$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa File: 234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa (raw, json) Hash identifier: olpuerZ+ZSE4heOCgWFTdsgyLHMvIQRzKhPEnPto5BY= Subject key identifier: 77:57:2C:2D:4D:C9:6D:25:D9:F6:44:D6:7C:8B:20:48:03:B5:26:4A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D47636FBF740F81B0874 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.52.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d4:76:36:fb:f7:40:f8:1b:08:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=24d70f65-bb36-4a13-9fd6-ef21919369ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:5d:fb:35:62:8b:8a:d1:20:c0:c2:2b:d8: 1c:61:73:c1:98:7e:ff:09:55:40:8e:b6:2c:5a:f4: 4d:65:8f:b9:b2:78:e2:c2:1e:1f:be:5a:18:4e:76: 4d:a1:c2:43:97:71:1b:6d:fe:79:e4:b3:bb:1b:71: af:e0:0d:45:fb:6d:14:f7:28:80:4f:71:76:e1:e9: b4:d1:53:20:f6:0e:cb:e8:78:40:eb:b0:da:83:79: 86:85:3a:9a:91:bd:05:94:6a:5f:13:a2:3f:94:af: c7:de:8b:16:04:7a:fe:02:50:76:04:1a:45:fb:4b: e9:c0:c9:ff:99:10:f0:7c:dd:33:c6:6e:cb:21:48: b8:0c:74:b2:f5:a9:ba:36:9a:85:2d:73:fe:3b:58: 99:9d:8c:bf:37:c2:34:80:6d:f0:73:15:22:6f:3f: 8c:b7:5e:93:d7:b9:32:22:78:d6:7d:1f:27:89:06: f5:d8:bd:e8:6e:dd:2f:d5:64:9f:dd:51:cf:b4:fb: ea:48:1b:66:fc:37:c2:b9:1d:ff:f8:7a:af:3b:50: 58:3f:7e:fc:82:4f:0e:a2:21:8c:30:78:57:e0:17: 82:48:be:4e:7f:e3:53:4a:6b:bb:cc:26:c1:e1:5a: 56:8d:ca:ed:d9:63:d3:d9:81:91:ed:99:32:97:80: c7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:57:2C:2D:4D:C9:6D:25:D9:F6:44:D6:7C:8B:20:48:03:B5:26:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ec:9e:76:14:fe:97:f0:e6:7f:47:11:06:40:e0:6a:51:33: 9d:4c:3c:df:cb:a2:35:bf:f0:87:5e:4f:f3:10:b2:f0:f3:64: 12:86:36:6f:1b:6c:a0:82:38:4e:6b:69:f0:7f:5d:a6:45:d8: 71:b8:2c:65:09:82:b4:36:91:d4:dc:1b:40:8f:3b:4b:4c:45: 14:ca:56:8a:f7:ca:d9:a8:d9:7b:92:42:f4:ed:00:9d:5a:fc: d2:66:e8:7c:bf:a6:56:c4:54:d5:10:0e:b5:8b:47:d5:8d:a9: eb:38:b1:4c:6f:91:17:76:79:cd:1b:a9:16:68:61:5b:97:a5: bb:ac:25:06:ea:6c:d4:02:6e:a7:08:1f:c1:c2:c7:3f:c7:46: ff:34:71:f0:63:07:6e:87:f5:19:7e:ca:16:fd:82:54:0b:6d: e2:eb:41:36:aa:3d:e6:66:21:71:3e:73:2c:1a:1c:57:64:59: 37:14:4d:a7:e6:52:a7:09:a7:7f:a6:d6:d1:68:c2:e0:1e:e2: a4:f1:34:ea:37:15:1e:72:9f:14:98:8f:8f:11:dd:bb:db:74: 66:74:3c:3c:33:6b:42:64:21:36:29:f9:18:ec:e0:40:5b:f3: d7:b2:11:64:4a:70:41:53:0d:c5:5f:94:f8:bf:31:a2:79:92: 3f:8e:b2:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdR2Nvv3QPgbCHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MjRkNzBmNjUtYmIzNi00YTEzLTlmZDYtZWYyMTkxOTM2OWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Fd+zVii4rRIMDCK9gcYXPBmH7/CVVAjrYs WvRNZY+5snjiwh4fvloYTnZNocJDl3Ebbf555LO7G3Gv4A1F+20U9yiAT3F24em0 0VMg9g7L6HhA67Dag3mGhTqakb0FlGpfE6I/lK/H3osWBHr+AlB2BBpF+0vpwMn/ mRDwfN0zxm7LIUi4DHSy9am6NpqFLXP+O1iZnYy/N8I0gG3wcxUibz+Mt16T17ky InjWfR8niQb12L3obt0v1WSf3VHPtPvqSBtm/DfCuR3/+HqvO1BYP378gk8OoiGM MHhX4BeCSL5Of+NTSmu7zCbB4VpWjcrt2WPT2YGR7Zkyl4DHOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdXLC1NyW0l2fZE1nyLIEgDtSZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0YTRkN2MtMTZlOC0z N2Y0LWFjMDYtMWRkY2M0NTI4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/snnYU/pfw5n9HEQZA4GpRM51MPN/LojW/8IdeT/MQsvDzZBKGNm8b bKCCOE5rafB/XaZF2HG4LGUJgrQ2kdTcG0CPO0tMRRTKVor3ytmo2XuSQvTtAJ1a /NJm6Hy/plbEVNUQDrWLR9WNqes4sUxvkRd2ec0bqRZoYVuXpbusJQbqbNQCbqcI H8HCxz/HRv80cfBjB26H9Rl+yhb9glQLbeLrQTaqPeZmIXE+cywaHFdkWTcUTafm UqcJp3+m1tFowuAe4qTxNOo3FR5ynxSYj48R3bvbdGZ0PDwza0JkITYp+Rjs4EBb 89eyEWRKcEFTDcVflPi/MaJ5kj+Osqw= -----END CERTIFICATE-----Generated at Fri Oct 24 08:19:33 2025 by rpki-client