$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/431150a7-73dc-37d6-8d5d-51819f76b18a.roa File: 431150a7-73dc-37d6-8d5d-51819f76b18a.roa (raw, json) Hash identifier: qp7IJxrvMu6cTd6VLQSYwb9BoNUyfzQS0nJ9bg7dRus= Subject key identifier: C2:23:49:26:82:26:9B:58:A6:5C:E4:6B:A9:00:EF:93:8B:5D:09:8C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C3E7616C5611733C99E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/431150a7-73dc-37d6-8d5d-51819f76b18a.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 208.38.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c3:e7:61:6c:56:11:73:3c:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=053b9bff-4471-4e65-ab2a-e4a04ddce96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:50:94:cf:47:11:56:1d:37:7c:29:4f:16: b2:13:d9:a0:6f:28:77:56:e6:a6:a9:0d:ae:fd:34: 9e:99:df:ba:ad:35:f8:66:b5:9c:49:b5:31:e1:57: 6d:30:d3:e5:85:33:85:01:10:c6:c6:af:9b:52:4d: 40:43:ee:db:99:43:22:39:71:90:b8:33:a4:18:94: 4c:22:ca:fd:48:54:58:16:f5:b1:aa:b2:ae:0a:f3: 05:34:16:42:2c:f0:ce:40:24:38:34:1d:56:b4:58: 0b:2c:2a:71:92:4b:ed:70:05:df:b2:f3:73:e8:b0: 27:25:a7:2a:85:5c:f3:0e:a1:e0:3f:2a:2e:dc:59: 9d:31:8f:93:4e:ae:cc:b4:ac:77:b6:8e:5c:fd:6f: c9:35:08:00:f5:55:61:9c:f2:89:56:22:b9:8c:f0: 5d:e9:ad:f4:35:36:3d:0a:d3:1e:15:f9:7d:ec:c8: 8f:7b:e4:a2:f1:ab:84:d4:6e:d6:fa:d9:f7:5f:14: 86:fe:a7:6e:88:89:75:33:97:e1:89:40:0b:c3:49: c6:f2:c6:35:7c:85:eb:ce:6f:ab:9f:f9:de:fb:30: 63:fb:28:31:99:e2:af:95:22:ce:38:6d:c4:c5:4f: fa:5d:5d:75:1f:47:d5:78:01:e4:5d:b7:0e:6d:5b: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:23:49:26:82:26:9B:58:A6:5C:E4:6B:A9:00:EF:93:8B:5D:09:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/431150a7-73dc-37d6-8d5d-51819f76b18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.38.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:e6:49:40:21:54:8d:33:ba:87:12:62:cf:0c:7e:b2:79:d9: a6:68:2e:d0:3c:43:97:09:5b:10:a0:09:09:ab:1f:68:dc:8e: bd:13:61:96:b7:f1:e1:c7:59:11:ec:10:00:8a:cb:1a:d6:5f: 9c:13:d7:ee:66:74:f4:62:de:b2:c5:73:2a:e9:c8:50:bc:53: c6:09:ca:f8:10:89:59:ae:35:b3:d3:4d:de:26:93:6f:54:59: d2:f1:fa:39:d6:a5:78:ec:a0:af:d2:22:b6:91:de:e3:7a:ed: 30:02:bc:11:86:dd:ff:82:07:11:2d:0f:68:54:00:56:ba:3c: 0b:bc:2d:be:ac:2e:16:2f:7a:f4:c9:b1:15:a1:95:e4:8c:c6: 4f:91:5d:29:26:a9:f7:eb:c2:04:65:87:72:98:a2:b0:eb:4d: f8:fc:c1:cc:0d:48:5d:85:47:3c:24:fc:ad:c6:8b:49:4e:2e: 32:bc:89:5d:65:39:29:d3:07:59:39:8a:bd:1f:15:0a:ac:9b: 01:83:12:33:e3:2c:8b:95:ec:58:73:b6:b7:4c:a8:fb:67:9c: 64:3d:e7:a2:40:81:af:73:eb:83:a3:f6:72:a4:8f:39:2d:64: 2e:de:33:9d:f9:e0:24:10:b8:8a:36:df:63:44:3d:53:c8:04: f6:42:c3:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcPnYWxWEXM8meAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MDUzYjliZmYtNDQ3MS00ZTY1LWFiMmEtZTRhMDRkZGNlOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiNQlM9HEVYdN3wpTxayE9mgbyh3VuamqQ2u /TSemd+6rTX4ZrWcSbUx4VdtMNPlhTOFARDGxq+bUk1AQ+7bmUMiOXGQuDOkGJRM Isr9SFRYFvWxqrKuCvMFNBZCLPDOQCQ4NB1WtFgLLCpxkkvtcAXfsvNz6LAnJacq hVzzDqHgPyou3FmdMY+TTq7MtKx3to5c/W/JNQgA9VVhnPKJViK5jPBd6a30NTY9 CtMeFfl97MiPe+Si8auE1G7W+tn3XxSG/qduiIl1M5fhiUALw0nG8sY1fIXrzm+r n/ne+zBj+ygxmeKvlSLOOG3ExU/6XV11H0fVeAHkXbcObVveVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIjSSaCJptYplzka6kA75OLXQmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDMxMTUwYTctNzNkYy0z N2Q2LThkNWQtNTE4MTlmNzZiMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0CYaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrmSUAhVI0zuocSYs8MfrJ52aZoLtA8Q5cJWxCgCQmrH2jcjr0TYZa3 8eHHWRHsEACKyxrWX5wT1+5mdPRi3rLFcyrpyFC8U8YJyvgQiVmuNbPTTd4mk29U WdLx+jnWpXjsoK/SIraR3uN67TACvBGG3f+CBxEtD2hUAFa6PAu8Lb6sLhYvevTJ sRWhleSMxk+RXSkmqffrwgRlh3KYorDrTfj8wcwNSF2FRzwk/K3Gi0lOLjK8iV1l OSnTB1k5ir0fFQqsmwGDEjPjLIuV7FhztrdMqPtnnGQ956JAga9z64Oj9nKkjzkt ZC7eM5354CQQuIo232NEPVPIBPZCw+k= -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:51 2025 by rpki-client