$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa File: 56965208-8eba-3b97-80ce-42860ac58653.roa (raw, json) Hash identifier: Vs0qsDAmuR+k1rnh70FpIz8KLltgay6hVE7TazzUBpE= Subject key identifier: 99:ED:F8:DA:00:29:12:50:4B:E1:7C:DD:DD:37:3A:C3:91:48:4B:0B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A7373B881B40D2C03BF000 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 7861 IP address blocks: 209.91.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:37:3b:88:1b:40:d2:c0:3b:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=1c909da7-ccf3-4fc1-9cd4-07eea21a048b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:ac:05:44:5e:8f:c0:17:fa:05:6a:85:67: 71:7c:a3:26:e3:40:21:06:0d:e9:07:81:99:4b:3d: 2f:2e:15:68:67:fb:75:8d:a1:6c:e2:d0:80:e6:70: 84:36:8b:30:dc:e3:98:6e:33:13:41:79:26:7c:b1: 48:b6:b5:df:26:8a:50:93:f9:ff:53:82:20:ac:18: f7:71:0e:a2:83:65:b0:20:0c:29:95:2b:b6:94:32: 70:98:50:65:ff:6f:a2:7a:08:7d:d3:ff:94:35:77: 56:7a:5e:f8:f7:99:bc:92:e4:35:0a:8e:17:f8:85: 89:66:3d:b0:7e:00:17:53:8e:97:fb:96:3a:ad:24: b1:05:7a:95:84:5d:c1:34:1c:c9:88:cb:06:a8:38: b5:ba:56:49:c2:49:02:e3:03:be:7f:bf:99:64:48: 95:76:23:27:e6:c4:a8:83:46:1d:f9:4a:1b:94:a2: f7:0d:05:a5:c8:6f:d8:31:1c:c3:35:39:46:18:cc: 11:8c:39:7d:78:09:a7:cd:7d:90:e1:af:4e:b0:77: e3:e3:2a:96:13:30:cd:9a:41:7c:ce:d2:39:22:a7: c7:43:45:bd:fd:c1:67:c9:78:b0:b9:9e:98:c9:3f: f3:ba:c2:07:94:51:5c:6b:0a:a1:3d:c1:aa:a5:1a: 2e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:F8:DA:00:29:12:50:4B:E1:7C:DD:DD:37:3A:C3:91:48:4B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56965208-8eba-3b97-80ce-42860ac58653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5d:13:40:a7:b4:a9:df:e8:3e:45:d8:1e:72:92:ae:75:4f: d4:5f:0b:6b:8e:83:2e:fc:71:43:6a:5a:8a:85:c7:f7:4f:f6: a9:61:51:b5:77:a6:2f:39:7e:92:5a:c1:c6:55:da:2e:e6:a3: f8:0a:80:8f:66:db:27:43:b2:bf:3a:d3:73:f5:30:7b:04:5d: e9:b9:9c:4b:ae:1d:11:e2:2f:4a:6d:c0:c4:11:f2:ef:ea:c5: 67:04:91:4b:a0:cf:92:94:4c:cc:77:89:19:dd:74:f1:a0:52: 43:8e:82:c2:36:78:ed:68:db:18:f4:bc:70:f6:f7:f0:70:ee: e8:60:54:dc:44:59:08:3a:0f:4f:16:91:5d:27:b5:34:4d:79: 33:0c:37:95:4a:50:b2:07:22:ea:5a:7f:e3:a3:52:51:f9:b7: 08:d3:4b:7f:6b:43:1e:0d:1e:3b:31:2f:d4:7b:18:2c:c0:ac: af:cc:c9:58:ef:de:09:08:48:76:21:e5:05:60:46:a3:9a:1c: 90:ed:27:39:a2:6b:f5:b3:c3:95:52:80:82:fe:54:24:e7:20: 4e:f9:38:dd:a2:5f:10:f5:18:35:f1:0a:87:60:60:3e:1c:30: 57:a0:ed:70:22:f8:97:3d:85:04:b5:ff:e7:10:3d:ed:c0:b2: 62:0d:da:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpzc7iBtA0sA78AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MWM5MDlkYTctY2NmMy00ZmMxLTljZDQtMDdlZWEyMWEwNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSOsBURej8AX+gVqhWdxfKMm40AhBg3pB4GZ Sz0vLhVoZ/t1jaFs4tCA5nCENosw3OOYbjMTQXkmfLFItrXfJopQk/n/U4IgrBj3 cQ6ig2WwIAwplSu2lDJwmFBl/2+iegh90/+UNXdWel7495m8kuQ1Co4X+IWJZj2w fgAXU46X+5Y6rSSxBXqVhF3BNBzJiMsGqDi1ulZJwkkC4wO+f7+ZZEiVdiMn5sSo g0Yd+UoblKL3DQWlyG/YMRzDNTlGGMwRjDl9eAmnzX2Q4a9OsHfj4yqWEzDNmkF8 ztI5IqfHQ0W9/cFnyXiwuZ6YyT/zusIHlFFcawqhPcGqpRoutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnt+NoAKRJQS+F83d03OsORSEsLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTY5NjUyMDgtOGViYS0z Yjk3LTgwY2UtNDI4NjBhYzU4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADddE0CntKnf6D5F2B5ykq51T9RfC2uOgy78cUNqWoqFx/dP9qlhUbV3 pi85fpJawcZV2i7mo/gKgI9m2ydDsr8603P1MHsEXem5nEuuHRHiL0ptwMQR8u/q xWcEkUugz5KUTMx3iRnddPGgUkOOgsI2eO1o2xj0vHD29/Bw7uhgVNxEWQg6D08W kV0ntTRNeTMMN5VKULIHIupaf+OjUlH5twjTS39rQx4NHjsxL9R7GCzArK/MyVjv 3gkISHYh5QVgRqOaHJDtJzmia/Wzw5VSgIL+VCTnIE75ON2iXxD1GDXxCodgYD4c MFeg7XAi+Jc9hQS1/+cQPe3AsmIN2s0= -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:04 2025 by rpki-client