$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa File: 45cd8a14-452c-33e9-949f-176742ba4487.roa (raw, json) Hash identifier: dNvtJcbhFoM+3Ezm/RTQ3p0gx91zWrAwBPJrJ0cCan0= Subject key identifier: 26:A0:19:70:5A:C2:11:E8:24:04:56:41:B5:BF:57:15:D1:AC:5A:5B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B0735E0313055916EEEBA80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.52.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:35:e0:31:30:55:91:6e:ee:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=fff87e2b-3175-4823-ac56-aaa765f1513b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e3:b7:12:2a:03:21:fe:1e:2f:94:11:e9:9e: 45:ab:8f:77:6e:83:b6:e4:f0:82:22:27:03:f6:49: 70:7b:83:87:95:1f:a1:ce:b0:9f:f2:c6:65:1d:08: b5:4f:30:07:32:c1:f1:63:e8:ec:0c:84:d7:6a:44: 4a:87:44:d2:40:24:de:73:fb:23:11:e4:44:fd:4f: 5a:c1:fe:f7:54:6e:3a:a4:7b:c7:34:5c:db:cf:f9: 08:15:70:b9:3a:08:77:5c:b8:fe:7c:9c:c0:07:47: 10:bc:b1:da:25:33:08:0b:f9:d5:48:f5:08:bb:0d: 4e:c6:8e:37:26:9c:67:17:43:26:cd:65:78:b6:7f: e6:f0:48:5d:5c:43:46:8a:0c:b5:1d:a1:1c:55:cd: b7:a8:9b:79:09:fb:0c:cb:93:19:b2:58:c7:bd:66: 3b:db:73:96:59:ad:ba:64:9d:ec:c7:4f:58:a5:74: da:9a:8e:02:58:b2:06:30:71:d9:33:68:30:29:9b: ac:b8:e8:47:29:6e:69:87:91:35:9f:cf:8c:e4:e3: b5:d3:6b:00:53:53:80:e7:b0:c7:b5:21:e5:04:6d: 61:32:67:75:b8:b2:27:75:a5:0b:ea:7d:f7:be:0e: 90:a5:94:8d:c9:71:a7:f8:44:7e:8b:39:81:b0:56: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A0:19:70:5A:C2:11:E8:24:04:56:41:B5:BF:57:15:D1:AC:5A:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:eb:0e:99:c6:54:0b:99:77:20:bd:c8:3e:0d:d1:20:37:f1: 28:a6:53:00:96:01:e5:10:b0:8e:dd:81:80:b9:f4:52:1b:a0: 69:cd:9f:64:84:d5:2d:ff:6f:84:7a:31:a2:2f:9f:e3:ad:cb: 6b:87:cc:97:3b:8e:08:47:20:62:b5:fb:f4:b6:ad:a5:57:b0: 58:eb:2e:13:0a:95:08:c1:7c:1f:fd:58:c5:ad:69:71:92:a1: 51:2e:86:58:39:af:40:0f:75:39:94:8b:cc:59:ed:d1:fb:c8: ab:36:ec:88:37:f1:d1:e5:de:3e:45:2b:3b:0f:20:1a:e4:c2: b3:7c:9c:89:8c:a2:9d:3f:e7:65:45:35:21:42:88:f8:c6:c2: 44:7e:8b:4f:a8:ce:59:62:64:01:7d:cd:bf:63:5b:30:f4:1a: e2:4f:44:8e:b1:72:1f:1f:04:79:25:25:49:c3:b5:51:bb:8c: bd:53:72:d7:e4:4a:d1:17:51:13:a9:12:1e:70:7f:5d:18:43: 06:ff:6f:b6:dd:80:00:6e:77:2d:1d:d3:a9:0f:99:9b:64:ae: 44:aa:db:c7:c9:74:52:ac:b4:05:e8:cb:8e:49:92:31:a5:31: 37:fd:6b:dc:cf:a4:50:49:2a:5e:6f:0d:3c:66:5a:ce:d4:ed: 97:ce:da:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzXgMTBVkW7uuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZmZmODdlMmItMzE3NS00ODIzLWFjNTYtYWFhNzY1ZjE1MTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuO3EioDIf4eL5QR6Z5Fq493boO25PCCIicD 9klwe4OHlR+hzrCf8sZlHQi1TzAHMsHxY+jsDITXakRKh0TSQCTec/sjEeRE/U9a wf73VG46pHvHNFzbz/kIFXC5Ogh3XLj+fJzAB0cQvLHaJTMIC/nVSPUIuw1Oxo43 JpxnF0MmzWV4tn/m8EhdXENGigy1HaEcVc23qJt5CfsMy5MZsljHvWY723OWWa26 ZJ3sx09YpXTamo4CWLIGMHHZM2gwKZusuOhHKW5ph5E1n8+M5OO102sAU1OA57DH tSHlBG1hMmd1uLIndaUL6n33vg6QpZSNyXGn+ER+izmBsFbcGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCagGXBawhHoJARWQbW/VxXRrFpbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDVjZDhhMTQtNDUyYy0z M2U5LTk0OWYtMTc2NzQyYmE0NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDrDpnGVAuZdyC9yD4N0SA38SimUwCWAeUQsI7dgYC59FIboGnNn2SE 1S3/b4R6MaIvn+Oty2uHzJc7jghHIGK1+/S2raVXsFjrLhMKlQjBfB/9WMWtaXGS oVEuhlg5r0APdTmUi8xZ7dH7yKs27Ig38dHl3j5FKzsPIBrkwrN8nImMop0/52VF NSFCiPjGwkR+i0+ozlliZAF9zb9jWzD0GuJPRI6xch8fBHklJUnDtVG7jL1Tctfk StEXUROpEh5wf10YQwb/b7bdgABudy0d06kPmZtkrkSq28fJdFKstAXoy45JkjGl MTf9a9zPpFBJKl5vDTxmWs7U7ZfO2oE= -----END CERTIFICATE-----Generated at Fri Oct 24 08:24:34 2025 by rpki-client