$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa File: 7365ab5e-2536-360e-9125-353c16dd4a7e.roa (raw, json) Hash identifier: sXVIxOTRlueQ+g1sLTr45CQOOQ9CTUG0koje2RXhIqA= Subject key identifier: 3D:45:AD:44:3A:91:94:72:31:F0:B8:4D:FD:AB:08:32:68:13:98:EE Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C21E69A1FCB1196E7AC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 25668 IP address blocks: 209.53.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c2:1e:69:a1:fc:b1:19:6e:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=832c02f8-9554-449c-9b67-ffe878b078ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:c3:9c:2f:a2:54:ee:d9:74:b1:76:b3:16: 43:bd:2d:6a:36:34:a1:e1:e8:89:72:8a:bf:c6:82: 89:2d:10:d0:89:11:59:03:bd:5e:e6:7a:e8:03:da: b6:56:87:5e:ae:3d:53:d3:bc:19:c4:0d:a7:4c:11: 6e:be:ba:a8:eb:d7:0f:fe:ec:d8:55:f1:1f:da:56: d2:e0:44:b9:8a:81:97:d2:db:ee:cc:66:c8:9f:67: 56:b4:de:04:90:18:76:5e:d2:87:3a:16:30:59:ac: de:00:4c:fe:9e:3e:e2:16:77:46:e7:25:7c:ce:fa: 75:67:fd:aa:e7:8e:b5:54:c9:14:fe:4e:a8:7c:9f: e9:6a:69:83:2c:6d:85:eb:ff:46:d9:cd:5d:0f:ad: 2a:03:20:b5:b9:af:cf:c6:7f:b5:06:cc:0f:49:34: 87:2e:1c:ed:32:99:89:a7:83:de:9f:64:ba:e4:78: 74:9e:9a:ec:31:f4:84:68:de:cf:80:6f:7a:58:36: 4a:b4:75:5b:4f:dc:5b:5f:00:c6:a0:36:5f:6f:68: e6:e2:75:aa:92:2f:fd:fd:b7:24:79:8f:87:2a:df: 51:7b:8e:36:1c:69:a3:b0:71:fa:55:22:9b:61:ec: 1c:8c:fe:e4:70:5f:1d:73:24:fb:3f:08:ae:14:09: 86:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:45:AD:44:3A:91:94:72:31:F0:B8:4D:FD:AB:08:32:68:13:98:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7365ab5e-2536-360e-9125-353c16dd4a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:01:da:f4:1c:24:f5:14:dc:e2:84:40:94:e6:b7:af:3f:b3: ab:74:d9:31:35:14:3f:b5:49:ed:f8:20:53:4b:21:dc:a6:e4: 2b:c1:46:c2:30:85:b3:62:b3:ae:49:e7:da:47:0f:64:67:78: e7:9a:65:c3:8f:ca:e5:13:35:cb:d4:76:8f:77:9c:32:a3:92: 8d:76:bc:57:15:b3:e9:30:78:53:b4:ed:49:d3:85:b1:cb:60: bc:b1:78:a1:57:14:30:34:e2:b1:d0:c3:0f:88:e1:46:e0:87: c3:a5:f3:ce:14:61:a6:97:87:96:30:fd:bc:92:fd:e0:34:79: d5:16:3f:3c:9d:33:5f:ad:79:5b:6b:66:68:18:1a:e3:b4:1d: 58:6d:f8:a5:03:bb:49:a3:db:99:57:80:e7:00:3a:ec:f4:0e: c9:86:73:c7:9e:f8:21:6f:cf:49:b9:f4:7a:ef:2d:cb:fd:83: 5c:a8:00:81:05:80:65:85:de:7a:d6:5d:80:52:1f:cd:28:78: 62:f5:56:22:ce:c8:38:72:02:f4:11:79:65:d9:16:d8:ea:3a: 4e:47:6c:09:0b:e7:b8:3c:da:56:43:b6:79:d9:cb:19:33:41: 64:94:f9:09:b8:d0:8a:21:12:49:51:bd:72:78:0f:4b:52:d2: 63:90:a6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcIeaaH8sRluesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ODMyYzAyZjgtOTU1NC00NDljLTliNjctZmZlODc4YjA3OGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN/DnC+iVO7ZdLF2sxZDvS1qNjSh4eiJcoq/ xoKJLRDQiRFZA71e5nroA9q2Voderj1T07wZxA2nTBFuvrqo69cP/uzYVfEf2lbS 4ES5ioGX0tvuzGbIn2dWtN4EkBh2XtKHOhYwWazeAEz+nj7iFndG5yV8zvp1Z/2q 5461VMkU/k6ofJ/pammDLG2F6/9G2c1dD60qAyC1ua/Pxn+1BswPSTSHLhztMpmJ p4Pen2S65Hh0nprsMfSEaN7PgG96WDZKtHVbT9xbXwDGoDZfb2jm4nWqki/9/bck eY+HKt9Re442HGmjsHH6VSKbYewcjP7kcF8dcyT7PwiuFAmGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1FrUQ6kZRyMfC4Tf2rCDJoE5juMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzM2NWFiNWUtMjUzNi0z NjBlLTkxMjUtMzUzYzE2ZGQ0YTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0TXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoB2vQcJPUU3OKEQJTmt68/s6t02TE1FD+1Se34IFNLIdym5CvBRsIw hbNis65J59pHD2RneOeaZcOPyuUTNcvUdo93nDKjko12vFcVs+kweFO07UnThbHL YLyxeKFXFDA04rHQww+I4Ubgh8Ol884UYaaXh5Yw/byS/eA0edUWPzydM1+teVtr ZmgYGuO0HVht+KUDu0mj25lXgOcAOuz0DsmGc8ee+CFvz0m59HrvLcv9g1yoAIEF gGWF3nrWXYBSH80oeGL1ViLOyDhyAvQReWXZFtjqOk5HbAkL57g82lZDtnnZyxkz QWSU+Qm40IohEklRvXJ4D0tS0mOQpjQ= -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:28 2025 by rpki-client