$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa File: 3f4168cf-189e-31fc-8ad6-098547940f9d.roa (raw, json) Hash identifier: tlQTSSvSd/Yx5D729w0OgPtczxXvpB6mJ6qBl3960mA= Subject key identifier: 16:94:58:71:E7:08:40:D5:17:17:1C:47:4C:24:DE:C9:2D:6E:4D:7D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A7371B034F9D2878E7A980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 7861 IP address blocks: 209.20.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:37:1b:03:4f:9d:28:78:e7:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=fb389dce-f919-45ba-82a3-0f9a5f3cad2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:0f:fc:5c:e6:92:a0:89:9a:f8:be:0a:66: 87:8a:e8:f4:d5:70:99:5d:57:9e:25:9c:d6:63:c4: 4a:dd:ab:fa:8a:1a:61:3e:87:24:15:30:26:59:c4: 1e:25:e2:03:a7:71:4a:de:34:35:a2:92:8f:07:78: 12:41:53:8b:b3:19:e7:4c:e0:71:04:aa:a9:31:40: 30:fb:d4:bb:11:f7:02:38:26:04:85:7c:22:59:3c: 24:51:d5:39:2d:c4:2e:5a:79:11:67:3d:ab:2e:3b: 33:c0:5c:f1:fa:bb:32:a1:80:0a:e2:d2:04:13:7c: 3b:d4:9e:a8:ac:44:e8:54:34:a7:e7:ed:fa:8c:1b: fd:85:9d:b3:0c:3d:32:f9:e0:12:be:c1:67:65:10: bc:7b:6a:0f:02:c1:fe:e2:aa:ea:a6:e0:52:27:c6: 3b:0b:8c:c1:03:13:92:0c:30:fc:ce:72:58:40:ad: a1:40:ae:1f:d8:c7:6e:29:dd:6c:c9:ac:c7:a6:46: e0:98:fc:e3:3d:19:9b:8a:cc:f9:dc:ea:10:dc:0f: 31:5a:e3:db:e9:ee:b4:7b:e4:d9:f1:06:99:fb:0c: 4f:4e:d8:62:c7:2f:b7:35:f6:10:1a:e2:a2:a9:e8: 2d:8f:ed:4b:75:9c:f0:75:35:40:77:24:a3:80:36: 84:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:94:58:71:E7:08:40:D5:17:17:1C:47:4C:24:DE:C9:2D:6E:4D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ea:cb:51:37:02:3a:9f:d1:f9:dd:47:93:ab:f7:14:1a:9d:36: 58:a4:e7:e7:f2:1f:22:c9:25:89:0f:2d:f6:bb:33:ea:51:f2: 27:14:3a:0c:f5:42:83:5a:c9:51:7e:b3:37:b7:95:3d:a0:84: 59:70:ea:3a:b4:d8:7c:e7:bb:ae:36:a2:30:ab:bd:bd:b3:cb: a7:b5:25:e1:0d:11:6d:74:3c:c3:d8:1e:27:f6:21:2b:79:69: 8b:e0:d9:96:5f:14:f9:c2:18:7f:d5:d7:f7:a1:98:bf:e7:64: 4b:bb:3c:a4:df:90:7d:3b:6d:32:cc:59:f7:e4:ee:56:f9:fe: 00:7c:65:e0:50:de:26:f5:c6:b0:10:a2:ec:1a:74:a7:65:a1: 86:8d:17:cb:d7:42:d1:46:ae:cd:75:f7:59:76:ef:38:ed:e6: f7:a5:39:71:6b:ea:19:dc:29:f0:42:61:7d:e1:9b:8c:5e:26: e1:52:bb:53:31:f9:71:a7:a3:80:5a:d5:80:b9:58:cc:fb:eb: 57:73:c4:96:48:b3:a9:56:05:58:6f:55:a5:27:35:35:b7:79: 04:80:2b:23:f9:a9:23:27:61:e3:aa:47:d8:fe:99:47:a1:3e: aa:6a:51:7c:28:a4:6b:5f:00:0c:20:07:62:ad:a6:15:60:43: 01:4b:dc:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpzcbA0+dKHjnqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZmIzODlkY2UtZjkxOS00NWJhLTgyYTMtMGY5YTVmM2NhZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBMP/FzmkqCJmvi+CmaHiuj01XCZXVeeJZzW Y8RK3av6ihphPockFTAmWcQeJeIDp3FK3jQ1opKPB3gSQVOLsxnnTOBxBKqpMUAw +9S7EfcCOCYEhXwiWTwkUdU5LcQuWnkRZz2rLjszwFzx+rsyoYAK4tIEE3w71J6o rEToVDSn5+36jBv9hZ2zDD0y+eASvsFnZRC8e2oPAsH+4qrqpuBSJ8Y7C4zBAxOS DDD8znJYQK2hQK4f2MduKd1syazHpkbgmPzjPRmbisz53OoQ3A8xWuPb6e60e+TZ 8QaZ+wxPTthixy+3NfYQGuKiqegtj+1LdZzwdTVAdySjgDaEKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaUWHHnCEDVFxccR0wk3sktbk19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Y0MTY4Y2YtMTg5ZS0z MWZjLThhZDYtMDk4NTQ3OTQwZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOrLUTcCOp/R+d1Hk6v3FBqdNlik5+fyHyLJJYkPLfa7M+pR8icUOgz1 QoNayVF+sze3lT2ghFlw6jq02Hznu642ojCrvb2zy6e1JeENEW10PMPYHif2ISt5 aYvg2ZZfFPnCGH/V1/ehmL/nZEu7PKTfkH07bTLMWffk7lb5/gB8ZeBQ3ib1xrAQ ouwadKdloYaNF8vXQtFGrs1191l27zjt5velOXFr6hncKfBCYX3hm4xeJuFSu1Mx +XGno4Ba1YC5WMz761dzxJZIs6lWBVhvVaUnNTW3eQSAKyP5qSMnYeOqR9j+mUeh PqpqUXwopGtfAAwgB2KtphVgQwFL3C4= -----END CERTIFICATE-----Generated at Sun Oct 19 20:18:35 2025 by rpki-client