$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa File: c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa (raw, json) Hash identifier: bZ9WC4jq7avBl721YgGn7Qev/NGVCQKr+5sZFLIL/4I= Subject key identifier: DE:91:7C:AC:AB:41:12:6D:4A:36:69:DF:B3:7E:C4:A0:5C:DB:F6:11 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C3B0A8C05A014D2A2B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 209.53.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c3:b0:a8:c0:5a:01:4d:2a:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=d5b0e8f8-d3b8-4c17-94bf-5146ef2ad7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e9:c3:6b:e0:6e:f1:1f:fc:7c:a9:70:6c:97: 94:4a:61:6a:c0:e3:08:17:89:3e:a6:bd:69:92:b0: 66:61:0b:f9:0c:99:c5:01:5d:a7:df:4a:44:ef:43: 1b:d6:3f:eb:1d:2c:b1:41:f0:cd:89:5f:51:39:b6: 7c:76:fb:fe:c5:77:d4:b7:0a:64:c5:a3:13:a7:0b: f4:d9:0e:ce:29:5e:7b:41:82:a4:4d:bd:fc:e4:2b: 1d:76:0a:26:df:1c:88:5a:f0:2a:f5:70:d8:1a:e8: 95:bf:52:06:53:5b:17:12:9e:15:07:fb:10:05:6c: 88:10:83:96:d9:aa:4b:02:0b:b2:2a:02:f4:25:2f: f2:a1:c4:a4:a5:08:e6:0f:e9:a0:1f:1c:5b:38:b6: 34:ff:5f:53:a4:f8:ad:f6:8b:15:d4:31:0b:d6:9c: 34:7d:75:4d:82:40:3b:a6:98:70:bc:14:a5:ba:58: 30:6c:09:dd:a0:2e:0f:f5:0d:44:ce:a5:33:0e:fd: 44:ff:f4:d2:c3:74:1d:9c:76:b6:ab:5b:38:3c:15: 18:77:b3:0e:e1:fb:66:11:cb:b0:c1:24:52:e4:a5: b7:ff:0b:be:58:94:77:a5:e9:67:e1:5a:9e:05:eb: 44:1b:80:e5:2c:e0:18:29:9d:52:b9:ea:9f:89:34: 64:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:91:7C:AC:AB:41:12:6D:4A:36:69:DF:B3:7E:C4:A0:5C:DB:F6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0f:9d:2d:08:6b:b9:8e:fb:c7:56:2f:64:fe:c2:63:3b:25: 4d:ea:2f:c9:24:43:5c:6d:a8:f4:c8:06:02:86:35:50:18:35: db:31:9e:51:75:e9:ca:79:d1:d8:8a:c7:2c:47:36:e9:22:29: c7:e8:c3:b1:fd:a4:7c:e5:db:da:d8:fa:ee:3b:6b:02:a6:58: 92:96:03:3c:7a:c1:c6:ce:27:f4:6e:e2:1f:76:81:44:e8:fe: 8e:a9:7a:e8:98:7c:a2:02:65:9d:60:f8:f2:33:1c:1d:45:a6: c2:29:d4:d6:a4:83:3d:19:89:b6:c4:88:37:0b:05:48:58:ce: c5:0e:ec:5b:65:02:78:36:1c:03:3e:f5:57:cd:0d:92:7d:2f: e1:10:43:40:9d:9a:ce:29:0a:e8:93:f2:3c:18:7e:fb:c8:48: f8:90:1b:4f:7d:b0:0f:2f:a5:96:e6:38:89:c0:89:a7:64:f1: 49:e9:32:66:cd:ec:d6:c7:e6:33:7b:38:a8:5b:41:ba:ab:e4: 35:51:be:3a:cc:94:4b:7d:f9:3d:60:b0:89:f0:3b:aa:af:9f: 3a:ba:d6:68:5d:b4:3a:bd:a2:5f:ef:0a:a2:2b:03:5b:67:8c: 7c:93:a1:0c:2c:b9:86:83:5a:a9:57:a1:d5:47:fa:35:53:05: a5:57:b6:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcOwqMBaAU0qKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDViMGU4ZjgtZDNiOC00YzE3LTk0YmYtNTE0NmVmMmFkN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOnDa+Bu8R/8fKlwbJeUSmFqwOMIF4k+pr1p krBmYQv5DJnFAV2n30pE70Mb1j/rHSyxQfDNiV9RObZ8dvv+xXfUtwpkxaMTpwv0 2Q7OKV57QYKkTb385Csddgom3xyIWvAq9XDYGuiVv1IGU1sXEp4VB/sQBWyIEIOW 2apLAguyKgL0JS/yocSkpQjmD+mgHxxbOLY0/19TpPit9osV1DEL1pw0fXVNgkA7 pphwvBSlulgwbAndoC4P9Q1EzqUzDv1E//TSw3QdnHa2q1s4PBUYd7MO4ftmEcuw wSRS5KW3/wu+WJR3peln4VqeBetEG4DlLOAYKZ1SueqfiTRk4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6RfKyrQRJtSjZp37N+xKBc2/YRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzc3MTZjN2YtMmVjNy0z YjBkLWFjYzEtOGUxZjFlY2Y3ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIPnS0Ia7mO+8dWL2T+wmM7JU3qL8kkQ1xtqPTIBgKGNVAYNdsxnlF1 6cp50diKxyxHNukiKcfow7H9pHzl29rY+u47awKmWJKWAzx6wcbOJ/Ru4h92gUTo /o6peuiYfKICZZ1g+PIzHB1FpsIp1Nakgz0ZibbEiDcLBUhYzsUO7FtlAng2HAM+ 9VfNDZJ9L+EQQ0Cdms4pCuiT8jwYfvvISPiQG099sA8vpZbmOInAiadk8UnpMmbN 7NbH5jN7OKhbQbqr5DVRvjrMlEt9+T1gsInwO6qvnzq61mhdtDq9ol/vCqIrA1tn jHyToQwsuYaDWqlXodVH+jVTBaVXti4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:41:44 2025 by rpki-client