$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa File: 626acb6f-a9f2-3ded-95e5-811dd7647975.roa (raw, json) Hash identifier: W4r5eXxP2QRCjuRcLlJnO1dKk5WUsSkyZIK1mNDqEcA= Subject key identifier: BA:72:07:16:D1:79:FF:63:02:FD:B1:62:47:2B:B3:04:73:2D:29:C0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B87B21D873B706EE3A6524980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 54359 IP address blocks: 209.52.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1d:87:3b:70:6e:e3:a6:52:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=5843d023-a42b-44c6-bc32-5f0343a4f063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:98:3c:eb:af:d3:3f:ff:e4:6d:8c:a8:d6: 49:48:4b:06:c1:e4:14:d2:c0:24:79:e2:6b:97:e2: 2c:d7:50:8a:4a:2e:fc:76:e1:0c:86:7f:af:00:e9: 0a:bf:3d:e0:88:c5:a5:e9:e1:cf:10:b0:18:4e:f1: 18:da:d0:be:65:e8:86:47:ac:b4:95:63:3a:f8:9b: 34:6a:6f:5a:7c:8f:05:52:9f:c6:ec:d8:09:ec:ff: 10:1e:51:de:81:77:65:3a:91:91:fc:83:1a:4c:63: 89:5c:b7:14:18:fa:87:7d:df:90:f6:d1:54:93:68: 93:2c:b2:b7:3b:65:3a:9a:7b:48:62:1e:da:f0:53: b2:6a:4c:b0:e6:ee:83:b3:22:c2:ba:f5:3b:7b:fa: 88:21:cc:7e:60:0b:06:f0:5f:30:c7:38:96:2f:8f: 50:0b:b9:b2:89:fa:52:a6:33:db:e8:70:d5:af:ff: 0c:1a:db:95:fa:02:a8:07:9e:6b:cf:3d:e4:52:0f: c3:25:6f:93:06:e8:2d:21:4e:9e:9a:0c:6e:41:22: 2d:4d:dc:fb:c6:3d:38:92:37:0d:f8:a3:d7:bf:01: b0:9c:f9:23:c9:6d:7d:d3:9f:50:22:d5:07:95:6a: 58:97:8d:7d:f2:de:66:06:5b:d2:4d:11:58:13:28: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:07:16:D1:79:FF:63:02:FD:B1:62:47:2B:B3:04:73:2D:29:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:47:7f:28:42:68:ce:b3:6e:34:5d:6d:39:fa:44:78:e6:11: b7:24:d3:e0:cb:91:f8:0d:95:4a:b0:ed:1d:7b:d8:b2:01:67: 8d:aa:5b:c9:4b:e2:e0:84:f3:5d:01:4a:9d:b7:94:08:1b:c3: 02:dc:1d:30:ac:7b:42:b7:dd:58:ae:01:9a:36:f0:d8:28:c3: 99:52:63:ed:25:70:9c:68:e7:93:e7:b7:f5:e5:74:dd:20:bd: 5b:f7:6b:59:42:e7:57:8f:d9:67:af:30:e5:23:5b:68:44:60: bf:f3:a4:0e:e1:2b:90:f4:db:be:68:09:39:ee:d1:d8:8f:4b: 28:3d:a6:33:6e:fe:70:c7:3c:17:c9:e3:ea:e3:6e:6f:99:c9: ab:93:6f:f1:61:d8:b6:c4:e6:0f:c0:5a:8e:24:de:07:b5:92: 22:c8:b6:a7:24:76:0b:c4:85:c1:84:19:a4:6c:76:af:9b:31: 90:5b:f0:0c:6b:3f:fd:94:58:eb:3c:b1:f7:7d:38:25:8e:bc: 1c:fb:2b:9e:87:4c:a2:9b:32:ad:d2:b7:90:ce:60:54:b8:5b: 66:94:67:a8:5a:17:23:bd:70:c3:92:6d:27:f1:29:6f:9c:3b: 94:b6:37:ab:18:55:a6:5a:1a:d4:86:a5:e7:43:8f:07:f8:03: b9:35:f7:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh2HO3Bu46ZSSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NTg0M2QwMjMtYTQyYi00NGM2LWJjMzItNWYwMzQzYTRmMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU2YPOuv0z//5G2MqNZJSEsGweQU0sAkeeJr l+Is11CKSi78duEMhn+vAOkKvz3giMWl6eHPELAYTvEY2tC+ZeiGR6y0lWM6+Js0 am9afI8FUp/G7NgJ7P8QHlHegXdlOpGR/IMaTGOJXLcUGPqHfd+Q9tFUk2iTLLK3 O2U6mntIYh7a8FOyakyw5u6DsyLCuvU7e/qIIcx+YAsG8F8wxziWL49QC7myifpS pjPb6HDVr/8MGtuV+gKoB55rzz3kUg/DJW+TBugtIU6emgxuQSItTdz7xj04kjcN +KPXvwGwnPkjyW19059QItUHlWpYl4198t5mBlvSTRFYEyjfswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpyBxbRef9jAv2xYkcrswRzLSnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjI2YWNiNmYtYTlmMi0z ZGVkLTk1ZTUtODExZGQ3NjQ3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJHfyhCaM6zbjRdbTn6RHjmEbck0+DLkfgNlUqw7R172LIBZ42qW8lL 4uCE810BSp23lAgbwwLcHTCse0K33ViuAZo28Ngow5lSY+0lcJxo55Pnt/XldN0g vVv3a1lC51eP2WevMOUjW2hEYL/zpA7hK5D0275oCTnu0diPSyg9pjNu/nDHPBfJ 4+rjbm+ZyauTb/Fh2LbE5g/AWo4k3ge1kiLItqckdgvEhcGEGaRsdq+bMZBb8Axr P/2UWOs8sfd9OCWOvBz7K56HTKKbMq3St5DOYFS4W2aUZ6haFyO9cMOSbSfxKW+c O5S2N6sYVaZaGtSGpedDjwf4A7k19wQ= -----END CERTIFICATE-----Generated at Fri Oct 24 08:22:11 2025 by rpki-client