$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48dcaa93-a869-3075-9d92-63a921af81a5.roa File: 48dcaa93-a869-3075-9d92-63a921af81a5.roa (raw, json) Hash identifier: b3W2F7P3Size7Jiss5pY2OEF+w7/hU52hf9IFfmBl/o= Subject key identifier: D8:75:8B:DF:E2:7D:34:63:37:A2:16:AB:1A:5C:47:D0:7E:5A:35:E2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B583C7DD3340E21E7F2B4AB00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48dcaa93-a869-3075-9d92-63a921af81a5.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.171.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:7d:d3:34:0e:21:e7:f2:b4:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=32fb1b2e-0b50-4a67-9fee-7b6b9c12f781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:81:98:6e:e4:fa:e5:a9:de:a6:b9:74:cc: d1:05:cd:d4:ec:1f:4c:db:97:43:5b:22:ad:93:b9: 34:39:95:0f:66:ff:e6:e7:5e:68:e5:23:80:58:f0: c0:4b:91:f8:ab:29:8b:61:ea:6d:95:20:b5:8a:9d: 13:ac:8e:5e:ea:0e:fa:16:c4:8e:d6:72:6d:db:0a: bf:9f:0d:5a:1a:cc:cf:7d:13:3b:3f:6f:02:e9:58: aa:4a:88:30:5e:9d:c5:b1:66:bf:a1:b0:94:cc:f5: 43:c6:1e:00:01:60:fd:a1:1a:84:9c:ee:13:09:d3: 20:11:85:94:22:18:a6:54:83:ce:44:9d:04:b6:ff: 66:7b:7b:62:3b:83:c7:c5:6c:aa:2a:52:08:72:b9: c5:df:8e:0d:92:64:54:0f:cc:48:24:fc:f7:75:a1: 6f:25:de:af:c1:74:5f:41:6f:92:a2:32:54:cb:2a: b1:ce:4e:48:4b:65:52:cc:e7:5e:59:26:ea:70:01: 9d:88:3a:a2:78:28:5c:9f:9e:d3:2d:d2:42:78:01: c7:e4:fa:3f:35:7c:dc:4e:db:56:e5:1b:02:e1:f4: 35:35:df:5e:8a:06:f2:44:12:a9:23:ed:af:1c:bb: ab:45:a8:f0:c7:ab:c1:a6:c2:86:9f:a6:a8:d7:3a: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:75:8B:DF:E2:7D:34:63:37:A2:16:AB:1A:5C:47:D0:7E:5A:35:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48dcaa93-a869-3075-9d92-63a921af81a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:38:ce:1f:1e:56:2c:71:95:8b:57:3a:e7:4c:b2:62:01:c5: 81:3c:c5:59:12:7a:4c:d2:75:c0:de:03:fb:b5:2e:08:d0:a7: 80:36:14:07:c8:39:09:6a:8d:57:57:10:d1:d8:df:97:8a:7c: ac:83:bb:ef:b9:4d:c5:1f:84:82:75:c6:ff:63:73:24:cd:16: b7:3b:b4:e1:c2:be:60:b2:63:c6:26:d4:74:2b:78:dc:46:d3: 2e:ed:48:b8:d3:68:19:ba:f9:db:b6:63:f0:07:d9:d8:9e:64: 85:34:e8:02:1d:60:f5:29:3c:ed:6f:55:a2:54:06:02:d4:28: 16:63:5f:97:fb:b8:28:2a:2d:f7:b8:9b:89:ca:16:6e:bb:a3: 3e:60:fa:3c:c0:70:d7:af:0d:bf:cd:a2:58:af:21:23:68:24: bf:df:ae:5d:4a:37:b4:e7:5e:df:d5:91:70:f5:23:ea:5b:74: 4a:ff:f2:1e:97:04:6b:a1:66:b5:2b:a3:e5:33:b6:8c:57:7a: 1e:be:c7:f3:75:c5:2d:6e:5e:bf:86:29:93:59:f7:27:2b:02: d8:93:c1:56:2d:55:46:c5:8a:c3:ae:53:18:f8:e1:e8:e2:6a: 38:87:34:b0:1a:83:03:c5:65:3c:47:3e:0d:f7:30:8b:db:81: 4b:3f:a4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPH3TNA4h5/K0qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzJmYjFiMmUtMGI1MC00YTY3LTlmZWUtN2I2YjljMTJmNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6uBmG7k+uWp3qa5dMzRBc3U7B9M25dDWyKt k7k0OZUPZv/m515o5SOAWPDAS5H4qymLYeptlSC1ip0TrI5e6g76FsSO1nJt2wq/ nw1aGszPfRM7P28C6ViqSogwXp3FsWa/obCUzPVDxh4AAWD9oRqEnO4TCdMgEYWU IhimVIPORJ0Etv9me3tiO4PHxWyqKlIIcrnF344NkmRUD8xIJPz3daFvJd6vwXRf QW+SojJUyyqxzk5IS2VSzOdeWSbqcAGdiDqieChcn57TLdJCeAHH5Po/NXzcTttW 5RsC4fQ1Nd9eigbyRBKpI+2vHLurRajwx6vBpsKGn6ao1zq7MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh1i9/ifTRjN6IWqxpcR9B+WjXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDhkY2FhOTMtYTg2OS0z MDc1LTlkOTItNjNhOTIxYWY4MWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0atYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJs4zh8eVixxlYtXOudMsmIBxYE8xVkSekzSdcDeA/u1LgjQp4A2FAfI OQlqjVdXENHY35eKfKyDu++5TcUfhIJ1xv9jcyTNFrc7tOHCvmCyY8Ym1HQreNxG 0y7tSLjTaBm6+du2Y/AH2dieZIU06AIdYPUpPO1vVaJUBgLUKBZjX5f7uCgqLfe4 m4nKFm67oz5g+jzAcNevDb/NolivISNoJL/frl1KN7TnXt/VkXD1I+pbdEr/8h6X BGuhZrUro+UztoxXeh6+x/N1xS1uXr+GKZNZ9ycrAtiTwVYtVUbFisOuUxj44eji ajiHNLAagwPFZTxHPg33MIvbgUs/pCE= -----END CERTIFICATE-----Generated at Sun Oct 19 22:49:29 2025 by rpki-client