$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa File: 35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa (raw, json) Hash identifier: sxix2AhQcPaKXhCRxkR8dWgTtRVPrAsVUSp5gD/Pk+E= Subject key identifier: 5C:02:81:9C:D2:BB:BA:12:CB:DD:85:30:F7:36:81:11:76:4A:16:B4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5141B90C2157F951BA8BD380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7861 IP address blocks: 209.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:b9:0c:21:57:f9:51:ba:8b:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=674f6a70-d024-4ab8-b1be-6d7f44b84e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:e9:7a:4d:3b:52:29:b9:b9:48:4b:26:d7: 61:7b:bf:08:66:4d:e8:75:32:fd:80:c9:3b:f3:74: 5d:cc:52:d2:b5:3e:b4:f3:b8:7e:e8:5b:5e:3c:96: d5:fe:63:d4:21:b3:c0:76:71:ea:2f:49:0a:70:7a: f3:2a:71:ef:d8:8b:88:4d:24:73:87:4a:7b:dd:4f: fa:21:2b:be:3f:11:7b:04:f6:33:d6:87:53:c2:47: b5:a8:50:fb:9d:1c:8b:18:24:eb:50:a1:ad:5f:8c: a7:19:eb:cd:52:cf:ee:ae:85:c2:b4:b2:cd:62:7d: 05:15:b8:34:1f:7e:bc:48:dc:ac:ee:e5:31:da:16: c7:5b:e8:c4:0d:46:c8:03:d1:1b:7d:20:63:68:58: be:9a:c9:1d:c5:15:c8:da:d4:6d:7d:b1:0e:d7:06: 18:2d:45:62:07:a8:ca:24:1d:54:14:f4:d9:f2:ab: 10:98:e2:2b:64:12:d1:02:12:79:f9:1b:04:58:51: d8:35:15:aa:0e:d7:21:d0:e4:6a:66:13:8b:fa:67: 7f:d7:a9:b4:c1:4d:c1:34:28:ba:14:f8:b2:6e:04: 90:e0:b6:54:60:43:55:ce:d4:e8:97:59:9b:23:c2: a1:e6:eb:cb:2a:6d:75:90:c4:d4:63:6d:77:72:4b: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:02:81:9C:D2:BB:BA:12:CB:DD:85:30:F7:36:81:11:76:4A:16:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:99:85:e9:0c:9c:8a:97:1a:45:9b:ea:2e:30:d4:73:c9:39: 15:c6:ea:fb:75:83:70:db:9a:9b:2e:81:6f:ed:b8:27:83:58: fd:0a:f2:32:9b:5a:b6:a2:cb:82:73:78:99:f5:54:f2:b4:94: 1d:db:9f:2a:c8:cb:68:34:14:ed:0b:a9:65:b1:92:91:82:9a: e9:60:b2:90:82:dc:b1:8b:1a:24:32:44:cc:7b:9a:9b:06:f2: 07:e6:29:be:35:fd:51:ae:f5:f6:0f:d7:bb:df:bd:98:8d:7a: b0:ab:76:0b:d8:a3:21:d7:0d:60:b8:84:93:50:25:59:47:d0: 41:5a:dc:33:9c:ba:94:c9:02:df:6e:30:58:17:1b:d7:69:51: e5:11:79:fa:8b:c1:06:5c:e2:72:57:53:2c:1a:65:16:9a:a2: 85:54:7e:cb:9d:95:29:0a:8e:0e:29:f5:5b:24:bc:9c:6a:8b: d7:39:04:e7:ff:08:d9:bd:41:82:8c:c0:e8:c2:fd:2f:2f:98: a9:87:3e:03:66:9d:51:74:28:46:77:d3:f3:b2:fa:67:9e:27: 0c:dc:d6:50:a6:43:8b:60:4a:df:42:5e:8b:66:44:8a:6b:e5: d3:06:19:53:5a:03:22:f4:f2:6e:55:55:c8:f1:a7:72:a3:97: 01:5a:84:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbkMIVf5UbqL04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk Njc0ZjZhNzAtZDAyNC00YWI4LWIxYmUtNmQ3ZjQ0Yjg0ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgnpek07Uim5uUhLJtdhe78IZk3odTL9gMk7 83RdzFLStT6087h+6FtePJbV/mPUIbPAdnHqL0kKcHrzKnHv2IuITSRzh0p73U/6 ISu+PxF7BPYz1odTwke1qFD7nRyLGCTrUKGtX4ynGevNUs/uroXCtLLNYn0FFbg0 H368SNys7uUx2hbHW+jEDUbIA9EbfSBjaFi+mskdxRXI2tRtfbEO1wYYLUViB6jK JB1UFPTZ8qsQmOIrZBLRAhJ5+RsEWFHYNRWqDtch0ORqZhOL+md/16m0wU3BNCi6 FPiybgSQ4LZUYENVztTol1mbI8Kh5uvLKm11kMTUY213ckuZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwCgZzSu7oSy92FMPc2gRF2Sha0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzVhNDlkYjMtYTc3OC0z YmZjLTg3N2EtYzljZWE5ZTVhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyZhekMnIqXGkWb6i4w1HPJORXG6vt1g3DbmpsugW/tuCeDWP0K8jKb Wraiy4JzeJn1VPK0lB3bnyrIy2g0FO0LqWWxkpGCmulgspCC3LGLGiQyRMx7mpsG 8gfmKb41/VGu9fYP17vfvZiNerCrdgvYoyHXDWC4hJNQJVlH0EFa3DOcupTJAt9u MFgXG9dpUeURefqLwQZc4nJXUywaZRaaooVUfsudlSkKjg4p9VskvJxqi9c5BOf/ CNm9QYKMwOjC/S8vmKmHPgNmnVF0KEZ30/Oy+meeJwzc1lCmQ4tgSt9CXotmRIpr 5dMGGVNaAyL08m5VVcjxp3KjlwFahPg= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:58 2025 by rpki-client