$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa File: 7f94ca6f-ad93-3660-886e-eb166a876a40.roa (raw, json) Hash identifier: XDaQtasW3yLG0dChkT56ocwKirK/GcTQU1FmUMn8GQQ= Subject key identifier: D0:0D:81:A2:BF:51:3B:E0:35:E9:3D:97:40:F8:E0:0C:57:DC:71:30 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B36BC52382F3D3341EFD6B650 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 19341 IP address blocks: 209.20.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:52:38:2f:3d:33:41:ef:d6:b6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=84fc94a0-a3f9-4b5d-b801-e16b681c52d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bc:37:67:20:f3:d9:a1:a3:2f:a8:d0:bb:b5: 14:70:1e:4e:e8:56:0e:b6:4d:72:0f:e1:93:5c:d6: 56:0e:e1:93:42:bf:d8:03:a2:3f:42:53:09:f7:71: 55:8f:79:62:3b:21:57:53:3e:52:c4:49:b2:1b:86: f0:b4:d3:ff:68:9a:f3:5e:52:28:df:f9:e9:05:c3: aa:02:c8:b5:08:b7:24:b8:51:1f:cf:ad:60:b2:36: f1:22:e0:08:ae:b9:d0:5b:9a:5b:f2:c2:f3:5a:1c: 28:76:38:8d:95:fc:b7:08:3b:a0:83:70:75:74:66: 31:48:0e:ab:99:bb:03:2f:6b:f8:fa:f6:98:37:9f: 1f:42:22:fe:b1:7e:c2:df:b2:42:4f:97:60:35:d0: 63:f9:be:57:c2:98:8a:c9:6f:f7:06:9b:2e:47:c0: 69:fa:40:3d:e0:7e:c7:89:91:c9:0f:71:4c:b4:04: a8:5d:3a:95:f4:b6:9b:81:5c:ce:9f:fc:21:84:cc: 1e:13:63:4e:de:16:f7:23:d9:8e:3c:97:77:bf:12: 9d:ff:3b:39:50:08:5a:a3:6a:14:64:38:a7:d3:1c: 0c:87:28:89:6c:64:73:3e:bb:86:e1:ef:55:2b:8e: 79:df:1b:53:27:65:3c:b1:25:0a:2f:38:fa:44:bd: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0D:81:A2:BF:51:3B:E0:35:E9:3D:97:40:F8:E0:0C:57:DC:71:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e2:ff:f2:dc:41:b7:4a:1e:f4:5e:73:e1:74:90:9f:54:39: 15:e7:48:84:55:c9:22:4b:f6:b5:69:c1:de:da:c9:87:80:4b: 59:a7:74:8a:d2:bd:9d:4f:2c:f8:17:22:c3:94:33:89:ec:09: b2:c2:10:f9:41:98:a8:06:c4:c0:e4:bf:a0:8a:e8:c1:4a:82: a2:a2:8d:8e:8e:08:a3:c7:e7:c4:0a:01:02:76:3a:43:d3:5a: 81:d1:24:7f:d1:e4:0c:6a:31:46:7e:e2:9a:ec:24:5a:65:c8: 1b:15:8a:72:ba:6e:af:f8:cd:3a:6b:7b:13:39:42:41:36:68: 4f:aa:30:5b:29:de:a6:06:20:2d:ba:cd:37:22:1b:f1:bb:00: a5:3f:59:34:a5:1a:4e:24:36:c2:b2:04:ce:b8:d1:76:f7:bd: 44:57:ff:88:3c:84:d9:b6:56:80:0e:63:6f:7a:24:c7:bf:c8: d6:b5:32:c0:fe:cd:39:ef:ec:a4:94:03:3e:bf:8c:0a:92:ba: 8a:34:48:55:98:71:53:df:a7:40:4b:63:f5:f5:d9:95:14:81: d9:0a:ab:c1:4d:1f:31:1d:15:e9:78:bc:0b:a0:f7:10:80:87: de:e6:19:72:fa:b2:55:15:70:ee:6d:7f:21:c2:01:ac:a3:8e: ed:18:25:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFI4Lz0zQe/WtlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk ODRmYzk0YTAtYTNmOS00YjVkLWI4MDEtZTE2YjY4MWM1MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7w3ZyDz2aGjL6jQu7UUcB5O6FYOtk1yD+GT XNZWDuGTQr/YA6I/QlMJ93FVj3liOyFXUz5SxEmyG4bwtNP/aJrzXlIo3/npBcOq Asi1CLckuFEfz61gsjbxIuAIrrnQW5pb8sLzWhwodjiNlfy3CDugg3B1dGYxSA6r mbsDL2v4+vaYN58fQiL+sX7C37JCT5dgNdBj+b5XwpiKyW/3BpsuR8Bp+kA94H7H iZHJD3FMtASoXTqV9LabgVzOn/whhMweE2NO3hb3I9mOPJd3vxKd/zs5UAhao2oU ZDin0xwMhyiJbGRzPruG4e9VK4553xtTJ2U8sSUKLzj6RL0WuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNANgaK/UTvgNek9l0D44AxX3HEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2Y5NGNhNmYtYWQ5My0z NjYwLTg4NmUtZWIxNjZhODc2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHi//LcQbdKHvRec+F0kJ9UORXnSIRVySJL9rVpwd7ayYeAS1mndIrS vZ1PLPgXIsOUM4nsCbLCEPlBmKgGxMDkv6CK6MFKgqKijY6OCKPH58QKAQJ2OkPT WoHRJH/R5AxqMUZ+4prsJFplyBsVinK6bq/4zTprexM5QkE2aE+qMFsp3qYGIC26 zTciG/G7AKU/WTSlGk4kNsKyBM640Xb3vURX/4g8hNm2VoAOY296JMe/yNa1MsD+ zTnv7KSUAz6/jAqSuoo0SFWYcVPfp0BLY/X12ZUUgdkKq8FNHzEdFel4vAug9xCA h97mGXL6slUVcO5tfyHCAayjju0YJfA= -----END CERTIFICATE-----Generated at Sun Oct 19 20:17:51 2025 by rpki-client