$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa File: 54eab883-39fe-3183-a9f2-014900f1b617.roa (raw, json) Hash identifier: e04gGx/yhXDgMcPzr1hvtFxZpZMA/lqxiw2HZeU5xHM= Subject key identifier: 52:96:F8:23:3B:B6:A3:AB:FE:C6:D7:6C:22:5B:8F:57:1A:EE:98:0A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B0736FA169C5793DEA33600 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.202.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:36:fa:16:9c:57:93:de:a3:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e05acaf0-f1f5-434d-b2ca-f030385ec9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:ba:19:18:9d:ed:d1:16:57:1e:76:9f:3b: e7:4a:1b:bd:d4:f8:1e:09:66:8e:cd:bf:37:7a:57: 3f:9c:12:ba:8c:e9:d8:f0:bd:2c:34:dc:6b:89:ae: dc:bc:7e:1d:f0:f7:af:09:6a:f2:d9:08:6f:a4:e0: 56:20:d1:2b:15:41:f3:02:25:45:82:7a:89:50:62: 97:cd:cc:da:ed:48:34:3e:05:b3:07:7a:6b:c5:d6: a9:52:e6:d9:22:36:ad:9d:3c:f0:d7:5a:a1:da:a0: ee:da:a6:45:8d:93:30:d3:b1:9c:25:b5:c2:06:b1: a1:c5:0b:9a:5b:a1:d5:76:fc:ad:ef:30:dc:ac:0a: a0:36:da:fc:4b:87:b6:ff:fa:e2:42:ce:14:b0:17: 87:35:3f:84:08:cf:da:20:a8:7d:f0:84:9c:93:f2: 00:87:1b:53:dd:c6:ef:7d:bc:4c:47:4a:39:31:40: 5e:55:d4:7e:c2:2a:3d:10:be:49:7a:4d:94:23:01: ba:13:a8:01:3a:e1:70:af:cb:13:98:a9:ea:e9:70: 81:61:f4:e5:ff:d1:69:b7:52:4f:64:14:10:5f:79: 0c:10:88:11:0c:1a:4a:5a:92:a9:66:83:08:40:34: 57:4c:69:c7:39:a6:04:b8:a6:89:d3:2a:f5:78:8a: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:96:F8:23:3B:B6:A3:AB:FE:C6:D7:6C:22:5B:8F:57:1A:EE:98:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/54eab883-39fe-3183-a9f2-014900f1b617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.202.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:c2:ad:9d:5b:40:b9:d3:90:56:e1:e8:9e:a6:a4:58:cd:f7: 71:21:10:dc:11:85:0d:64:4e:14:92:e0:41:c0:4d:e5:cc:6e: 28:49:13:69:62:4a:c9:a4:69:3e:94:d3:c4:ca:17:63:94:83: b6:8d:d7:ac:57:fa:97:6d:b7:ab:9e:57:4b:bf:98:36:45:ab: 55:81:21:58:cf:1c:74:a0:cd:00:c9:94:e2:ec:94:58:3d:af: 52:31:ce:a0:c7:8a:87:2c:15:4e:f0:ba:8b:b4:57:f2:ab:e3: 36:7c:6a:63:f1:a3:63:29:41:66:4a:20:ec:3b:27:c4:f1:a6: c1:03:30:d7:d6:fd:fd:dd:7b:73:31:2f:f9:8e:d8:39:ce:85: c2:ea:ea:cd:78:28:66:04:8f:e9:8a:71:5d:71:1e:f1:c6:2a: 0b:9d:c1:a7:ae:bf:34:71:90:f7:24:85:0f:4e:49:76:ce:04: 93:00:81:07:2a:4e:99:7d:85:68:f2:91:aa:1b:72:bd:22:b7: 44:9b:b7:82:04:9b:ff:11:42:3c:6c:4d:9f:fe:56:f9:5f:70: 45:16:9c:d5:c7:bb:e0:3c:6d:54:f9:fc:b5:a3:b8:ee:42:22: d7:cd:8f:16:55:ba:9a:fc:74:c0:ea:b0:27:72:98:70:10:5d: 90:57:7b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzb6FpxXk96jNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTA1YWNhZjAtZjFmNS00MzRkLWIyY2EtZjAzMDM4NWVjOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuq6GRid7dEWVx52nzvnShu91PgeCWaOzb83 elc/nBK6jOnY8L0sNNxria7cvH4d8PevCWry2QhvpOBWINErFUHzAiVFgnqJUGKX zcza7Ug0PgWzB3prxdapUubZIjatnTzw11qh2qDu2qZFjZMw07GcJbXCBrGhxQua W6HVdvyt7zDcrAqgNtr8S4e2//riQs4UsBeHNT+ECM/aIKh98ISck/IAhxtT3cbv fbxMR0o5MUBeVdR+wio9EL5Jek2UIwG6E6gBOuFwr8sTmKnq6XCBYfTl/9Fpt1JP ZBQQX3kMEIgRDBpKWpKpZoMIQDRXTGnHOaYEuKaJ0yr1eIplfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKW+CM7tqOr/sbXbCJbj1ca7pgKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTRlYWI4ODMtMzlmZS0z MTgzLWE5ZjItMDE0OTAwZjFiNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0cpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/CrZ1bQLnTkFbh6J6mpFjN93EhENwRhQ1kThSS4EHATeXMbihJE2li SsmkaT6U08TKF2OUg7aN16xX+pdtt6ueV0u/mDZFq1WBIVjPHHSgzQDJlOLslFg9 r1IxzqDHiocsFU7wuou0V/Kr4zZ8amPxo2MpQWZKIOw7J8TxpsEDMNfW/f3de3Mx L/mO2DnOhcLq6s14KGYEj+mKcV1xHvHGKgudwaeuvzRxkPckhQ9OSXbOBJMAgQcq Tpl9hWjykaobcr0it0Sbt4IEm/8RQjxsTZ/+VvlfcEUWnNXHu+A8bVT5/LWjuO5C ItfNjxZVupr8dMDqsCdymHAQXZBXew4= -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:08 2025 by rpki-client