$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa File: 243cb8c9-f327-32cd-ae01-b4a75520d28d.roa (raw, json) Hash identifier: cpXDl+fkI8GNZLr5TbLmLpFBqFsXNfmvXjd7mKHXEmQ= Subject key identifier: 0E:29:64:07:8A:D4:13:98:0E:21:25:B4:39:E2:2D:FC:F5:10:87:CC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5DD1E313F47AEF0FDB20DD20 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 852 IP address blocks: 209.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e3:13:f4:7a:ef:0f:db:20:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=460bfc16-76e9-4fd5-9183-68ed9304f0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:aa:4e:64:85:97:df:55:56:6b:6a:30:54:03: f4:cf:6b:e1:2a:7e:16:9f:d5:e7:5b:4a:8f:50:eb: 60:c6:31:97:14:22:fb:6d:3c:bc:33:d4:78:78:9e: 49:8a:dd:45:7b:1b:82:a5:39:d5:ee:54:93:dd:10: ab:a3:7f:68:f2:19:2d:ad:2a:de:8b:29:69:35:8d: 19:a2:b2:b9:cf:35:89:26:2c:36:67:a3:6e:eb:5b: 3e:74:a9:41:ed:64:14:9c:e3:fd:40:50:d4:3a:ba: 42:bc:d1:24:c9:fb:76:a0:60:1e:4c:a1:bb:ba:f0: 54:fa:40:06:55:05:c8:cd:03:de:e5:9b:a4:85:8a: 5b:40:6b:46:35:7a:f5:af:62:b3:82:5c:7e:9c:f6: d5:15:77:3a:bb:f1:00:00:af:37:25:df:e0:77:f8: 0e:c2:84:19:bb:51:f0:b8:f1:ff:cc:32:6b:a6:d8: 91:b2:ee:69:73:48:41:a2:48:b2:b1:ed:16:47:fd: 7c:35:f1:dd:ea:f3:1b:e3:d8:1f:4e:ae:7c:95:36: ed:05:6f:81:14:3d:75:13:4a:61:ed:ab:49:49:fe: 0a:ea:8b:8c:44:ce:3b:18:ac:1e:84:d0:94:25:2d: b4:a3:c3:7f:93:12:7c:f6:80:36:90:0f:b8:d7:7b: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:29:64:07:8A:D4:13:98:0E:21:25:B4:39:E2:2D:FC:F5:10:87:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/243cb8c9-f327-32cd-ae01-b4a75520d28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f4:32:28:e6:1e:fb:9b:89:d9:39:98:fc:61:a8:85:44:d1:99: f9:29:ba:0d:e5:f1:79:56:18:cf:39:cd:0a:4b:d0:d2:2b:38: 0d:13:05:72:2c:9c:9f:06:38:88:e6:53:f0:4b:5c:db:af:0a: b1:6f:2a:e1:f4:cf:ad:f1:32:9f:1f:de:f4:7b:6c:40:7c:89: 32:99:58:fc:8e:6d:fe:6f:c9:21:a8:9a:1d:bb:a1:64:13:d5: e4:33:63:b5:e6:5e:27:9a:6a:29:62:80:88:5d:49:a5:f0:18: 68:6e:b8:c9:44:a7:e3:a7:84:7e:a2:02:83:a7:0e:bd:aa:12: d3:5e:b5:4f:01:67:04:fd:4e:33:de:b9:b6:d7:97:33:ad:25: c6:5d:96:3c:6c:dd:2d:78:9f:02:ee:cb:8e:03:ab:13:0d:02: fb:00:25:f0:df:b0:08:cc:c5:80:81:a0:de:44:77:9f:7c:8a: 73:89:0c:92:e3:b6:9a:f3:94:c9:a9:ec:72:72:05:5b:17:9e: 60:14:09:58:23:b0:59:93:04:45:d6:1d:58:a7:e4:66:5b:a0: df:9e:02:b5:8d:cb:c2:b5:e3:2e:13:57:ef:b8:8b:d6:39:8b: da:1d:dd:b5:ff:0d:64:03:7c:4c:5f:71:f5:2e:60:12:bd:4e: dc:b7:e7:b3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtd0eMT9HrvD9sg3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NDYwYmZjMTYtNzZlOS00ZmQ1LTkxODMtNjhlZDkzMDRmMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6pOZIWX31VWa2owVAP0z2vhKn4Wn9XnW0qP UOtgxjGXFCL7bTy8M9R4eJ5Jit1FexuCpTnV7lST3RCro39o8hktrSreiylpNY0Z orK5zzWJJiw2Z6Nu61s+dKlB7WQUnOP9QFDUOrpCvNEkyft2oGAeTKG7uvBU+kAG VQXIzQPe5ZukhYpbQGtGNXr1r2Kzglx+nPbVFXc6u/EAAK83Jd/gd/gOwoQZu1Hw uPH/zDJrptiRsu5pc0hBokiyse0WR/18NfHd6vMb49gfTq58lTbtBW+BFD11E0ph 7atJSf4K6ouMRM47GKwehNCUJS20o8N/kxJ89oA2kA+413sj3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA4pZAeK1BOYDiEltDniLfz1EIfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjQzY2I4YzktZjMyNy0z MmNkLWFlMDEtYjRhNzU1MjBkMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0VkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA9DIo5h77m4nZOZj8YaiFRNGZ+Sm6DeXxeVYYzznNCkvQ0is4DRMFciyc nwY4iOZT8Etc268KsW8q4fTPrfEynx/e9HtsQHyJMplY/I5t/m/JIaiaHbuhZBPV 5DNjteZeJ5pqKWKAiF1JpfAYaG64yUSn46eEfqICg6cOvaoS0161TwFnBP1OM965 tteXM60lxl2WPGzdLXifAu7LjgOrEw0C+wAl8N+wCMzFgIGg3kR3n3yKc4kMkuO2 mvOUyanscnIFWxeeYBQJWCOwWZMERdYdWKfkZlug354CtY3LwrXjLhNX77iL1jmL 2h3dtf8NZAN8TF9x9S5gEr1O3Lfnsw== -----END CERTIFICATE-----Generated at Fri Oct 24 08:22:09 2025 by rpki-client