$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa File: d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa (raw, json) Hash identifier: s2yDMQw/Qvih1cEacdPQwlN/gS6e+C0d3/qnCFnTUUs= Subject key identifier: 58:31:1A:48:40:91:12:0E:9A:E8:8F:B0:DC:B9:B4:00:6D:68:DD:FB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11CB889ABF541AC39EAE00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 209.89.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:cb:88:9a:bf:54:1a:c3:9e:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=83bb4cdc-cf80-4d99-91a4-f7f37efe2474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3e:64:1d:c2:02:35:be:7a:9d:8b:cd:56:9b: 9e:4a:0f:48:65:1d:ea:cf:62:f5:80:d7:d2:c1:16: 62:19:43:b6:98:55:6d:75:88:6c:3c:7b:b8:d0:f1: d8:00:3d:30:4e:5b:eb:8d:3c:57:ec:ca:07:86:37: c2:bd:89:0a:b3:cd:80:cd:72:a8:64:b1:5f:20:0d: 2a:68:da:3e:09:b8:2b:33:7b:26:ca:c0:8c:98:26: 00:8b:df:0e:c5:4f:82:60:bc:b9:9c:93:37:6d:19: 20:25:d2:73:0b:6c:9d:5e:20:37:89:28:bb:b8:26: aa:15:e4:74:85:d5:93:e3:e0:1a:55:a5:fb:40:52: aa:2a:90:5b:ba:1b:10:33:ce:97:bb:18:a1:85:ed: 15:a3:7f:88:e6:24:f9:b3:57:f6:d5:63:9f:d4:cd: 76:53:ff:63:73:ca:6e:99:1f:c1:fb:43:30:1f:f7: f7:bb:12:02:3a:c9:25:08:d5:05:b3:56:a6:4a:4d: 24:77:79:72:03:27:9f:14:5f:65:ec:c2:25:a3:fb: 6f:7d:03:39:7b:4b:c8:86:4e:d9:e2:80:0a:b1:ae: 79:0d:d9:09:b0:5e:2d:ca:62:fa:ea:14:57:58:6f: b0:76:6d:de:8d:89:de:a2:50:9c:5c:f9:b8:8b:77: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:31:1A:48:40:91:12:0E:9A:E8:8F:B0:DC:B9:B4:00:6D:68:DD:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ad:3e:20:06:95:ad:05:9d:ac:de:56:1d:5e:1d:26:8e:3c: 82:2c:53:4b:0a:ad:6c:8e:e3:1d:c9:fa:ba:f0:a5:d1:d4:0e: 75:d9:de:a1:14:0a:19:e3:b5:64:7c:80:e1:c2:33:18:4c:7f: 73:8d:9b:32:67:c1:7b:ea:e6:26:9a:ef:a9:ba:5c:94:c7:be: 05:6d:8b:d6:24:47:65:fe:28:c0:19:bd:ec:81:29:ab:4d:3e: 15:d5:d9:48:aa:ad:d4:d1:75:8c:2d:0d:4c:4c:e4:ff:a8:3c: ff:9e:bb:66:85:33:e1:e9:86:af:a5:f4:f8:f1:9d:f4:8c:b9: 3f:2a:59:a1:d2:2b:b3:ff:e5:b2:60:4e:e5:91:d8:ae:65:2f: b5:5d:a5:10:50:30:a4:df:20:37:ae:d9:d4:35:63:e1:63:f5: e7:8b:77:3a:cb:14:55:2a:29:38:28:e1:55:11:ab:ec:11:9f: c4:7b:0f:f6:eb:08:29:39:b0:de:26:29:e8:97:c6:69:f9:e4: 28:d7:9b:0d:6f:f8:08:1b:d6:72:00:97:6d:94:6c:e8:83:4e: c6:13:18:18:5c:f9:b9:27:86:e2:a6:3e:7e:4e:a4:5c:af:25: 84:8a:2e:32:12:1b:71:7b:66:f8:a4:8e:fc:8f:17:f1:df:09: 64:3f:58:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcuImr9UGsOergAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ODNiYjRjZGMtY2Y4MC00ZDk5LTkxYTQtZjdmMzdlZmUyNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT5kHcICNb56nYvNVpueSg9IZR3qz2L1gNfS wRZiGUO2mFVtdYhsPHu40PHYAD0wTlvrjTxX7MoHhjfCvYkKs82AzXKoZLFfIA0q aNo+CbgrM3smysCMmCYAi98OxU+CYLy5nJM3bRkgJdJzC2ydXiA3iSi7uCaqFeR0 hdWT4+AaVaX7QFKqKpBbuhsQM86Xuxihhe0Vo3+I5iT5s1f21WOf1M12U/9jc8pu mR/B+0MwH/f3uxICOsklCNUFs1amSk0kd3lyAyefFF9l7MIlo/tvfQM5e0vIhk7Z 4oAKsa55DdkJsF4tymL66hRXWG+wdm3ejYneolCcXPm4i3cknQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgxGkhAkRIOmuiPsNy5tABtaN37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDdhMjdjNWQtOWQwYy0z YTQ4LWI1MjYtODA2OTExZDI1ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOtPiAGla0FnazeVh1eHSaOPIIsU0sKrWyO4x3J+rrwpdHUDnXZ3qEU ChnjtWR8gOHCMxhMf3ONmzJnwXvq5iaa76m6XJTHvgVti9YkR2X+KMAZveyBKatN PhXV2UiqrdTRdYwtDUxM5P+oPP+eu2aFM+Hphq+l9PjxnfSMuT8qWaHSK7P/5bJg TuWR2K5lL7VdpRBQMKTfIDeu2dQ1Y+Fj9eeLdzrLFFUqKTgo4VURq+wRn8R7D/br CCk5sN4mKeiXxmn55CjXmw1v+Agb1nIAl22UbOiDTsYTGBhc+bknhuKmPn5OpFyv JYSKLjISG3F7ZvikjvyPF/HfCWQ/WKA= -----END CERTIFICATE-----Generated at Mon Oct 20 01:23:45 2025 by rpki-client