$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa File: 5fbb564e-c0b2-3157-9530-de13d60a63b6.roa (raw, json) Hash identifier: NYqnkvxjXpS3atPeS0Ij2VRDJKw3pHB6ibiFujaAWb8= Subject key identifier: 3F:48:15:75:B2:1D:4F:B5:05:FE:02:FB:AD:FE:83:D5:F5:DF:18:D3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B0736CD9C59261F63DCB740 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.91.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:36:cd:9c:59:26:1f:63:dc:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=839a9bb2-c6ac-4615-b237-d4933c922305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f3:5f:a8:e1:22:fc:b0:60:4f:ee:c1:99:90: 7f:5e:b1:1f:e7:07:d3:78:d9:7a:9d:98:0a:48:cc: 2d:e5:f5:56:13:8d:ed:74:b7:58:c3:33:6a:08:50: a4:ce:39:d2:b0:8b:c9:40:8f:5c:f2:e9:b8:68:e0: 90:d6:fb:3c:54:02:27:b0:84:15:bd:99:ac:fc:97: 6b:cc:d0:8a:97:2d:29:8e:fb:95:a9:69:3b:15:0a: 5f:23:ee:91:ec:fd:65:0c:d0:8e:cd:8e:fb:76:de: 4e:be:20:c6:c7:e3:17:37:d9:67:eb:d6:78:dd:d9: 25:ae:e6:60:f5:e9:bc:9d:ff:6a:d9:f6:85:1f:53: 66:f5:39:2f:76:a4:1d:d8:62:a0:49:37:73:78:fe: cc:f2:e0:26:54:21:f1:6c:4a:ce:79:c7:73:fc:3e: a7:52:b5:50:a1:29:9a:c6:54:0f:e8:15:43:0b:d6: 0a:9d:45:d5:09:59:c4:65:36:26:e4:17:c2:b1:57: 50:be:c5:95:3c:8c:7b:64:fd:b2:e2:70:4c:17:43: e2:c9:cb:73:6d:e5:98:75:c1:2d:78:06:8b:b9:5c: f9:c4:d8:93:79:18:61:51:4a:db:e0:a7:12:16:79: dd:80:cc:fb:32:72:57:9d:10:a5:b5:6f:2f:e7:e5: d8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:48:15:75:B2:1D:4F:B5:05:FE:02:FB:AD:FE:83:D5:F5:DF:18:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5fbb564e-c0b2-3157-9530-de13d60a63b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:6c:26:15:aa:50:d8:af:49:ff:03:d8:b8:ee:65:a7:42:fe: c2:be:98:17:91:09:61:c6:90:a0:4c:34:20:54:ca:83:8b:a9: b3:71:29:54:b3:c0:22:9a:f1:ec:b6:a9:82:85:86:33:c1:8d: 4b:24:35:b2:6a:b1:02:0e:72:41:ac:c3:88:90:7d:cb:17:05: a3:44:28:fc:e6:4c:6e:54:89:78:85:84:5a:32:24:0f:4a:5a: 50:7d:6a:38:38:05:f7:81:70:cf:97:9e:0f:f6:2c:f4:27:4f: 52:48:12:45:71:33:a4:c0:12:33:0e:f3:fc:ac:76:ee:62:08: 55:e2:7c:8a:7a:f4:7b:aa:8a:97:62:7d:2d:8e:b0:97:37:1f: 62:29:16:c4:bd:95:98:e4:7a:27:e6:77:67:7d:c6:9a:26:ec: 9a:c4:e0:9a:6b:fa:7c:2e:d0:f6:ef:d3:c2:6c:e8:ed:88:f6: ce:20:c3:2c:9b:d1:0b:fc:f8:c4:79:72:ac:56:1a:ea:b0:ab: 05:c8:77:66:bc:47:58:ac:4f:dc:e9:8d:52:b1:80:30:0b:fc: 04:b3:7b:ef:5f:c4:9d:77:b2:a1:24:34:ee:40:5c:39:90:89: 5d:1a:42:70:4c:e4:a2:d5:75:50:7e:82:c2:9d:a3:b7:9d:5d: bc:4c:3c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzbNnFkmH2Pct0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODM5YTliYjItYzZhYy00NjE1LWIyMzctZDQ5MzNjOTIyMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivNfqOEi/LBgT+7BmZB/XrEf5wfTeNl6nZgK SMwt5fVWE43tdLdYwzNqCFCkzjnSsIvJQI9c8um4aOCQ1vs8VAInsIQVvZms/Jdr zNCKly0pjvuVqWk7FQpfI+6R7P1lDNCOzY77dt5OviDGx+MXN9ln69Z43dklruZg 9em8nf9q2faFH1Nm9TkvdqQd2GKgSTdzeP7M8uAmVCHxbErOecdz/D6nUrVQoSma xlQP6BVDC9YKnUXVCVnEZTYm5BfCsVdQvsWVPIx7ZP2y4nBMF0PiyctzbeWYdcEt eAaLuVz5xNiTeRhhUUrb4KcSFnndgMz7MnJXnRCltW8v5+XYcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9IFXWyHU+1Bf4C+63+g9X13xjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWZiYjU2NGUtYzBiMi0z MTU3LTk1MzAtZGUxM2Q2MGE2M2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0VtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhsJhWqUNivSf8D2LjuZadC/sK+mBeRCWHGkKBMNCBUyoOLqbNxKVSz wCKa8ey2qYKFhjPBjUskNbJqsQIOckGsw4iQfcsXBaNEKPzmTG5UiXiFhFoyJA9K WlB9ajg4BfeBcM+Xng/2LPQnT1JIEkVxM6TAEjMO8/ysdu5iCFXifIp69Huqipdi fS2OsJc3H2IpFsS9lZjkeifmd2d9xpom7JrE4Jpr+nwu0Pbv08Js6O2I9s4gwyyb 0Qv8+MR5cqxWGuqwqwXId2a8R1isT9zpjVKxgDAL/ASze+9fxJ13sqEkNO5AXDmQ iV0aQnBM5KLVdVB+gsKdo7edXbxMPCY= -----END CERTIFICATE-----Generated at Fri Oct 24 08:20:58 2025 by rpki-client