$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa File: 3f4168cf-189e-31fc-8ad6-098547940f9d.roa (raw, json) Hash identifier: 2VL6Hr2jt6QyQ2DJhJq4XqFvexJBz89CFxu5WTS3PUk= Subject key identifier: F0:79:23:AC:6F:A1:CC:16:72:70:4A:AA:FD:7B:F7:56:DF:7C:3C:FA Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C0DC8681803DBB448500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7861 IP address blocks: 209.20.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c0:dc:86:81:80:3d:bb:44:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9adb106b-5422-4a4e-80d3-e841ea377eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:68:56:0b:58:f1:92:06:7e:f5:1a:d2:2f: a2:0e:bb:54:ea:5a:94:05:78:22:5d:7b:58:c9:49: 3b:82:61:79:fc:01:38:80:3f:78:05:e4:55:47:9c: ba:b4:f6:a5:9f:94:2b:8a:fe:76:9b:d5:3d:d3:df: 26:54:93:38:57:f6:05:b3:5b:aa:20:d8:31:a0:76: a8:b2:aa:c8:b7:d3:f5:7d:36:8b:8d:af:41:d7:7d: 56:33:f9:9f:94:8e:3d:21:e6:8d:d5:83:27:ff:0d: b5:ad:b1:a3:6b:31:93:8a:dc:61:0e:37:0c:38:62: 83:ba:26:e7:09:63:de:c5:46:b2:e1:7e:89:54:4f: 58:8a:f6:32:8e:8c:a6:64:f1:cc:24:4a:53:61:ac: 31:be:0d:19:20:88:25:2e:51:82:62:f3:a7:4e:d8: 49:c7:26:6c:d4:13:fd:86:73:37:44:dd:6a:ad:b6: da:fe:be:e8:8a:6f:b1:e7:c5:fa:8d:a0:d1:c1:8c: 46:36:71:0e:8c:39:52:19:3d:ab:8b:f9:b0:70:7a: ca:bc:ca:e6:0c:d1:f3:4e:ef:0f:a5:0c:98:25:5c: 1b:3f:f6:87:2a:2c:87:3a:64:42:12:78:ef:71:8d: d5:76:01:f4:00:76:ba:68:c7:10:9a:c9:a9:df:be: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:23:AC:6F:A1:CC:16:72:70:4A:AA:FD:7B:F7:56:DF:7C:3C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:74:90:e0:00:1f:cf:a4:29:f6:b9:56:f9:bd:ca:3a:c4:9d: 74:20:e9:49:1a:0d:8c:1b:7b:b0:3a:1f:f6:39:b6:48:08:7c: 31:d9:fe:08:a4:09:ba:a2:ad:1c:f7:85:ae:47:6a:42:86:7c: b2:e0:8a:19:cf:17:82:45:96:7e:b8:ce:6b:a2:ef:8e:65:41: 7d:95:c5:b1:a1:94:67:9d:55:12:04:1a:aa:d8:f7:92:8d:93: 34:ae:49:8f:e2:3e:8b:27:35:35:4b:7b:b3:df:51:ca:bd:ee: b8:07:0d:89:d7:e2:c2:a2:d7:b3:be:db:2b:46:34:0c:f5:e9: 47:b8:b0:c7:10:17:7a:18:8b:de:03:25:86:07:79:30:9c:77: 6a:ea:99:78:50:42:df:99:53:8b:ae:88:5b:6a:5c:cd:b1:7c: 7e:a5:4e:97:4a:f1:d1:b1:9d:6b:bf:af:34:5a:fe:0a:84:2f: 4b:84:60:0f:65:85:8c:97:f2:e8:2a:b5:8c:f8:c9:0f:86:ed: ff:12:ee:c6:c0:1d:71:5d:d8:7d:a3:07:ee:bf:03:78:dc:4a: 59:c6:12:34:0c:27:bf:37:e2:6a:45:5e:be:b4:4b:cd:b5:51: 3c:2c:be:9c:7d:cd:d7:f3:bd:3d:4f:f5:a4:b8:68:38:f7:b9: 97:98:8d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8DchoGAPbtEhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFkYjEwNmItNTQyMi00YTRlLTgwZDMtZTg0MWVhMzc3ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY9oVgtY8ZIGfvUa0i+iDrtU6lqUBXgiXXtY yUk7gmF5/AE4gD94BeRVR5y6tPaln5Qriv52m9U9098mVJM4V/YFs1uqINgxoHao sqrIt9P1fTaLja9B131WM/mflI49IeaN1YMn/w21rbGjazGTitxhDjcMOGKDuibn CWPexUay4X6JVE9YivYyjoymZPHMJEpTYawxvg0ZIIglLlGCYvOnTthJxyZs1BP9 hnM3RN1qrbba/r7oim+x58X6jaDRwYxGNnEOjDlSGT2ri/mwcHrKvMrmDNHzTu8P pQyYJVwbP/aHKiyHOmRCEnjvcY3VdgH0AHa6aMcQmsmp376xkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPB5I6xvocwWcnBKqv1791bffDz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Y0MTY4Y2YtMTg5ZS0z MWZjLThhZDYtMDk4NTQ3OTQwZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR0kOAAH8+kKfa5Vvm9yjrEnXQg6UkaDYwbe7A6H/Y5tkgIfDHZ/gik CbqirRz3ha5HakKGfLLgihnPF4JFln64zmui745lQX2VxbGhlGedVRIEGqrY95KN kzSuSY/iPosnNTVLe7PfUcq97rgHDYnX4sKi17O+2ytGNAz16Ue4sMcQF3oYi94D JYYHeTCcd2rqmXhQQt+ZU4uuiFtqXM2xfH6lTpdK8dGxnWu/rzRa/gqEL0uEYA9l hYyX8ugqtYz4yQ+G7f8S7sbAHXFd2H2jB+6/A3jcSlnGEjQMJ7834mpFXr60S821 UTwsvpx9zdfzvT1P9aS4aDj3uZeYjX8= -----END CERTIFICATE-----Generated at Sat Oct 3 11:00:03 2026 by rpki-client