$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/665f224c-3d37-35a7-9c76-d9b506123e74.roa File: 665f224c-3d37-35a7-9c76-d9b506123e74.roa (raw, json) Hash identifier: HuJb4cSUiAH6Bip53r1P6oI0DkgXk9z5OuWnzj1OQmc= Subject key identifier: 78:9C:93:A3:19:28:93:34:4B:C7:B2:7D:E9:64:B0:FF:A3:A9:8B:90 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B13D6AB9C94F72D4C975D20C0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/665f224c-3d37-35a7-9c76-d9b506123e74.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 14352 IP address blocks: 209.209.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ab:9c:94:f7:2d:4c:97:5d:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=c9c9c636-e674-4089-b067-13391e30edc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:db:d2:f4:a9:a0:4d:71:b6:9e:39:e7:26:0b: d2:89:99:d8:c0:a9:8c:50:77:28:9f:4c:10:c9:0a: dd:a3:5f:3d:f0:0a:3f:f2:44:0e:6c:77:77:bb:bd: 01:24:98:5e:bd:ef:56:0e:64:06:a9:b6:f9:53:28: 28:d3:12:05:3a:5e:9b:bc:ed:96:bb:bd:74:fe:c5: 97:2a:50:0e:00:4f:c5:bd:35:f4:c9:90:33:7a:6e: 16:9a:55:2a:e0:f0:4d:72:78:3f:65:5d:06:cf:93: 3c:8b:f0:95:de:69:32:b1:f3:0a:19:45:02:3a:ef: 98:79:f4:ee:a1:43:f7:29:dd:87:8c:27:23:cd:75: ce:0d:c1:d4:6c:49:94:4b:00:65:a5:92:dc:3b:3d: 89:30:d7:5f:aa:ca:55:3e:15:f8:a7:bb:e6:90:e8: 26:90:a2:77:f6:db:b4:69:44:4d:02:7e:33:51:cd: c3:82:5f:56:f9:6c:a0:c5:88:d7:c3:97:25:7f:45: ff:40:a0:dd:bf:ae:b9:f3:27:33:41:c0:6d:f6:71: e6:bb:50:73:4f:7c:9b:51:9d:91:3e:ea:d5:b8:e9: 03:1c:72:a9:8e:c5:55:06:ac:1d:94:f4:bd:ac:40: d9:c4:c4:9b:41:7f:af:ce:dd:ea:6a:5e:f7:43:3e: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9C:93:A3:19:28:93:34:4B:C7:B2:7D:E9:64:B0:FF:A3:A9:8B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/665f224c-3d37-35a7-9c76-d9b506123e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e5:32:96:ed:8c:7a:7f:6f:15:5e:9a:ba:03:d8:7d:e5:47: 0e:46:a8:13:ea:49:f4:48:2a:f7:46:26:e1:c4:d3:c0:8a:bf: c5:8c:ce:c3:c7:93:70:e2:77:96:a0:f3:07:49:41:c0:d9:9e: 53:a6:50:3f:cd:3a:c1:c8:e0:12:ee:80:a1:5c:6d:d9:08:72: f5:7b:c2:71:86:32:e1:31:53:54:3b:aa:b8:ee:83:17:f8:9e: b5:1c:70:d2:95:a7:fc:83:d8:26:08:ce:55:fc:ab:92:9c:a3: 82:b5:d1:75:ee:2e:44:de:54:01:b8:f7:2a:b7:9a:da:a1:79: 0d:ae:72:d7:10:c3:78:6b:63:92:d3:11:a4:d8:78:62:af:00: 5f:f3:32:ab:fb:f7:55:a3:a4:25:62:af:5b:ff:43:4e:fc:60: 2b:c1:e1:29:24:89:70:cc:7a:4d:ae:25:f7:59:6c:9f:e8:2f: 0c:7c:d5:79:0d:17:8b:ca:b2:76:6f:7f:39:ad:21:5d:6a:fc: 90:8e:f9:e1:eb:64:77:16:58:4c:97:9d:0f:0c:3f:28:f2:67: 31:2e:a5:02:50:0c:fe:64:7a:cf:46:93:ea:c9:52:e2:c5:45: 62:51:32:bd:df:4c:b5:8d:fd:95:83:0d:ab:a4:6b:28:83:cb: e2:4a:64:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1quclPctTJddIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YzljOWM2MzYtZTY3NC00MDg5LWIwNjctMTMzOTFlMzBlZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltvS9KmgTXG2njnnJgvSiZnYwKmMUHcon0wQ yQrdo1898Ao/8kQObHd3u70BJJheve9WDmQGqbb5Uygo0xIFOl6bvO2Wu710/sWX KlAOAE/FvTX0yZAzem4WmlUq4PBNcng/ZV0Gz5M8i/CV3mkysfMKGUUCOu+YefTu oUP3Kd2HjCcjzXXODcHUbEmUSwBlpZLcOz2JMNdfqspVPhX4p7vmkOgmkKJ39tu0 aURNAn4zUc3Dgl9W+WygxYjXw5clf0X/QKDdv6658yczQcBt9nHmu1BzT3ybUZ2R PurVuOkDHHKpjsVVBqwdlPS9rEDZxMSbQX+vzt3qal73Qz69mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHick6MZKJM0S8eyfelksP+jqYuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNjY1ZjIyNGMtM2QzNy0z NWE3LTljNzYtZDliNTA2MTIzZTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErlMpbtjHp/bxVemroD2H3lRw5GqBPqSfRIKvdGJuHE08CKv8WMzsPH k3Did5ag8wdJQcDZnlOmUD/NOsHI4BLugKFcbdkIcvV7wnGGMuExU1Q7qrjugxf4 nrUccNKVp/yD2CYIzlX8q5Kco4K10XXuLkTeVAG49yq3mtqheQ2uctcQw3hrY5LT EaTYeGKvAF/zMqv791WjpCVir1v/Q078YCvB4SkkiXDMek2uJfdZbJ/oLwx81XkN F4vKsnZvfzmtIV1q/JCO+eHrZHcWWEyXnQ8MPyjyZzEupQJQDP5kes9Gk+rJUuLF RWJRMr3fTLWN/ZWDDaukayiDy+JKZKI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:08 2025 by rpki-client