$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa File: 3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa (raw, json) Hash identifier: aJxYvHLsH/+oNU8SNq3pO+Brc4rZD7UHQ+n8cHYB9W8= Subject key identifier: 38:DC:2F:DE:D7:23:C1:00:F0:26:76:B4:57:59:8B:F4:62:A3:41:43 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B48E1B1033C5F72C444ABA000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 36000 IP address blocks: 209.53.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b1:03:3c:5f:72:c4:44:ab:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=c4aa861d-5800-436c-9269-2a04d9df19c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:ce:7c:4d:f8:b4:19:c2:1b:71:ab:75:c3: ac:c9:9f:b1:52:21:0c:35:a3:e9:7b:1e:f4:aa:44: f1:92:2c:2c:43:e8:2e:df:55:be:1e:e4:be:0b:ee: 8b:57:83:a4:c0:a1:7a:17:40:8d:15:43:fd:2e:46: 69:5e:df:cd:ce:73:df:d1:b8:32:d2:66:8e:29:27: 52:d9:bf:6a:e8:18:ae:79:d2:ed:88:b4:4d:53:3a: 03:1b:aa:43:fa:db:61:43:db:a3:25:db:13:52:63: 25:24:b7:64:e7:9f:08:e9:8a:a9:f8:58:cc:46:53: 96:57:1f:34:99:aa:9b:8d:24:7f:0c:43:fd:17:fc: cd:35:0c:ed:6a:47:c6:54:20:17:00:8d:06:ef:af: c7:ce:7e:90:04:09:93:5c:04:5e:99:45:93:40:4e: 64:28:3a:c0:7c:6e:a1:6a:63:a8:b4:bb:7d:d3:07: 1f:9c:a3:2d:f7:10:c9:63:e0:40:fc:ad:8d:bb:c5: 43:ad:95:4c:b7:ca:c7:93:19:f4:98:ae:f5:f7:03: c6:02:d9:0e:14:14:79:76:91:ac:ee:17:48:cd:85: eb:d1:f2:25:ce:bc:1b:ff:77:5b:5a:08:0e:fe:17: b6:5f:b9:72:a2:4b:2b:2e:f1:d7:a4:54:2b:37:eb: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DC:2F:DE:D7:23:C1:00:F0:26:76:B4:57:59:8B:F4:62:A3:41:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3c1e0599-0f7a-36bf-9ab3-176c6b4fe000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:22:11:02:5c:9d:9d:9a:75:e9:85:fc:30:c2:d7:d9:fc:d8: 14:98:9c:89:fe:45:4e:bf:c6:31:3d:cf:d8:aa:89:8a:4b:5e: 88:3e:de:71:84:c1:57:0c:e6:8e:60:5b:d9:fc:8d:9d:60:d7: 77:88:1d:af:92:86:68:0a:f5:95:fb:d6:58:11:3a:78:7f:fa: 66:23:a7:40:72:60:0c:3b:94:20:3e:94:23:a8:62:e7:c3:f4: e6:64:1b:ca:c4:e6:4b:a9:26:7e:e9:f7:f5:2f:d1:16:c2:fb: d6:86:fd:eb:80:33:f8:7e:25:d2:2d:29:94:63:af:35:a7:49: 6a:8c:c8:72:c3:56:fd:fa:c4:32:05:36:7a:71:62:f7:0c:96: e0:63:5d:be:c8:2f:7f:08:a6:c5:20:3c:90:65:cc:1a:24:c5: 9b:08:15:dc:91:8f:12:b9:6a:9a:06:73:b0:65:5e:3d:af:c7: bf:70:07:a7:fd:cb:62:d5:67:04:24:a3:fd:55:e0:77:67:cc: 56:79:70:cf:9a:e6:bb:ec:f0:cb:0b:56:e0:47:9d:88:9c:6a: 2d:c5:23:93:37:a9:81:95:30:34:92:7a:4c:a0:fd:b9:26:47: 57:aa:f4:2e:c4:ce:06:71:17:2f:fe:23:6d:bd:7b:e8:0f:e5: e1:65:dd:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bEDPF9yxESroAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YzRhYTg2MWQtNTgwMC00MzZjLTkyNjktMmEwNGQ5ZGYxOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthXOfE34tBnCG3GrdcOsyZ+xUiEMNaPpex70 qkTxkiwsQ+gu31W+HuS+C+6LV4OkwKF6F0CNFUP9LkZpXt/NznPf0bgy0maOKSdS 2b9q6BiuedLtiLRNUzoDG6pD+tthQ9ujJdsTUmMlJLdk558I6Yqp+FjMRlOWVx80 maqbjSR/DEP9F/zNNQztakfGVCAXAI0G76/Hzn6QBAmTXARemUWTQE5kKDrAfG6h amOotLt90wcfnKMt9xDJY+BA/K2Nu8VDrZVMt8rHkxn0mK719wPGAtkOFBR5dpGs 7hdIzYXr0fIlzrwb/3dbWggO/he2X7lyoksrLvHXpFQrN+uq2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjcL97XI8EA8CZ2tFdZi/Rio0FDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2MxZTA1OTktMGY3YS0z NmJmLTlhYjMtMTc2YzZiNGZlMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4iEQJcnZ2ademF/DDC19n82BSYnIn+RU6/xjE9z9iqiYpLXog+3nGE wVcM5o5gW9n8jZ1g13eIHa+ShmgK9ZX71lgROnh/+mYjp0ByYAw7lCA+lCOoYufD 9OZkG8rE5kupJn7p9/Uv0RbC+9aG/euAM/h+JdItKZRjrzWnSWqMyHLDVv36xDIF NnpxYvcMluBjXb7IL38IpsUgPJBlzBokxZsIFdyRjxK5apoGc7BlXj2vx79wB6f9 y2LVZwQko/1V4HdnzFZ5cM+a5rvs8MsLVuBHnYicai3FI5M3qYGVMDSSekyg/bkm R1eq9C7EzgZxFy/+I229e+gP5eFl3fY= -----END CERTIFICATE-----Generated at Mon Oct 20 01:14:22 2025 by rpki-client