$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0972672-e679-3bd6-97ed-6d9fb5022064.roa File: e0972672-e679-3bd6-97ed-6d9fb5022064.roa (raw, json) Hash identifier: zhqs0+YtTLtwmNSnp5QoenvTRgN1kHEJPX8sXya2wHE= Subject key identifier: BB:AF:37:A8:DB:A6:2F:77:0F:1A:D7:B7:2F:4D:5B:D8:18:02:86:0F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5141B97290CCA60BCB2FE800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0972672-e679-3bd6-97ed-6d9fb5022064.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7861 IP address blocks: 209.91.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:b9:72:90:cc:a6:0b:cb:2f:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=4d2c0cb0-7fc7-45ed-b53e-ad102a8f5ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:79:d3:75:76:d0:74:2d:e7:f5:91:1f:ef: b9:6a:85:9c:0a:43:f3:ce:33:df:43:53:e0:06:fa: dd:86:0e:5e:99:df:e7:1f:32:f5:c1:ab:1d:02:94: 25:0c:91:3b:cc:fd:86:b3:cf:65:7c:74:a9:a7:28: 23:62:c1:e5:5a:31:e8:61:4a:77:68:4c:c0:0c:74: be:2b:4b:b1:6c:f2:65:39:8c:e7:bb:dc:14:09:fc: ac:34:c1:52:21:a1:bf:a0:3d:bc:8d:c8:ff:4e:bf: 60:fc:ab:bc:bb:32:20:b8:10:1f:b0:4d:cf:67:ad: 38:2a:30:7d:b1:cc:94:d1:d3:57:a1:e3:b9:29:ff: 1c:67:f1:4d:fc:e2:b6:b7:c0:a7:50:d5:cb:7d:e8: 01:70:e2:e4:ab:01:3a:59:4c:2d:67:ec:4b:73:4d: bb:e2:c7:55:2c:83:86:0c:bd:54:ef:38:21:2c:2d: 10:87:de:d2:fa:d0:0b:4e:38:74:57:61:98:61:42: c4:1d:f0:31:c8:03:be:64:db:e4:a5:fb:1e:11:57: 7a:31:e6:c6:64:6d:d5:09:f2:d3:33:1f:b5:5f:71: 99:b1:40:a6:3e:e6:a0:0e:c0:9b:e7:8a:03:fe:13: d2:f7:9e:4c:c9:9b:88:2c:f2:45:39:e6:8f:12:d1: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AF:37:A8:DB:A6:2F:77:0F:1A:D7:B7:2F:4D:5B:D8:18:02:86:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e0972672-e679-3bd6-97ed-6d9fb5022064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8e:7c:5e:f4:8c:e8:da:95:fa:b5:60:0b:dd:d1:10:ba:98: b3:50:15:fa:b3:ee:36:2e:5c:26:42:45:13:71:6c:41:a7:8d: 3b:b9:e2:d7:11:ae:dd:0a:87:03:0e:ee:6b:2d:ac:01:60:03: 6c:43:d9:6d:88:0f:f4:65:e1:68:81:dc:65:48:92:62:2a:e9: cc:6f:0f:86:07:83:bb:84:14:8f:25:ae:58:77:58:2a:26:35: 61:9c:25:48:ae:b3:dc:0f:99:65:12:05:be:44:46:c4:d6:e6: 3c:1c:c7:5e:74:8e:16:c0:3d:e0:da:a8:74:56:4b:0c:fc:a0: ae:bf:50:19:8f:d5:7a:f0:a9:7b:f2:3c:20:da:8e:8d:de:a1: 43:61:8d:16:ec:85:26:d4:ea:73:fa:27:93:b6:45:41:6d:16: 44:81:aa:5d:22:fc:6f:fb:34:8c:18:b5:aa:34:f6:d2:33:02: 0a:91:4c:95:b3:50:c6:6a:72:6d:0f:f5:71:5b:78:7a:30:f8: 91:73:42:ac:5b:9d:79:da:9c:9c:ce:af:ca:6e:86:78:fe:f1: 0b:09:9f:6b:67:b3:e3:c1:54:33:00:92:fd:d7:c8:14:aa:5e: 02:c0:e7:c0:68:b5:a1:70:b1:bd:3a:88:f3:7a:20:04:ed:24: f4:30:a7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQblykMymC8sv6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NGQyYzBjYjAtN2ZjNy00NWVkLWI1M2UtYWQxMDJhOGY1Y2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsN503V20HQt5/WRH++5aoWcCkPzzjPfQ1Pg Bvrdhg5emd/nHzL1wasdApQlDJE7zP2Gs89lfHSppygjYsHlWjHoYUp3aEzADHS+ K0uxbPJlOYznu9wUCfysNMFSIaG/oD28jcj/Tr9g/Ku8uzIguBAfsE3PZ604KjB9 scyU0dNXoeO5Kf8cZ/FN/OK2t8CnUNXLfegBcOLkqwE6WUwtZ+xLc0274sdVLIOG DL1U7zghLC0Qh97S+tALTjh0V2GYYULEHfAxyAO+ZNvkpfseEVd6MebGZG3VCfLT Mx+1X3GZsUCmPuagDsCb54oD/hPS955MyZuILPJFOeaPEtHtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuvN6jbpi93DxrXty9NW9gYAoYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTA5NzI2NzItZTY3OS0z YmQ2LTk3ZWQtNmQ5ZmI1MDIyMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Vt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeOfF70jOjalfq1YAvd0RC6mLNQFfqz7jYuXCZCRRNxbEGnjTu54tcR rt0KhwMO7mstrAFgA2xD2W2ID/Rl4WiB3GVIkmIq6cxvD4YHg7uEFI8lrlh3WCom NWGcJUius9wPmWUSBb5ERsTW5jwcx150jhbAPeDaqHRWSwz8oK6/UBmP1XrwqXvy PCDajo3eoUNhjRbshSbU6nP6J5O2RUFtFkSBql0i/G/7NIwYtao09tIzAgqRTJWz UMZqcm0P9XFbeHow+JFzQqxbnXnanJzOr8puhnj+8QsJn2tns+PBVDMAkv3XyBSq XgLA58BotaFwsb06iPN6IATtJPQwp2k= -----END CERTIFICATE-----Generated at Sun Oct 19 20:18:57 2025 by rpki-client