$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa File: 83e056c7-6751-3e7e-aa33-5370a6fbd431.roa (raw, json) Hash identifier: b59LS7xDCok2jp9KFyikj2xIubcrBFTDBvYBjygRvpI= Subject key identifier: 04:42:16:68:6F:AB:F6:DD:54:3F:CE:99:D1:F0:9B:10:4B:89:81:29 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B52A73A5A0C92A36386153500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 7861 IP address blocks: 209.29.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:3a:5a:0c:92:a3:63:86:15:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=a73f311c-9143-4ece-868a-8efdfc50d1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:fd:2e:a3:8f:14:4e:55:d9:ba:a8:ed:ee: 21:aa:3b:31:df:1e:6d:6a:c6:60:53:2b:a7:ae:f5: 46:27:ce:56:36:9a:ab:93:92:e5:14:52:cb:35:27: 39:85:04:12:6c:6e:42:25:11:ea:3f:22:38:e9:9d: 1c:91:5c:c6:28:b3:7f:79:79:c3:c0:b0:28:12:cd: 00:d6:8d:d7:ba:f1:1a:49:f3:4f:24:be:8c:57:a3: 86:18:ad:4c:1c:9b:8a:09:c3:aa:29:e1:d9:fd:6e: 90:ac:e7:f1:c5:4c:68:b5:5e:20:4f:05:df:a1:ec: ab:0c:9b:8d:13:b9:9a:42:38:6a:8b:40:1d:63:33: 32:66:58:fb:c8:56:18:06:cb:d2:30:80:0c:d0:6f: 5e:bb:6d:03:77:2a:3c:1c:83:09:3b:c3:9c:a3:8b: aa:2a:79:8b:82:e7:04:ac:52:0b:8d:01:be:b0:2e: 9d:5c:a4:ef:5a:a9:a4:3d:11:47:c5:28:4b:00:10: 7c:13:d5:46:0f:2f:e6:28:55:aa:d3:e8:e4:2e:9c: a8:3d:0a:84:27:b3:46:57:58:aa:5a:4a:2b:1f:2c: 55:17:cc:60:97:77:eb:9d:59:d9:6c:11:3c:48:7f: f7:01:68:5e:df:3a:8c:44:c1:82:66:27:19:9a:64: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:16:68:6F:AB:F6:DD:54:3F:CE:99:D1:F0:9B:10:4B:89:81:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/83e056c7-6751-3e7e-aa33-5370a6fbd431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c1:6f:1f:a0:71:97:89:87:11:7b:ac:c6:f2:69:51:81:54: 27:ca:1d:20:a9:94:a2:61:69:2e:1d:67:0a:9d:3e:b1:0c:53: 0c:e5:1a:5d:a5:9c:f5:da:48:b7:d6:6f:d6:d9:c7:02:1e:01: e9:87:da:f5:9b:57:31:ab:95:d3:97:19:ee:77:b5:22:35:a9: c4:48:a1:1d:49:6b:43:09:9b:26:9f:d2:c0:23:96:ec:10:75: 8d:db:ab:e1:0f:bf:d3:b7:03:2a:97:4f:92:68:24:2f:a0:cf: a9:d6:d8:23:3a:6f:d3:7c:bc:41:15:b7:5e:b4:2c:4f:2e:c9: d8:81:e3:40:5d:60:61:b3:52:3c:08:49:78:27:36:e6:e2:ec: ce:e9:c9:1e:3d:b3:78:25:83:b8:ff:e6:68:d9:4b:42:eb:8d: 5d:5e:cb:cf:c7:57:c9:09:cc:f2:0d:5f:d4:04:00:d4:dc:18: 93:41:67:62:73:ea:9f:d7:4a:37:4f:e8:32:9e:20:93:06:d6: 4a:0b:e5:24:64:3e:a3:e6:e4:0a:58:e9:85:ce:d3:f3:89:f8: 2f:0a:de:81:27:b9:71:b0:23:4d:02:2a:b6:d0:4c:b3:92:18: b7:66:9a:07:c3:e2:be:6f:7e:1a:2d:9c:68:ab:7d:55:ed:17: 83:c8:b6:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpzpaDJKjY4YVNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YTczZjMxMWMtOTE0My00ZWNlLTg2OGEtOGVmZGZjNTBkMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubv9LqOPFE5V2bqo7e4hqjsx3x5tasZgUyun rvVGJ85WNpqrk5LlFFLLNSc5hQQSbG5CJRHqPyI46Z0ckVzGKLN/eXnDwLAoEs0A 1o3XuvEaSfNPJL6MV6OGGK1MHJuKCcOqKeHZ/W6QrOfxxUxotV4gTwXfoeyrDJuN E7maQjhqi0AdYzMyZlj7yFYYBsvSMIAM0G9eu20Ddyo8HIMJO8Oco4uqKnmLgucE rFILjQG+sC6dXKTvWqmkPRFHxShLABB8E9VGDy/mKFWq0+jkLpyoPQqEJ7NGV1iq WkorHyxVF8xgl3frnVnZbBE8SH/3AWhe3zqMRMGCZicZmmQGZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARCFmhvq/bdVD/OmdHwmxBLiYEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODNlMDU2YzctNjc1MS0z ZTdlLWFhMzMtNTM3MGE2ZmJkNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPBbx+gcZeJhxF7rMbyaVGBVCfKHSCplKJhaS4dZwqdPrEMUwzlGl2l nPXaSLfWb9bZxwIeAemH2vWbVzGrldOXGe53tSI1qcRIoR1Ja0MJmyaf0sAjluwQ dY3bq+EPv9O3AyqXT5JoJC+gz6nW2CM6b9N8vEEVt160LE8uydiB40BdYGGzUjwI SXgnNubi7M7pyR49s3glg7j/5mjZS0LrjV1ey8/HV8kJzPINX9QEANTcGJNBZ2Jz 6p/XSjdP6DKeIJMG1koL5SRkPqPm5ApY6YXO0/OJ+C8K3oEnuXGwI00CKrbQTLOS GLdmmgfD4r5vfhotnGirfVXtF4PItps= -----END CERTIFICATE-----Generated at Mon Oct 20 03:29:08 2025 by rpki-client