$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa File: 3ea01a12-51e0-3054-9e81-937b97f56eb0.roa (raw, json) Hash identifier: lGnfcJ8b3UPdemeih057aYnfqOdoKwuJt1XJSIlUWv8= Subject key identifier: 09:31:CD:07:60:3D:51:F5:BD:BD:58:08:AA:38:9A:18:78:DA:B3:DE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D16AB40DCF160D86FF00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.52.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d1:6a:b4:0d:cf:16:0d:86:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=120465bb-7fee-4809-bd7b-11c838f7866e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:49:cd:02:f2:14:ae:10:7e:c3:a7:99:f6: 08:7f:7d:b4:35:a8:bc:50:20:eb:bb:6d:09:b9:e2: 25:91:95:6d:b4:f2:18:8d:41:5c:d5:d2:3f:63:4b: f2:7b:4c:1e:c9:98:05:ba:4c:ed:9b:97:42:c5:4b: 9b:78:12:86:c9:69:bd:06:94:36:d3:44:f2:69:93: c3:f5:0d:99:7b:2b:5c:c1:91:80:70:8c:fa:d7:0a: f8:b2:b9:55:7e:11:3e:46:4c:b4:c9:f2:60:0e:d6: b6:d4:bd:b1:59:f1:4f:14:b6:56:4f:95:d7:c7:72: 06:a8:c5:a6:af:fc:83:60:57:8f:ad:30:d2:c5:4c: 39:73:2b:c1:5c:58:ab:b0:0c:d1:35:6c:4e:84:97: 20:83:81:1d:7e:ff:08:2d:36:f1:e2:a7:ae:58:d9: 5d:39:69:5c:29:cb:5d:4c:0c:1d:e6:73:2c:20:1a: f7:25:3a:52:8c:1b:02:14:0b:b7:23:43:82:4b:e6: 93:8d:da:3a:cf:11:78:a5:33:c6:fd:90:61:7f:ed: b8:20:1f:34:43:03:d4:4b:31:6c:91:4c:6b:b7:df: df:43:77:a0:32:ca:e2:ef:b9:85:90:4e:82:7e:68: da:9c:0f:6b:6c:ff:f2:3f:c2:2e:cb:da:d0:2a:f8: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:31:CD:07:60:3D:51:F5:BD:BD:58:08:AA:38:9A:18:78:DA:B3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3ea01a12-51e0-3054-9e81-937b97f56eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:05:c0:cd:80:95:5f:74:a8:b0:d4:ad:3e:97:2e:24:67:1c: 5d:ef:d4:d6:7d:89:a1:32:36:d2:e1:fa:cc:e1:d4:4d:06:3f: f9:c1:f1:88:33:29:a3:d3:0e:07:83:62:4a:56:69:db:81:32: 2e:0a:68:ca:af:6c:e2:ee:e3:8f:a9:4b:c8:0f:ad:1a:50:12: 04:2b:cf:d2:cd:1a:c7:6b:2a:b0:49:62:1a:99:c8:e2:18:08: 5c:63:d4:4c:e8:5d:46:aa:fb:13:1b:c5:fa:11:05:c9:29:8e: d8:92:00:74:34:4f:62:fd:3f:7d:1a:1c:a5:cf:99:e7:88:b9: 98:71:44:12:ea:44:d9:a2:64:26:dd:a8:ef:e3:b1:80:92:9b: c8:b0:72:a6:4e:55:98:cb:5a:37:fa:1d:37:c8:1b:7a:13:b2: a9:b8:7d:67:2b:21:91:df:52:61:59:23:8e:f0:1f:a6:65:f3: 4b:31:e2:fd:71:f4:75:31:26:32:43:22:29:16:a2:a9:c1:ed: ff:92:cc:a0:54:c9:af:e5:e2:a1:cc:9f:93:82:4f:d7:f5:eb: 57:13:47:a7:33:47:28:4b:e1:ad:69:e3:42:b5:04:f5:bb:14: cc:4e:8a:f3:3a:a0:d1:e9:4d:ea:f5:9a:27:d7:79:f7:69:a5: b2:0c:3d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdFqtA3PFg2G/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MTIwNDY1YmItN2ZlZS00ODA5LWJkN2ItMTFjODM4Zjc4NjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhhJzQLyFK4QfsOnmfYIf320Nai8UCDru20J ueIlkZVttPIYjUFc1dI/Y0vye0weyZgFukztm5dCxUubeBKGyWm9BpQ200TyaZPD 9Q2ZeytcwZGAcIz61wr4srlVfhE+Rky0yfJgDta21L2xWfFPFLZWT5XXx3IGqMWm r/yDYFePrTDSxUw5cyvBXFirsAzRNWxOhJcgg4Edfv8ILTbx4qeuWNldOWlcKctd TAwd5nMsIBr3JTpSjBsCFAu3I0OCS+aTjdo6zxF4pTPG/ZBhf+24IB80QwPUSzFs kUxrt9/fQ3egMsri77mFkE6CfmjanA9rbP/yP8Iuy9rQKvhkmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkxzQdgPVH1vb1YCKo4mhh42rPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2VhMDFhMTItNTFlMC0z MDU0LTllODEtOTM3Yjk3ZjU2ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgFwM2AlV90qLDUrT6XLiRnHF3v1NZ9iaEyNtLh+szh1E0GP/nB8Ygz KaPTDgeDYkpWaduBMi4KaMqvbOLu44+pS8gPrRpQEgQrz9LNGsdrKrBJYhqZyOIY CFxj1EzoXUaq+xMbxfoRBckpjtiSAHQ0T2L9P30aHKXPmeeIuZhxRBLqRNmiZCbd qO/jsYCSm8iwcqZOVZjLWjf6HTfIG3oTsqm4fWcrIZHfUmFZI47wH6Zl80sx4v1x 9HUxJjJDIikWoqnB7f+SzKBUya/l4qHMn5OCT9f161cTR6czRyhL4a1p40K1BPW7 FMxOivM6oNHpTer1mifXefdppbIMPTE= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:40 2025 by rpki-client