$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/418c036f-9728-34df-8e15-d3b02fa7d48b.roa File: 418c036f-9728-34df-8e15-d3b02fa7d48b.roa (raw, json) Hash identifier: Ya5bY7Bo3cQY7fkwiNJiVcdovbDqGyw5ObLzA0FoPa0= Subject key identifier: B9:A9:31:68:89:19:A7:3A:E8:A4:D9:C5:21:83:91:D5:29:6E:79:ED Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C441F316BC6555A58780 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/418c036f-9728-34df-8e15-d3b02fa7d48b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 209.53.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c4:41:f3:16:bc:65:55:a5:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=345b0d0e-b9e7-4368-86d9-10aaca42b600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:89:9c:cb:1f:0b:cb:f8:4a:83:47:c4:ee: 66:e3:15:c1:23:ec:b8:76:df:c4:56:1f:27:5b:a0: e0:d7:42:14:45:17:c9:26:18:b0:45:de:58:37:3a: f8:9b:8c:ad:30:d0:1f:a3:e2:44:94:fc:71:d7:41: 8f:ac:e1:ec:cb:af:8c:12:07:77:f4:6b:d8:3d:fd: 52:9b:41:70:d0:7d:7c:12:05:79:a3:52:89:21:e6: de:47:4d:cf:21:9c:b8:58:2f:b5:ef:ae:00:9c:3a: cc:b3:ec:cf:fb:2e:6e:f7:63:cd:1b:ef:30:17:19: 21:35:74:39:87:c9:65:72:c1:f1:05:17:57:05:d4: 42:69:15:0a:9a:19:79:90:12:6b:fb:aa:75:8b:64: a6:09:39:d4:82:97:89:23:4a:50:71:d3:06:24:e7: eb:16:06:0a:12:30:de:3d:2d:09:e8:20:8f:ec:82: c1:8d:53:e7:29:3a:7d:b0:7a:78:76:fd:73:d0:b5: e1:59:24:41:53:f7:a2:f4:0e:b7:52:84:a9:20:44: e4:8b:bf:9c:ac:89:e5:b5:fa:1f:43:d8:51:fa:97: c4:14:16:9f:38:b6:8e:a9:03:90:2a:b6:3c:c8:22: 06:6c:f7:63:6c:78:36:66:03:08:3c:7d:94:a8:3a: 66:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A9:31:68:89:19:A7:3A:E8:A4:D9:C5:21:83:91:D5:29:6E:79:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/418c036f-9728-34df-8e15-d3b02fa7d48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:45:c5:45:97:41:40:a3:4e:da:f6:be:62:77:96:ac:b7:32: 74:70:b0:1c:2e:86:ba:f9:c0:d2:6d:ea:fb:46:32:d1:51:85: 48:6c:08:ba:13:fd:4d:ae:75:d5:b5:ac:49:24:b5:f6:04:2f: fe:0f:7a:6e:a0:c4:67:c1:20:23:e4:33:5f:4d:ce:f2:e9:49: 28:ec:14:5c:2f:6c:b1:d5:2b:60:87:22:5e:7a:e2:99:e7:8d: ef:a1:18:da:db:ab:a1:f9:52:e3:bd:01:d4:0c:72:ff:ab:a9: d6:c4:60:1a:6b:39:73:b0:7b:b0:ca:ca:e7:d9:5f:c1:e9:eb: 8a:b0:08:06:be:86:1b:da:a2:45:a7:92:23:a0:fd:2a:a1:3f: ea:89:74:e7:82:cc:2f:d0:8f:9a:dd:a1:29:55:5e:38:7b:e3: 23:79:d9:d6:b0:27:10:6c:90:aa:1a:6e:1a:50:f8:d9:f6:de: 29:c2:b3:a3:88:88:03:2e:95:e1:4a:5d:a9:30:d2:73:3e:b5: 2e:87:ee:f4:fa:97:3a:dd:d8:98:0a:58:03:b2:dd:91:ef:d1: 04:ea:2e:89:53:c2:d6:b5:75:22:11:59:55:32:81:eb:1e:d3: 99:bc:ba:81:74:de:24:3f:41:e5:af:bb:b7:e3:8f:7f:d2:ed: 99:1e:d7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcRB8xa8ZVWlh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MzQ1YjBkMGUtYjllNy00MzY4LTg2ZDktMTBhYWNhNDJiNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9+JnMsfC8v4SoNHxO5m4xXBI+y4dt/EVh8n W6Dg10IURRfJJhiwRd5YNzr4m4ytMNAfo+JElPxx10GPrOHsy6+MEgd39GvYPf1S m0Fw0H18EgV5o1KJIebeR03PIZy4WC+1764AnDrMs+zP+y5u92PNG+8wFxkhNXQ5 h8llcsHxBRdXBdRCaRUKmhl5kBJr+6p1i2SmCTnUgpeJI0pQcdMGJOfrFgYKEjDe PS0J6CCP7ILBjVPnKTp9sHp4dv1z0LXhWSRBU/ei9A63UoSpIETki7+crInltfof Q9hR+pfEFBafOLaOqQOQKrY8yCIGbPdjbHg2ZgMIPH2UqDpmGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmpMWiJGac66KTZxSGDkdUpbnntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDE4YzAzNmYtOTcyOC0z NGRmLThlMTUtZDNiMDJmYTdkNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZFxUWXQUCjTtr2vmJ3lqy3MnRwsBwuhrr5wNJt6vtGMtFRhUhsCLoT /U2uddW1rEkktfYEL/4Pem6gxGfBICPkM19NzvLpSSjsFFwvbLHVK2CHIl564pnn je+hGNrbq6H5UuO9AdQMcv+rqdbEYBprOXOwe7DKyufZX8Hp64qwCAa+hhvaokWn kiOg/SqhP+qJdOeCzC/Qj5rdoSlVXjh74yN52dawJxBskKoabhpQ+Nn23inCs6OI iAMuleFKXakw0nM+tS6H7vT6lzrd2JgKWAOy3ZHv0QTqLolTwta1dSIRWVUygese 05m8uoF03iQ/QeWvu7fjj3/S7Zke17M= -----END CERTIFICATE-----Generated at Sun Oct 19 20:19:54 2025 by rpki-client