$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9a91c54-d382-337a-ac3f-556ef92a5ed9.roa File: e9a91c54-d382-337a-ac3f-556ef92a5ed9.roa (raw, json) Hash identifier: rS1SyCq0igrAd4d5qn/y4pOvd+Hw7Tol+4AHfgXVZlI= Subject key identifier: 28:02:C1:86:7B:4C:CC:B9:11:75:06:E9:FE:01:67:9B:D7:5C:46:D6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11C6C793092A2063B43900 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9a91c54-d382-337a-ac3f-556ef92a5ed9.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 3359 IP address blocks: 209.115.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c6:c7:93:09:2a:20:63:b4:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=2d5cdce5-a2b7-4273-b1db-84dc20208c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:42:fe:20:ef:b6:46:ff:74:10:ed:f4:5b: e4:62:d7:4c:1e:ae:11:8c:c5:fa:0a:e2:60:64:e0: d2:1e:81:6e:ce:b9:cc:00:0d:f9:b4:11:b0:4e:bc: 08:ef:05:4b:23:fa:3d:9c:44:5b:06:06:6a:97:18: b3:17:1c:1c:70:75:39:af:e6:ee:1f:37:4c:74:30: f0:cd:4f:28:16:83:c1:71:4a:42:87:6c:a5:3c:8e: f9:4a:4d:c9:99:f1:6c:98:e6:06:c3:c5:c1:61:f9: ea:06:ed:1d:74:6d:81:27:5d:3f:87:64:1c:df:66: 76:9c:b6:84:f8:b8:68:79:0b:f4:73:47:f6:eb:c7: 75:a2:ee:20:ed:fa:f1:ac:b5:61:94:3b:c0:8c:5d: 96:f9:2a:e2:19:7b:54:b7:8f:b7:04:b3:b9:52:8b: 47:90:25:65:21:f7:e0:2e:c1:56:eb:78:88:42:07: 7f:db:53:97:1b:04:38:d7:90:3f:1e:99:15:f6:71: 6a:95:f3:d8:d8:d2:cf:c2:06:47:0e:29:2a:d8:04: b4:85:7b:60:c4:4d:fe:5f:a5:2f:eb:97:d4:f9:2e: ed:47:9c:33:6f:77:f3:b2:3f:0c:8f:61:3f:b1:13: 25:01:63:5c:ca:32:6f:aa:1c:83:e7:b5:4e:5c:e1: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:02:C1:86:7B:4C:CC:B9:11:75:06:E9:FE:01:67:9B:D7:5C:46:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9a91c54-d382-337a-ac3f-556ef92a5ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.115.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c6:ee:72:04:19:ac:6e:21:36:ce:32:d7:30:37:49:a4:f6: f2:c3:11:e1:39:38:91:8c:99:37:8a:9d:1d:15:4c:7d:9d:50: e1:67:63:4b:93:25:f9:ca:18:a2:54:42:1b:0a:c5:61:38:3e: 61:f9:d5:b7:de:b8:04:ed:93:68:55:bd:16:05:86:f8:24:3f: 53:6c:a1:38:a7:19:e5:0d:f2:a1:91:b1:65:d3:58:08:41:14: 97:58:fb:59:40:51:7a:e7:e1:2c:da:d0:18:38:34:5d:e0:42: fd:79:77:87:67:2d:6f:f7:21:bb:99:b3:6a:76:d0:9d:00:43: 45:ad:c3:ea:2c:36:4c:c5:96:54:5d:72:59:39:93:84:f3:69: 85:a3:c9:54:55:9a:c1:fd:58:cd:c4:94:a3:67:97:7b:cc:85: cb:09:e7:ee:88:fe:b3:20:9a:7a:ce:00:a7:7b:87:9e:e5:ed: f4:0c:93:3a:8e:43:12:12:29:de:c7:45:1f:89:92:1f:41:ec: f7:86:18:3f:79:bc:c8:73:e6:e6:37:0e:5c:50:63:3f:33:1d: ed:74:d8:15:38:6a:3b:25:1f:99:64:73:b1:ed:84:00:ed:e7: 63:01:43:f7:c1:45:0f:08:1f:ef:f2:ac:24:d4:b1:9f:d8:c3: bf:17:dc:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcbHkwkqIGO0OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MmQ1Y2RjZTUtYTJiNy00MjczLWIxZGItODRkYzIwMjA4YzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw1C/iDvtkb/dBDt9FvkYtdMHq4RjMX6CuJg ZODSHoFuzrnMAA35tBGwTrwI7wVLI/o9nERbBgZqlxizFxwccHU5r+buHzdMdDDw zU8oFoPBcUpCh2ylPI75Sk3JmfFsmOYGw8XBYfnqBu0ddG2BJ10/h2Qc32Z2nLaE +LhoeQv0c0f268d1ou4g7frxrLVhlDvAjF2W+SriGXtUt4+3BLO5UotHkCVlIffg LsFW63iIQgd/21OXGwQ415A/HpkV9nFqlfPY2NLPwgZHDikq2AS0hXtgxE3+X6Uv 65fU+S7tR5wzb3fzsj8Mj2E/sRMlAWNcyjJvqhyD57VOXOEKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgCwYZ7TMy5EXUG6f4BZ5vXXEbWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTlhOTFjNTQtZDM4Mi0z MzdhLWFjM2YtNTU2ZWY5MmE1ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbG7nIEGaxuITbOMtcwN0mk9vLDEeE5OJGMmTeKnR0VTH2dUOFnY0uT JfnKGKJUQhsKxWE4PmH51bfeuATtk2hVvRYFhvgkP1NsoTinGeUN8qGRsWXTWAhB FJdY+1lAUXrn4Sza0Bg4NF3gQv15d4dnLW/3IbuZs2p20J0AQ0Wtw+osNkzFllRd clk5k4TzaYWjyVRVmsH9WM3ElKNnl3vMhcsJ5+6I/rMgmnrOAKd7h57l7fQMkzqO QxISKd7HRR+Jkh9B7PeGGD95vMhz5uY3DlxQYz8zHe102BU4ajslH5lkc7HthADt 52MBQ/fBRQ8IH+/yrCTUsZ/Yw78X3DY= -----END CERTIFICATE-----Generated at Thu Oct 9 01:21:47 2025 by rpki-client