$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa File: 86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa (raw, json) Hash identifier: vKMf7l+zsWqW8uYUhgKE32F9lSOWNr0WnF2P9oq0s0Y= Subject key identifier: 50:2C:2E:44:AB:BF:0F:9F:84:90:9C:B6:A8:4F:CC:00:63:0F:E8:6F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11CBFA710445A5034CD180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 15247 IP address blocks: 209.53.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:cb:fa:71:04:45:a5:03:4c:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=65f18d76-e2c7-4d47-8be2-b2e9decf83ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:36:ae:71:c0:63:2c:ee:69:6c:2b:9c:83: d2:73:e9:3d:be:cc:a8:10:27:9d:85:d3:9f:de:01: 89:a4:87:eb:1e:72:2b:fb:98:00:5e:4d:ba:4b:df: 09:22:e5:31:dc:e5:56:a1:db:a3:73:92:51:bd:18: 29:79:00:70:6d:06:91:06:7c:37:4b:29:07:b7:0f: 49:eb:2c:aa:dc:28:85:b2:63:50:17:22:c5:5b:cc: 6a:2e:6a:b8:76:46:ee:8a:45:d4:55:07:b0:d9:0c: e6:f7:76:19:63:e5:a7:db:e4:2a:f5:63:b5:0b:46: d0:73:95:f8:37:8b:e5:b2:a8:ed:f1:a0:e5:3c:00: b2:b6:28:46:df:bc:1b:9f:6b:97:88:b7:f1:ec:0e: 13:58:cf:10:6a:42:1c:7b:a1:21:20:98:48:51:a5: d1:0c:b2:76:04:50:45:fd:18:8d:6a:d7:ef:81:41: 3b:d9:bd:11:dc:f2:a9:59:a7:ae:b2:2d:5e:c6:ea: 50:db:d5:cf:3e:b2:1b:57:08:77:0c:ce:7a:91:43: e0:fd:b2:38:2e:6c:22:a3:95:da:29:b6:28:cf:42: 27:c2:30:3f:1c:77:29:91:8b:74:b5:96:bc:cf:6b: 84:ef:ea:a8:58:92:96:46:e5:ce:ca:dd:12:8a:c8: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:2E:44:AB:BF:0F:9F:84:90:9C:B6:A8:4F:CC:00:63:0F:E8:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/86e89e9e-9f96-3bd0-b941-f47f1e4bba82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ad:1d:df:43:4b:03:fc:11:15:5c:27:5d:53:8b:fe:e6:fa: 4e:38:5f:04:36:7d:05:3c:62:4f:43:34:a3:53:73:aa:6f:c7: 57:8a:7d:5e:b3:cd:f8:03:f3:45:79:12:4a:f2:c7:8f:4f:df: d6:ca:4e:cb:ca:02:01:1f:14:c0:d5:27:08:a4:48:5b:bf:16: 5b:d6:ed:bb:e8:82:ca:76:b0:16:1f:90:06:43:22:53:d2:7b: 4e:7a:1e:b4:ec:db:6d:33:fa:fa:18:f1:24:6e:b5:af:ca:28: 46:53:63:5d:53:98:27:01:be:6b:6d:6e:34:cd:cc:f0:aa:1d: d8:b4:e0:6d:63:e7:bc:22:96:9b:cf:6d:e4:c0:14:07:13:55: ca:1b:c1:2c:1f:9c:0e:1d:1b:72:55:7a:6a:a4:fd:4b:05:64: 52:fe:99:c2:d0:6c:70:01:90:9f:2c:5a:9e:fd:24:47:c2:98: a5:a9:d4:0a:9c:a0:1d:f6:09:96:54:25:87:01:2f:d8:d5:ce: c6:5b:ab:da:90:54:9e:f7:bd:09:5e:50:e1:d5:57:39:22:df: 6f:a2:68:e1:a4:5c:fb:8e:99:d4:7e:0f:0f:b4:38:ba:32:47: 57:8c:f1:b5:04:f5:22:f9:fc:f1:8e:07:9f:50:78:e8:54:d9: 17:6e:0e:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcv6cQRFpQNM0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NjVmMThkNzYtZTJjNy00ZDQ3LThiZTItYjJlOWRlY2Y4M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYE2rnHAYyzuaWwrnIPSc+k9vsyoECedhdOf 3gGJpIfrHnIr+5gAXk26S98JIuUx3OVWodujc5JRvRgpeQBwbQaRBnw3SykHtw9J 6yyq3CiFsmNQFyLFW8xqLmq4dkbuikXUVQew2Qzm93YZY+Wn2+Qq9WO1C0bQc5X4 N4vlsqjt8aDlPACytihG37wbn2uXiLfx7A4TWM8QakIce6EhIJhIUaXRDLJ2BFBF /RiNatfvgUE72b0R3PKpWaeusi1exupQ29XPPrIbVwh3DM56kUPg/bI4Lmwio5Xa KbYoz0InwjA/HHcpkYt0tZa8z2uE7+qoWJKWRuXOyt0Sisj63QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAsLkSrvw+fhJCctqhPzABjD+hvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODZlODllOWUtOWY5Ni0z YmQwLWI5NDEtZjQ3ZjFlNGJiYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKytHd9DSwP8ERVcJ11Ti/7m+k44XwQ2fQU8Yk9DNKNTc6pvx1eKfV6z zfgD80V5Ekryx49P39bKTsvKAgEfFMDVJwikSFu/FlvW7bvogsp2sBYfkAZDIlPS e056HrTs220z+voY8SRuta/KKEZTY11TmCcBvmttbjTNzPCqHdi04G1j57wilpvP beTAFAcTVcobwSwfnA4dG3JVemqk/UsFZFL+mcLQbHABkJ8sWp79JEfCmKWp1Aqc oB32CZZUJYcBL9jVzsZbq9qQVJ73vQleUOHVVzki32+iaOGkXPuOmdR+Dw+0OLoy R1eM8bUE9SL5/PGOB59QeOhU2RduDqY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:35:17 2025 by rpki-client