$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa File: 065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa (raw, json) Hash identifier: dgYmG/SXJ1ao4CIx1c6fKKRb+rMl1hwd01ORWbzeAH4= Subject key identifier: C2:85:D5:10:0A:E6:6D:D4:70:AB:41:52:FC:88:94:6C:82:9F:D9:86 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571DA0170D08C233FFDD350 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.171.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:da:01:70:d0:8c:23:3f:fd:d3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=ef6386cc-409f-4995-a022-53301834a7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:a3:1c:c3:57:df:ec:45:37:c2:fe:9e:2d: c1:b2:39:aa:6a:eb:4e:35:cd:7a:7b:a7:37:df:2d: 16:7e:30:5f:f1:0c:40:05:14:aa:44:c5:2d:49:61: ee:87:2c:73:c4:67:bf:e8:65:a7:e3:74:ba:64:ae: af:87:16:44:23:26:fc:88:b1:98:ab:f5:b5:84:81: 3e:ff:1e:1f:3a:d4:31:50:88:bf:db:30:98:90:84: af:78:fb:26:d0:00:ed:fd:f9:34:12:bb:d1:d6:27: a0:2b:cf:0a:01:7c:fb:6a:fd:68:79:d4:02:5d:4f: b9:5c:60:71:3a:8c:41:15:06:fd:cc:c9:4b:a5:b9: 48:18:18:45:ea:ff:a4:9e:f0:b5:d2:4d:e5:d8:79: 6e:5c:26:4b:5b:88:d3:b4:00:e7:e1:cf:5a:eb:27: bb:60:5f:99:61:d7:77:43:1c:69:2e:db:78:0c:1a: 63:2d:0f:3d:4a:78:dc:f1:03:b8:e0:d7:f5:aa:d4: 6e:06:7e:4d:d7:2e:81:7b:93:91:88:0d:bd:5b:f9: 59:90:ba:6a:86:52:48:f1:b7:10:3c:69:34:36:66: b5:03:ca:98:a3:19:3e:e8:f4:55:7e:5d:c4:20:fe: f1:5f:34:a3:f4:83:99:00:b3:6d:02:aa:ca:c4:e3: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:85:D5:10:0A:E6:6D:D4:70:AB:41:52:FC:88:94:6C:82:9F:D9:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:28:d8:99:2e:97:2d:53:83:a1:c1:fd:3a:61:2d:3c:68:a9: 9d:1a:a4:0c:66:62:47:b3:fa:30:80:13:3a:bc:1b:6d:e3:37: 19:6a:88:71:87:12:57:49:a9:7a:ad:d6:3f:d3:aa:c0:e7:18: c1:c5:27:29:93:3a:38:4a:c5:3f:6d:a0:28:cb:34:f0:fe:df: 8e:d0:84:25:22:b4:41:0e:14:11:02:5f:bd:65:6f:1e:56:8d: 52:fd:8c:89:aa:41:90:26:bc:2f:f3:36:4d:ea:38:05:d8:c5: 12:c5:89:74:c7:92:fa:fa:b0:98:5b:36:37:e5:42:99:92:f5: ba:54:e3:46:2d:ed:dd:cc:b6:ab:e0:00:09:9c:62:fb:8d:a6: ad:0f:ea:ae:df:d8:58:e0:0a:84:e2:54:7e:d3:ef:dd:5c:16: 67:24:00:55:43:08:1e:71:89:c4:81:ac:7a:34:67:ad:5a:31: 1e:6c:9c:4a:45:8e:90:4b:40:0c:dc:bd:c4:d4:51:0b:49:6b: a9:03:28:4a:55:81:09:aa:5c:41:91:a9:a4:9f:b1:53:14:2f: 04:02:55:21:dd:2b:3a:30:b8:08:0c:85:f5:e3:b7:42:8f:44: 97:ce:a6:4d:dd:49:c4:a0:f9:11:bf:81:2a:e8:1d:65:20:9a: 2f:7a:52:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdoBcNCMIz/901AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZWY2Mzg2Y2MtNDA5Zi00OTk1LWEwMjItNTMzMDE4MzRhN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaujHMNX3+xFN8L+ni3BsjmqautONc16e6c3 3y0WfjBf8QxABRSqRMUtSWHuhyxzxGe/6GWn43S6ZK6vhxZEIyb8iLGYq/W1hIE+ /x4fOtQxUIi/2zCYkISvePsm0ADt/fk0ErvR1iegK88KAXz7av1oedQCXU+5XGBx OoxBFQb9zMlLpblIGBhF6v+knvC10k3l2HluXCZLW4jTtADn4c9a6ye7YF+ZYdd3 QxxpLtt4DBpjLQ89Snjc8QO44Nf1qtRuBn5N1y6Be5ORiA29W/lZkLpqhlJI8bcQ PGk0Nma1A8qYoxk+6PRVfl3EIP7xXzSj9IOZALNtAqrKxOMYiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKF1RAK5m3UcKtBUvyIlGyCn9mGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDY1ZDlkMWYtY2UzYy0z YmUxLWIxYmQtYmY4MjRmMzdiYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgo2Jkuly1Tg6HB/TphLTxoqZ0apAxmYkez+jCAEzq8G23jNxlqiHGH EldJqXqt1j/TqsDnGMHFJymTOjhKxT9toCjLNPD+347QhCUitEEOFBECX71lbx5W jVL9jImqQZAmvC/zNk3qOAXYxRLFiXTHkvr6sJhbNjflQpmS9bpU40Yt7d3Mtqvg AAmcYvuNpq0P6q7f2FjgCoTiVH7T791cFmckAFVDCB5xicSBrHo0Z61aMR5snEpF jpBLQAzcvcTUUQtJa6kDKEpVgQmqXEGRqaSfsVMULwQCVSHdKzowuAgMhfXjt0KP RJfOpk3dScSg+RG/gSroHWUgmi96UgU= -----END CERTIFICATE-----Generated at Fri Oct 24 08:27:05 2025 by rpki-client