$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca34b881-c93f-338e-8d90-ff1931061a13.roa File: ca34b881-c93f-338e-8d90-ff1931061a13.roa (raw, json) Hash identifier: +M3B8katTUJ0JRefjfhRIe/pwUCAFMOPnTi94qLwm0s= Subject key identifier: 40:48:96:2B:25:F9:6A:73:1E:72:6C:0E:63:51:AF:6A:25:6F:EF:90 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C397BA341F4DE3EC5880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca34b881-c93f-338e-8d90-ff1931061a13.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 209.53.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c3:97:ba:34:1f:4d:e3:ec:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=a8ac3678-62df-4638-b25e-3eb6321a1501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:a3:21:12:49:83:57:0c:12:6b:bb:cf:07: 1c:ba:dd:d9:d0:44:3d:cd:1d:13:77:44:d9:6c:45: 74:d0:f8:11:bd:12:7c:13:da:e8:20:8b:da:12:eb: f2:c7:c9:bb:de:09:ea:92:14:bb:e3:02:cc:6e:63: 80:2d:95:f5:c6:ca:5e:12:39:c3:38:1d:dd:d8:de: 8e:97:63:19:17:74:a5:7b:b0:97:50:2b:09:98:12: 4f:ec:63:d4:cf:68:4f:19:92:7d:b1:43:09:94:ba: af:59:86:1d:af:11:5d:ef:bf:1c:f0:48:ec:89:3a: 09:2f:4f:52:4a:2b:6f:48:ab:b1:fe:7f:4e:a5:e9: ac:bd:2a:34:cd:7b:4f:9e:89:ba:be:2d:24:3f:b3: 66:f8:01:84:ae:2c:3b:69:95:01:91:8e:08:58:66: ce:64:a6:ba:4d:c3:2b:1d:47:2a:20:ca:f1:1b:2e: 73:49:f5:6c:c7:b2:03:ed:6f:be:b6:69:b5:5a:b8: 37:7d:51:fe:14:12:a6:61:c2:26:ca:f4:9d:06:68: fd:78:61:d4:c8:03:02:b0:1b:ee:02:01:4d:1d:2b: 9d:27:df:4a:da:a3:cb:02:be:40:96:f0:44:7f:e5: 43:0b:5e:6b:7e:56:7e:6c:0f:26:b1:91:0c:d6:26: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:96:2B:25:F9:6A:73:1E:72:6C:0E:63:51:AF:6A:25:6F:EF:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca34b881-c93f-338e-8d90-ff1931061a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:31:22:6a:22:88:9d:62:cb:06:a9:52:36:c7:8b:53:fe:6c: 65:12:60:48:a2:b4:d0:e4:5a:1a:1c:ff:57:b3:bc:df:d8:c1: 93:1e:b8:a3:00:7b:e9:ee:7c:d3:a1:68:16:36:ba:a2:e7:25: 2e:e1:53:76:1f:62:8a:31:2f:67:4d:08:cb:2e:0c:e6:c1:74: d4:0d:e7:94:9b:66:e5:b7:11:4e:0f:18:3a:ae:24:94:37:b9: 88:2c:93:04:30:23:8a:48:27:c6:65:c3:9d:05:1b:73:a4:e0: 98:57:c4:37:ab:86:89:f8:5e:de:8c:e2:87:ac:3e:49:66:72: 39:3a:c7:88:ba:9a:82:8f:1e:43:d0:75:ea:c0:15:7d:72:e7: c8:2f:b8:cc:84:7e:68:b1:21:a8:df:68:26:9e:42:39:7c:0d: 0d:59:04:2c:61:93:f4:55:da:f0:f1:e4:49:16:07:40:31:3e: 32:19:ee:90:dc:28:4f:1e:bf:3c:d9:42:e7:87:51:04:24:87: e7:70:45:09:21:df:e3:6b:51:d8:a5:1a:1f:63:c2:fd:37:a6: dc:d9:53:62:f2:ad:fe:5d:50:43:a4:93:3d:31:ab:eb:e7:b9: b6:6e:01:38:cf:9c:c5:85:f5:4f:ec:89:06:c8:24:6f:9d:80: a0:62:5c:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcOXujQfTePsWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YThhYzM2NzgtNjJkZi00NjM4LWIyNWUtM2ViNjMyMWExNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/mjIRJJg1cMEmu7zwccut3Z0EQ9zR0Td0TZ bEV00PgRvRJ8E9roIIvaEuvyx8m73gnqkhS74wLMbmOALZX1xspeEjnDOB3d2N6O l2MZF3Sle7CXUCsJmBJP7GPUz2hPGZJ9sUMJlLqvWYYdrxFd778c8EjsiToJL09S SitvSKux/n9OpemsvSo0zXtPnom6vi0kP7Nm+AGEriw7aZUBkY4IWGbOZKa6TcMr HUcqIMrxGy5zSfVsx7ID7W++tmm1Wrg3fVH+FBKmYcImyvSdBmj9eGHUyAMCsBvu AgFNHSudJ99K2qPLAr5AlvBEf+VDC15rflZ+bA8msZEM1iacLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBIlisl+WpzHnJsDmNRr2olb++QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2EzNGI4ODEtYzkzZi0z MzhlLThkOTAtZmYxOTMxMDYxYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAxImoiiJ1iywapUjbHi1P+bGUSYEiitNDkWhoc/1ezvN/YwZMeuKMA e+nufNOhaBY2uqLnJS7hU3YfYooxL2dNCMsuDObBdNQN55SbZuW3EU4PGDquJJQ3 uYgskwQwI4pIJ8Zlw50FG3Ok4JhXxDerhon4Xt6M4oesPklmcjk6x4i6moKPHkPQ derAFX1y58gvuMyEfmixIajfaCaeQjl8DQ1ZBCxhk/RV2vDx5EkWB0AxPjIZ7pDc KE8evzzZQueHUQQkh+dwRQkh3+NrUdilGh9jwv03ptzZU2Lyrf5dUEOkkz0xq+vn ubZuATjPnMWF9U/siQbIJG+dgKBiXPc= -----END CERTIFICATE-----Generated at Sun Oct 19 20:10:55 2025 by rpki-client