$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa File: 7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa (raw, json) Hash identifier: 8T6eo7eQOEPFEPpnAtHDmKsc/A9nsB1RPkHZVdHAi8U= Subject key identifier: C6:9F:CD:C9:CE:FF:C0:63:C6:A2:07:CE:03:40:33:CB:CF:6C:79:EF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B4D11CC088B5BB785C3A7CA00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 15247 IP address blocks: 209.53.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:cc:08:8b:5b:b7:85:c3:a7:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=5bf072cb-ed58-446a-a0f5-82e06b7f1575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:a8:55:dd:31:1e:75:42:29:84:61:8e:e9: 5a:e9:a6:9e:be:12:20:be:90:58:72:2c:87:0d:58: 8d:6e:53:6f:c4:fb:32:ff:87:fa:d3:d2:39:0f:c2: d5:7a:1e:b1:f8:57:fa:5a:35:21:8e:b8:8f:ec:a5: 32:c9:b5:d4:56:76:2a:36:08:19:39:e1:60:18:72: 99:de:f5:93:10:d1:a1:2e:39:6c:8e:fa:f8:5b:8d: 8c:ef:38:43:25:8d:7b:33:f9:cf:b0:9a:d8:5d:0c: 91:4d:d6:47:8e:3d:e7:10:46:4a:22:f5:1a:90:7b: 43:b3:4b:61:48:ee:e5:16:89:c2:2a:40:c2:d1:60: 8f:06:51:39:5a:df:f3:bd:a1:99:9e:2d:7c:3b:2c: a0:5f:30:3a:44:93:1a:e8:a4:20:b8:0b:61:93:2f: 84:22:ca:64:1f:b8:ef:24:56:01:3c:15:e2:71:c5: 1e:98:8f:fe:29:78:61:71:67:04:7c:2c:cc:d0:66: 0f:fb:da:e3:c3:83:32:da:1c:4a:2f:d6:dd:2a:86: e6:22:4c:2e:10:a8:11:be:78:0e:ad:3f:18:b6:4b: e7:03:19:83:b4:53:0a:ea:3e:6a:0b:06:ef:31:1c: 46:db:44:aa:e2:80:4e:4d:74:a7:cb:ea:53:7e:51: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:CD:C9:CE:FF:C0:63:C6:A2:07:CE:03:40:33:CB:CF:6C:79:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7aa3a8b6-481e-3816-ad73-d14f67ddc869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:e8:fb:f4:68:ef:83:77:f5:19:48:83:b6:2d:8f:9e:7c:08: 3d:f6:7c:1a:f7:44:2b:60:17:a7:94:f1:ba:74:36:be:44:0f: f2:7e:4b:03:28:f6:71:17:72:37:b5:7c:da:b8:ca:cd:0b:e2: 85:4e:2f:59:d4:fc:be:4b:0f:50:27:99:0e:58:64:29:f1:2e: c9:9c:1c:96:2e:93:e6:a8:05:23:f5:0e:69:8f:ed:9c:24:89: 7f:c7:72:df:29:80:26:02:d0:69:8a:53:5d:85:9e:89:d0:7e: f3:45:dd:b4:a9:fd:38:39:f1:00:e1:21:91:15:73:ad:15:95: 95:f3:9f:e6:b6:a2:a4:2b:91:f8:be:8c:c0:65:03:17:e5:94: 65:3d:05:4c:3b:47:6d:85:c4:da:a6:6b:6f:d2:e3:7b:59:19: 62:9a:91:7d:1f:97:d4:91:bb:4c:f3:88:15:8f:75:95:df:10: 79:22:f0:48:14:19:9e:91:31:67:82:3f:68:18:78:dc:d0:d7: c6:0b:4a:c3:ee:5e:2e:82:6b:99:e1:fb:9a:5d:af:4c:94:5c: 16:16:28:db:0f:97:9c:a8:ac:1e:e0:7f:7a:0f:55:93:c4:2d: 37:0c:0f:d5:78:38:82:60:3a:eb:f7:ed:64:71:f2:3b:be:47: c5:0b:6f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcwIi1u3hcOnygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NWJmMDcyY2ItZWQ1OC00NDZhLWEwZjUtODJlMDZiN2YxNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGOoVd0xHnVCKYRhjula6aaevhIgvpBYciyH DViNblNvxPsy/4f609I5D8LVeh6x+Ff6WjUhjriP7KUyybXUVnYqNggZOeFgGHKZ 3vWTENGhLjlsjvr4W42M7zhDJY17M/nPsJrYXQyRTdZHjj3nEEZKIvUakHtDs0th SO7lFonCKkDC0WCPBlE5Wt/zvaGZni18OyygXzA6RJMa6KQguAthky+EIspkH7jv JFYBPBXiccUemI/+KXhhcWcEfCzM0GYP+9rjw4My2hxKL9bdKobmIkwuEKgRvngO rT8YtkvnAxmDtFMK6j5qCwbvMRxG20Sq4oBOTXSny+pTflGPcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMafzcnO/8BjxqIHzgNAM8vPbHnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2FhM2E4YjYtNDgxZS0z ODE2LWFkNzMtZDE0ZjY3ZGRjODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMro+/Ro74N39RlIg7Ytj558CD32fBr3RCtgF6eU8bp0Nr5ED/J+SwMo 9nEXcje1fNq4ys0L4oVOL1nU/L5LD1AnmQ5YZCnxLsmcHJYuk+aoBSP1DmmP7Zwk iX/Hct8pgCYC0GmKU12FnonQfvNF3bSp/Tg58QDhIZEVc60VlZXzn+a2oqQrkfi+ jMBlAxfllGU9BUw7R22FxNqma2/S43tZGWKakX0fl9SRu0zziBWPdZXfEHki8EgU GZ6RMWeCP2gYeNzQ18YLSsPuXi6Ca5nh+5pdr0yUXBYWKNsPl5yorB7gf3oPVZPE LTcMD9V4OIJgOuv37WRx8ju+R8ULbwY= -----END CERTIFICATE-----Generated at Fri Oct 24 08:20:52 2025 by rpki-client