$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9bc07377-9909-342b-81e9-b1529eb06330.roa File: 9bc07377-9909-342b-81e9-b1529eb06330.roa (raw, json) Hash identifier: c2sdlMuvlK0HkiZDz/YyooXydSgj3ovk4sqm3r2xS1o= Subject key identifier: 10:3F:74:86:67:33:D1:81:79:F9:A8:46:D9:FB:1C:62:27:78:A7:87 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B48E1B2335B91FBBD4521BEC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9bc07377-9909-342b-81e9-b1529eb06330.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 25668 IP address blocks: 209.53.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b2:33:5b:91:fb:bd:45:21:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=dac18205-665b-47b6-ba8d-6d8c01fd59fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:10:c8:97:1d:64:b1:66:04:a2:79:c7:7b: 2e:94:0e:82:de:23:b9:86:b5:bd:4c:59:7f:ce:98: f6:5b:3d:87:f8:60:83:9a:f2:13:ad:cb:4f:84:3d: e7:ae:14:69:26:01:6a:d9:71:2f:5f:0d:9f:e2:68: 7a:32:26:07:6c:38:71:a7:a9:39:23:fe:c2:44:04: 85:b7:69:e5:3d:b9:92:9d:ea:a8:2c:bd:37:63:1f: a7:76:27:3f:e8:74:19:ec:80:60:10:8d:46:b8:c2: f0:33:15:14:57:06:cd:88:6c:05:00:7a:52:80:ed: 13:1c:2d:84:66:cf:b4:59:a0:c6:ac:b9:db:d8:7f: f8:bb:e5:51:c0:05:51:f2:a3:95:7d:2a:e8:0e:95: b5:f6:86:5b:66:36:a3:d1:ff:1e:e4:03:47:34:03: 77:f8:2e:04:bd:5e:7f:ca:bd:6d:89:e7:47:ed:91: 34:ef:c7:85:21:47:f4:2e:24:a4:5a:8c:a1:0a:e4: 0d:19:18:e3:66:51:47:b0:18:28:02:0c:4a:f4:3c: a7:1e:dd:2d:e3:01:b8:bb:98:4d:45:b3:6a:57:5f: e9:19:86:47:ba:4d:a5:db:fd:51:e9:f2:a2:15:33: ea:34:2e:87:21:37:c0:1b:a9:8d:60:84:91:77:83: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:74:86:67:33:D1:81:79:F9:A8:46:D9:FB:1C:62:27:78:A7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9bc07377-9909-342b-81e9-b1529eb06330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:3f:76:2d:cf:2d:86:10:c0:0d:fc:1b:1d:1d:ca:06:5f:36: e0:bd:a5:30:ac:43:41:30:39:f4:87:6d:f4:b2:71:b5:cd:75: 0e:57:21:53:c7:a4:e6:ff:2c:8a:4b:ee:cd:00:df:2f:29:b3: 21:b3:ed:db:c5:b6:d7:e0:71:44:ce:98:8a:3f:11:18:82:db: 1d:ca:53:07:e6:a3:1b:23:b9:bf:c5:d1:59:39:24:f1:71:b2: 28:4a:98:eb:24:80:57:84:54:a2:34:75:e0:36:59:10:ca:98: 4a:98:4d:e5:4d:3b:bd:7a:87:27:97:27:38:d7:12:f8:7d:ae: cf:ff:37:54:a0:75:cb:46:40:fb:d3:4f:96:ea:a2:77:4a:b1: 78:4a:38:50:b3:58:08:83:6b:56:a2:e0:8e:7f:30:29:ba:1b: 74:be:17:e6:fb:62:38:bd:52:2b:45:9f:c9:f2:2a:f1:10:d4: 7e:a3:b3:fa:1a:91:f2:23:70:de:8f:d5:eb:5a:b2:f8:94:c8: 9f:7c:51:69:29:c1:88:32:c5:45:df:96:96:8d:68:0f:6d:84: ca:86:37:48:d1:67:da:1e:13:15:01:a8:c3:b3:f7:92:13:d7: b7:38:39:7a:a9:6a:c7:1e:f3:bf:67:1a:a8:ca:b7:3c:a8:01: eb:14:7f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bIzW5H7vUUhvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGFjMTgyMDUtNjY1Yi00N2I2LWJhOGQtNmQ4YzAxZmQ1OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytMQyJcdZLFmBKJ5x3sulA6C3iO5hrW9TFl/ zpj2Wz2H+GCDmvITrctPhD3nrhRpJgFq2XEvXw2f4mh6MiYHbDhxp6k5I/7CRASF t2nlPbmSneqoLL03Yx+ndic/6HQZ7IBgEI1GuMLwMxUUVwbNiGwFAHpSgO0THC2E Zs+0WaDGrLnb2H/4u+VRwAVR8qOVfSroDpW19oZbZjaj0f8e5ANHNAN3+C4EvV5/ yr1tiedH7ZE078eFIUf0LiSkWoyhCuQNGRjjZlFHsBgoAgxK9DynHt0t4wG4u5hN RbNqV1/pGYZHuk2l2/1R6fKiFTPqNC6HITfAG6mNYISRd4MJyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA/dIZnM9GBefmoRtn7HGIneKeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWJjMDczNzctOTkwOS0z NDJiLTgxZTktYjE1MjllYjA2MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw/di3PLYYQwA38Gx0dygZfNuC9pTCsQ0EwOfSHbfSycbXNdQ5XIVPH pOb/LIpL7s0A3y8psyGz7dvFttfgcUTOmIo/ERiC2x3KUwfmoxsjub/F0Vk5JPFx sihKmOskgFeEVKI0deA2WRDKmEqYTeVNO716hyeXJzjXEvh9rs//N1SgdctGQPvT T5bqondKsXhKOFCzWAiDa1ai4I5/MCm6G3S+F+b7Yji9UitFn8nyKvEQ1H6js/oa kfIjcN6P1etasviUyJ98UWkpwYgyxUXflpaNaA9thMqGN0jRZ9oeExUBqMOz95IT 17c4OXqpasce879nGqjKtzyoAesUf70= -----END CERTIFICATE-----Generated at Sun Oct 19 22:45:18 2025 by rpki-client