$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce6ea925-9f64-37d3-ba2f-9f2b5b7c39d8.roa File: ce6ea925-9f64-37d3-ba2f-9f2b5b7c39d8.roa (raw, json) Hash identifier: b+wYiJFj5gxQ5Gv2nNcmMC8fvbms4vyUjDHnDKdRqJ8= Subject key identifier: FC:23:77:87:A0:9E:0E:13:0F:64:C7:D5:8C:79:3B:41:23:D7:8F:68 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C2EF2430C28DB536AF00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce6ea925-9f64-37d3-ba2f-9f2b5b7c39d8.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 21723 IP address blocks: 209.53.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c2:ef:24:30:c2:8d:b5:36:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=6960a270-a89b-4caa-84e8-3ff7d14b28f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:49:b0:95:9b:4f:11:6a:07:e0:42:a2:78: 1f:ba:7a:1e:43:88:10:2d:d7:f7:20:fe:de:6f:77: a2:0d:58:9f:02:54:54:d2:50:52:76:37:d8:50:fc: 53:fb:6e:83:cb:19:6e:9e:e0:bc:19:6b:72:f9:8b: 29:a4:2b:9a:c1:2e:85:fe:78:e4:53:fd:cc:4a:18: 26:93:b4:96:72:07:d9:7c:de:1b:9f:9c:68:cc:c2: f9:f5:7f:7f:d5:8c:75:8f:23:23:86:32:79:45:30: 63:12:4a:96:e3:b8:62:26:f4:02:49:07:16:81:41: 9c:ff:03:bb:9f:15:8b:3e:97:1e:b5:49:eb:21:db: f5:fe:aa:6c:d5:15:19:95:ee:78:b3:3e:70:8e:ff: 87:b1:e6:d6:38:4a:42:6a:8d:64:7d:7d:cf:23:92: 12:eb:3e:88:01:a3:4b:aa:84:77:94:9e:1c:ad:b7: bf:9d:3a:47:0d:e9:bf:5e:a0:83:a9:f5:f4:2d:60: db:30:41:2f:f8:1d:ad:c6:4d:f1:fc:62:c7:27:2e: 89:d4:72:ee:36:86:35:3b:4e:b3:bb:39:e6:ac:54: f5:68:aa:b2:67:e8:54:5c:bb:8c:88:26:e2:8e:17: 5b:7d:19:8c:24:67:36:4b:68:bc:c6:1d:bc:56:de: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:23:77:87:A0:9E:0E:13:0F:64:C7:D5:8C:79:3B:41:23:D7:8F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce6ea925-9f64-37d3-ba2f-9f2b5b7c39d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d0:3f:7f:15:e9:ce:2d:c6:f3:90:bf:b1:85:2e:f6:24:36: 68:e2:17:c8:6d:c1:10:8a:c6:a5:bb:5f:76:ca:51:78:0c:2d: 7f:8c:24:c4:a9:d5:51:3c:02:2c:4a:48:a9:ea:39:63:ea:82: c5:53:c1:86:27:72:6b:04:f1:a5:f8:1c:26:1b:4f:9a:87:79: 3e:3a:26:37:5a:1b:cf:5c:b7:89:8c:7b:85:4c:70:ad:1a:91: 14:78:65:e9:07:71:21:07:72:3a:d5:a4:6a:4f:ea:c7:93:b7: 8d:32:c6:47:b4:ea:82:2d:24:bb:26:94:c9:eb:0c:22:7e:9e: 44:7e:1b:85:b5:25:52:7f:73:6c:31:f9:71:72:da:12:d7:9d: 55:05:88:37:38:41:b0:1c:00:8f:98:fd:13:0a:95:55:73:15: 99:dc:f5:94:ee:4e:0e:9b:8e:4a:0e:04:08:ea:d8:b7:49:6c: 4a:6d:7c:ea:5b:a1:8c:ac:7a:4f:9f:c3:4d:7a:d1:80:09:43: 4b:ac:11:bf:a0:59:99:94:f1:e2:32:26:13:ca:43:c8:5a:b7: f6:94:2a:d2:6c:30:65:e1:94:a0:b9:60:2e:0f:f6:06:84:29: 57:24:f9:4f:74:43:c7:70:3c:da:4a:6c:55:8b:33:15:ba:fa: 9d:b6:4d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcLvJDDCjbU2rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk Njk2MGEyNzAtYTg5Yi00Y2FhLTg0ZTgtM2ZmN2QxNGIyOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg5JsJWbTxFqB+BCongfunoeQ4gQLdf3IP7e b3eiDVifAlRU0lBSdjfYUPxT+26DyxlunuC8GWty+YsppCuawS6F/njkU/3MShgm k7SWcgfZfN4bn5xozML59X9/1Yx1jyMjhjJ5RTBjEkqW47hiJvQCSQcWgUGc/wO7 nxWLPpcetUnrIdv1/qps1RUZle54sz5wjv+HsebWOEpCao1kfX3PI5IS6z6IAaNL qoR3lJ4crbe/nTpHDem/XqCDqfX0LWDbMEEv+B2txk3x/GLHJy6J1HLuNoY1O06z uznmrFT1aKqyZ+hUXLuMiCbijhdbfRmMJGc2S2i8xh28Vt4RXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwjd4egng4TD2TH1Yx5O0Ej149oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2U2ZWE5MjUtOWY2NC0z N2QzLWJhMmYtOWYyYjViN2MzOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjQP38V6c4txvOQv7GFLvYkNmjiF8htwRCKxqW7X3bKUXgMLX+MJMSp 1VE8AixKSKnqOWPqgsVTwYYncmsE8aX4HCYbT5qHeT46JjdaG89ct4mMe4VMcK0a kRR4ZekHcSEHcjrVpGpP6seTt40yxke06oItJLsmlMnrDCJ+nkR+G4W1JVJ/c2wx +XFy2hLXnVUFiDc4QbAcAI+Y/RMKlVVzFZnc9ZTuTg6bjkoOBAjq2LdJbEptfOpb oYysek+fw0160YAJQ0usEb+gWZmU8eIyJhPKQ8hat/aUKtJsMGXhlKC5YC4P9gaE KVck+U90Q8dwPNpKbFWLMxW6+p22TXg= -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:35 2025 by rpki-client