$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa File: 7f94ca6f-ad93-3660-886e-eb166a876a40.roa (raw, json) Hash identifier: jiil1wssin6bPny/9hnNFfg3OH2mRuRIWsGSiJ25cFs= Subject key identifier: D5:1A:F4:5E:0A:97:26:33:FB:D8:02:86:37:24:C6:E2:00:BB:52:B2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4976A744D0FA69CC7060AA80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19341 IP address blocks: 209.20.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:a7:44:d0:fa:69:cc:70:60:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9cf25498-35f6-4012-9076-732a27684829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:24:41:2f:d3:cf:21:26:a0:33:8a:d3:ec: 8e:7c:4e:67:e3:76:1d:12:d4:68:60:8d:5a:56:b0: 28:73:f7:d4:00:ee:25:91:2f:71:c4:aa:d3:89:49: 5d:ae:7d:e2:3c:73:6c:1e:45:cd:07:9f:db:b3:2d: ea:50:6a:73:02:7b:52:35:5c:5b:94:3b:80:5a:a8: 18:71:b9:0d:88:c0:24:1b:90:10:77:a2:c7:d3:a4: 9d:57:8d:6f:66:21:cf:11:01:b6:5f:dd:b5:a9:60: c8:3b:37:36:93:4a:23:2e:78:0d:45:b6:7c:76:20: 8d:67:3f:ef:f8:22:e1:e1:be:81:c3:bd:46:84:07: b5:52:26:66:05:f8:ec:47:bf:2a:0a:68:c6:49:b0: 19:7e:2c:9b:d6:52:8f:ee:78:c6:51:18:b3:62:0c: 63:61:d3:46:70:38:54:f7:cb:b0:6a:6b:45:cc:5e: 70:e6:26:fa:ed:93:b0:1a:cc:b3:e6:fa:0c:c9:28: 81:f8:b5:c8:b5:de:fb:be:1a:b2:15:14:3c:e3:1e: 3c:cc:97:12:eb:9e:25:26:70:59:04:de:de:d3:4d: 4a:e6:37:08:d4:2f:68:c6:c5:c1:b0:0a:db:c5:30: 2d:ac:e6:1c:e0:e3:88:31:6f:2d:d1:85:f0:52:ed: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1A:F4:5E:0A:97:26:33:FB:D8:02:86:37:24:C6:E2:00:BB:52:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:7d:90:fa:c0:1c:0b:81:55:83:e7:67:82:86:24:73:36:23: de:83:f3:2a:59:1b:1a:22:c1:e4:95:cd:82:e4:b8:fd:81:16: c2:5e:9d:87:ae:c9:bb:14:2f:06:36:68:89:86:53:c4:00:d2: 54:09:68:5d:0c:b3:61:28:b6:8f:c2:0d:cc:1c:10:89:16:a2: 1a:c1:cb:6a:22:29:bb:d9:f8:4c:b4:0c:60:26:7b:3d:4d:1a: 4e:4a:19:2c:87:54:62:37:e5:cd:bd:4e:4c:93:d0:bf:27:f0: e1:c7:b6:9e:75:74:e0:4c:68:6e:e5:de:05:33:4c:3e:42:2f: 70:8a:05:40:01:cd:27:36:81:ee:7c:00:ff:c1:f4:56:39:fc: c0:32:0a:33:bd:1a:58:78:53:34:60:d0:79:97:47:1a:7e:ea: 22:34:93:72:8f:03:b0:bb:16:d7:12:3a:13:47:0d:a6:c2:da: 25:98:6d:6c:d7:7f:51:05:7d:ec:46:1a:ed:09:4b:82:10:14: fb:c9:28:ba:63:e8:70:b5:da:3e:99:21:61:62:73:aa:ff:c8: 70:5c:41:59:71:a5:f8:a5:c9:c5:64:1f:5b:9d:70:15:68:cb: 63:b6:80:18:9a:ec:d5:b8:32:ba:99:cf:c7:c2:d5:dc:aa:f4: 33:8f:0b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdqdE0PppzHBgqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWNmMjU0OTgtMzVmNi00MDEyLTkwNzYtNzMyYTI3Njg0ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw8kQS/TzyEmoDOK0+yOfE5n43YdEtRoYI1a VrAoc/fUAO4lkS9xxKrTiUldrn3iPHNsHkXNB5/bsy3qUGpzAntSNVxblDuAWqgY cbkNiMAkG5AQd6LH06SdV41vZiHPEQG2X921qWDIOzc2k0ojLngNRbZ8diCNZz/v +CLh4b6Bw71GhAe1UiZmBfjsR78qCmjGSbAZfiyb1lKP7njGURizYgxjYdNGcDhU 98uwamtFzF5w5ib67ZOwGsyz5voMySiB+LXItd77vhqyFRQ84x48zJcS654lJnBZ BN7e001K5jcI1C9oxsXBsArbxTAtrOYc4OOIMW8t0YXwUu1gSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUa9F4KlyYz+9gChjckxuIAu1KyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2Y5NGNhNmYtYWQ5My0z NjYwLTg4NmUtZWIxNjZhODc2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOF9kPrAHAuBVYPnZ4KGJHM2I96D8ypZGxoiweSVzYLkuP2BFsJenYeu ybsULwY2aImGU8QA0lQJaF0Ms2Eoto/CDcwcEIkWohrBy2oiKbvZ+Ey0DGAmez1N Gk5KGSyHVGI35c29TkyT0L8n8OHHtp51dOBMaG7l3gUzTD5CL3CKBUABzSc2ge58 AP/B9FY5/MAyCjO9Glh4UzRg0HmXRxp+6iI0k3KPA7C7FtcSOhNHDabC2iWYbWzX f1EFfexGGu0JS4IQFPvJKLpj6HC12j6ZIWFic6r/yHBcQVlxpfilycVkH1udcBVo y2O2gBia7NW4MrqZz8fC1dyq9DOPC4s= -----END CERTIFICATE-----Generated at Sun Oct 11 23:50:00 2026 by rpki-client