$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa File: d209c303-6dbd-372b-83e5-c34af14d89c8.roa (raw, json) Hash identifier: 0hxvyFFUIR8Ag1hMiCe+5SCkppGjNZ/yjxSCvtc5ml8= Subject key identifier: CB:B1:62:50:C5:4B:69:12:6F:5A:95:29:EC:BC:37:F6:7B:24:49:3B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B0736E464D67F83BF6DEF80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.104.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:36:e4:64:d6:7f:83:bf:6d:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=3484e765-ec4d-44cd-8c60-b42d10126f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:0b:76:5b:5c:6b:e4:f3:73:4f:f0:fc:9d: ef:70:df:f5:2b:fd:dc:09:b5:2e:ff:ab:e4:47:2a: e6:fe:98:94:e7:d9:79:e5:30:c1:f0:d3:b0:77:aa: 95:ab:1c:ed:7a:ec:b7:71:41:12:5a:d7:56:6e:b3: f0:5e:40:f4:fd:32:6e:28:e4:84:72:2a:87:19:b5: 1b:f0:c8:b1:35:7d:b9:a5:96:73:7e:d8:c4:a4:7d: 19:bf:07:63:87:cf:2d:8a:01:52:21:0f:e3:e8:7b: 58:a7:23:ff:4b:db:5e:f0:3c:29:51:81:4a:94:56: 5b:d7:0d:fc:28:91:e6:f9:1b:3d:27:9d:e3:11:85: 2d:07:c6:1f:3c:c9:79:9e:2a:3e:c9:cd:e4:bc:36: 7c:de:50:18:85:ec:3f:a3:09:9c:ef:bb:5d:f2:8f: 07:bf:24:eb:4f:5e:d3:b2:3f:86:c4:7f:20:16:a8: 65:53:51:2d:47:1e:14:d5:db:dc:4c:ab:8e:5e:ae: af:77:1e:3d:25:91:1f:92:f7:2b:73:59:ed:40:c9: c8:f2:47:07:de:ac:de:9c:ae:25:e4:19:f4:59:25: b5:f8:4d:e0:37:3f:38:f3:e8:02:17:c5:02:28:ab: a5:a8:18:5d:e5:57:c5:2c:75:44:94:f7:b7:c1:31: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B1:62:50:C5:4B:69:12:6F:5A:95:29:EC:BC:37:F6:7B:24:49:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.104.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c8:9c:3f:ad:f3:f7:90:64:ce:c7:d5:8a:ba:f1:20:d2:fc: 87:96:76:b3:62:15:f6:c7:55:57:f0:27:8e:a3:f1:aa:05:f4: d1:02:3e:92:a9:f0:d1:4d:08:1a:a6:5c:56:a6:ec:3c:3b:ee: 33:1f:6f:b0:3b:c3:92:f5:54:9f:5e:ac:45:7c:26:1e:81:13: 44:aa:fd:3d:7b:69:69:01:4a:d5:f3:f9:01:aa:2b:a5:cd:07: 63:4f:c1:f7:30:2d:71:db:78:00:67:da:ba:2e:5b:06:8a:c6: 91:a6:d9:80:9e:1a:c0:16:41:39:32:10:96:f7:b2:1b:c3:6b: 4e:5f:ac:fb:57:5a:5a:79:cc:4b:47:a2:a2:c2:cc:6c:b4:87: d1:9b:5e:9a:65:4c:59:46:eb:f1:c0:77:8b:29:30:bf:2a:cd: 6a:cf:b4:55:d7:11:5b:af:bf:01:9a:5f:c5:76:5b:01:fd:44: 6e:e7:f3:e1:c5:91:0c:fa:64:f7:7f:56:bd:84:f0:ce:59:fd: ac:6f:ea:88:9c:96:0e:94:01:2a:38:74:f7:c9:7e:6d:f6:76: 58:db:84:05:25:ce:c7:98:aa:70:bb:5d:5b:ef:72:13:95:06: b6:bb:30:7d:70:c3:55:95:da:5d:86:48:4d:e6:78:9c:f8:38: 57:5c:f4:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzbkZNZ/g79t74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MzQ4NGU3NjUtZWM0ZC00NGNkLThjNjAtYjQyZDEwMTI2ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3YLdltca+Tzc0/w/J3vcN/1K/3cCbUu/6vk Ryrm/piU59l55TDB8NOwd6qVqxzteuy3cUESWtdWbrPwXkD0/TJuKOSEciqHGbUb 8MixNX25pZZzftjEpH0Zvwdjh88tigFSIQ/j6HtYpyP/S9te8DwpUYFKlFZb1w38 KJHm+Rs9J53jEYUtB8YfPMl5nio+yc3kvDZ83lAYhew/owmc77td8o8HvyTrT17T sj+GxH8gFqhlU1EtRx4U1dvcTKuOXq6vdx49JZEfkvcrc1ntQMnI8kcH3qzenK4l 5Bn0WSW1+E3gNz848+gCF8UCKKulqBhd5VfFLHVElPe3wTHz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuxYlDFS2kSb1qVKey8N/Z7JEk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDIwOWMzMDMtNmRiZC0z NzJiLTgzZTUtYzM0YWYxNGQ4OWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0WhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXInD+t8/eQZM7H1Yq68SDS/IeWdrNiFfbHVVfwJ46j8aoF9NECPpKp 8NFNCBqmXFam7Dw77jMfb7A7w5L1VJ9erEV8Jh6BE0Sq/T17aWkBStXz+QGqK6XN B2NPwfcwLXHbeABn2rouWwaKxpGm2YCeGsAWQTkyEJb3shvDa05frPtXWlp5zEtH oqLCzGy0h9GbXpplTFlG6/HAd4spML8qzWrPtFXXEVuvvwGaX8V2WwH9RG7n8+HF kQz6ZPd/Vr2E8M5Z/axv6oiclg6UASo4dPfJfm32dljbhAUlzseYqnC7XVvvchOV Bra7MH1ww1WV2l2GSE3meJz4OFdc9GA= -----END CERTIFICATE-----Generated at Fri Oct 24 08:20:57 2025 by rpki-client