$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/58207235-6f3e-3ffd-9f4d-54297f9fdb8e.roa File: 58207235-6f3e-3ffd-9f4d-54297f9fdb8e.roa (raw, json) Hash identifier: WX8H0C+ctZtm1OtqA1fMmLYHJQCCG8Gslz1oPa5a7cc= Subject key identifier: 35:62:16:BE:97:5F:8E:BC:90:54:D1:71:46:B7:A5:D3:64:9D:D5:82 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973F78050F81C08CF109AD8 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/58207235-6f3e-3ffd-9f4d-54297f9fdb8e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15247 IP address blocks: 209.53.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f7:80:50:f8:1c:08:cf:10:9a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d57669d7-e98b-4435-83a2-cdf2ee1d3293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:0a:54:a7:ad:0a:fe:1e:a7:ef:72:92:aa: 1b:c0:6a:46:8a:a3:f9:f6:e2:21:de:2e:b4:d8:27: 30:e7:b6:34:6d:37:d6:14:b3:3f:a2:cd:a1:d1:72: 4b:b8:8e:75:e6:7d:6c:d1:16:f8:db:f8:6b:b4:f6: 78:e2:4d:69:00:ff:bf:80:f3:1c:9d:70:c8:2d:9f: db:93:61:5f:a7:51:c0:69:77:58:f0:f8:18:1f:97: 64:eb:72:dc:2b:52:18:f5:aa:4c:0d:28:47:2b:1a: 34:4e:0c:03:a1:5d:bd:1a:e3:b2:b0:8b:01:fc:ac: 79:04:96:10:57:99:b5:d0:34:1f:33:68:74:3b:97: 76:b3:ba:16:12:73:59:b3:91:95:4f:26:01:e0:4a: 21:1f:a9:47:b4:2a:f8:1b:81:71:f0:f9:89:b6:b8: a9:c1:aa:e1:d4:dc:a6:e5:90:86:e3:e9:f2:5e:81: d6:1d:13:3d:6a:e9:1a:66:dc:21:4f:6b:50:44:ec: f3:64:44:51:73:79:8c:e7:c4:a2:8d:61:90:f3:5d: 2e:30:26:20:3c:12:c1:e7:db:48:9a:06:31:b4:73: fa:39:86:7f:d4:ca:45:6b:ce:51:bb:94:52:31:6d: 79:ab:09:88:18:de:4c:c4:6f:8b:d6:e6:25:e4:2a: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:16:BE:97:5F:8E:BC:90:54:D1:71:46:B7:A5:D3:64:9D:D5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/58207235-6f3e-3ffd-9f4d-54297f9fdb8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:82:de:e9:ca:58:5e:a6:82:5d:86:43:5d:ea:46:a2:89:f0: 97:7f:91:4a:f6:99:1f:07:b9:9f:7a:29:38:54:cd:ca:7d:db: 4e:c0:8c:55:b6:2b:d1:45:4c:e1:dc:fb:fb:8b:e3:48:4e:be: 55:4f:0f:20:60:6b:59:63:c5:cf:ed:ea:3d:e1:56:e2:ce:24: 45:a5:81:6c:86:00:3e:74:bc:dc:dc:ff:ca:83:c8:9b:ff:e7: 2d:b9:e8:d7:a1:8a:22:6a:a4:be:c5:cd:cd:a7:65:69:20:94: 99:28:01:67:6b:0c:44:73:9e:0e:76:ec:79:2b:2a:db:b4:fc: e3:6c:99:62:8e:b2:d7:bd:7b:ed:c2:30:45:2c:ff:c0:ea:24: 86:6b:0e:e6:61:2c:e7:20:dd:e1:73:e2:ee:ad:8b:81:25:06: 69:c6:67:cb:02:5c:30:5c:5b:16:13:6c:90:64:2c:61:2d:f0: 7c:7c:c4:6c:dd:33:d2:dd:79:7c:c4:88:30:01:c8:57:97:df: f8:cd:d8:48:4d:5c:55:2b:b5:a2:60:cb:1c:e2:24:e1:a0:d8: 96:5c:d5:dd:0a:c3:b6:20:e3:da:ec:5e:8d:fc:bf:66:89:63: f8:53:33:b1:e5:c7:ef:17:68:bf:24:77:1e:a1:38:9d:60:54: e5:8f:0e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/eAUPgcCM8QmtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU3NjY5ZDctZTk4Yi00NDM1LTgzYTItY2RmMmVlMWQzMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+EKVKetCv4ep+9ykqobwGpGiqP59uIh3i60 2Ccw57Y0bTfWFLM/os2h0XJLuI515n1s0Rb42/hrtPZ44k1pAP+/gPMcnXDILZ/b k2Ffp1HAaXdY8PgYH5dk63LcK1IY9apMDShHKxo0TgwDoV29GuOysIsB/Kx5BJYQ V5m10DQfM2h0O5d2s7oWEnNZs5GVTyYB4EohH6lHtCr4G4Fx8PmJtripwarh1Nym 5ZCG4+nyXoHWHRM9aukaZtwhT2tQROzzZERRc3mM58SijWGQ810uMCYgPBLB59tI mgYxtHP6OYZ/1MpFa85Ru5RSMW15qwmIGN5MxG+L1uYl5CpAPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDViFr6XX468kFTRcUa3pdNkndWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTgyMDcyMzUtNmYzZS0z ZmZkLTlmNGQtNTQyOTdmOWZkYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqC3unKWF6mgl2GQ13qRqKJ8Jd/kUr2mR8HuZ96KThUzcp9207AjFW2 K9FFTOHc+/uL40hOvlVPDyBga1ljxc/t6j3hVuLOJEWlgWyGAD50vNzc/8qDyJv/ 5y256NehiiJqpL7Fzc2nZWkglJkoAWdrDERzng527HkrKtu0/ONsmWKOste9e+3C MEUs/8DqJIZrDuZhLOcg3eFz4u6ti4ElBmnGZ8sCXDBcWxYTbJBkLGEt8Hx8xGzd M9LdeXzEiDAByFeX3/jN2EhNXFUrtaJgyxziJOGg2JZc1d0Kw7Yg49rsXo38v2aJ Y/hTM7Hlx+8XaL8kdx6hOJ1gVOWPDgA= -----END CERTIFICATE-----Generated at Sat Oct 3 06:25:52 2026 by rpki-client