUezVON1gTa6JmHPsrZdx70219UqkNycS xoj620bengTRxqsUyh76WIh0pr3FEOQ8IWoOPQR2Nb5VFIDQQmdvI/TWUHntHoMP wJPgb6zQGf2J0/P7Gb8mqwlEpRMIMBJ3YcEnmM/N4++79ZvGSAwnQ2DpxH8JxwNg te5I+X6SXqBJRgTK3UePPLCoRFsvjCimcziLkv+h72pJmkyCxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNinEc9t6GmecO5yxWwEdeJaQIqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzMzMzRhZjItYjc2Yy0z ZjNkLTlhNzEtNDZlYTIxYjMwY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1qUMtQiq8u0T4lT7kngmV9qvakOAZocy7azhJbWdUZKdzxGE7q+Knx 3DhjgmhR1UVy199/wzdzpYt+ijIqnNwH2lL9hw63md6A+o0WgJ6qgfvOl2yCFihE rmsTtqy4aTsee22N38O1/p99kfqKN9uZ3cCz344QAJS7xeX/pHS0DmzWK6C3Pdm8 bD9+FmKLsdMdCvYB4YIDDBdU1Me9Qpuu1Kr0TKGWpfOA845Kl74xlPuiW0e1difx 3CMPO2BTQ2yqEn9mrX21of40has6ZIgcYI+3K9cKbOO2xfCdIeIoYUqWoAbKfHGF MltrzmfrFuioczLcz3prPIluqFOSGC4= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:35 2025 by rpki-client