$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa File: 065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa (raw, json) Hash identifier: LUHdLdCQJ19v5aweKK0+HTVh7tfdGipsv3aYjHBcYMg= Subject key identifier: 6E:23:11:56:6C:DF:21:48:39:A5:09:0C:DB:68:96:FF:C1:BF:34:15 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FEDF5F6116139DEBCB00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.171.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fe:df:5f:61:16:13:9d:eb:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d67dc020-c1a1-44f8-a4bc-4a5e9065a752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:33:11:23:fc:0d:1a:c7:74:5a:13:7e:63: 57:1d:ce:35:ec:0e:27:ba:33:33:75:7f:64:1a:e6: 96:3e:6c:4c:d8:55:f6:06:91:4e:1e:79:0a:2e:8f: 86:d0:b9:69:e2:e2:87:cf:53:da:ae:c0:23:f0:9d: a4:7e:1a:da:3f:62:ed:ed:8b:88:5d:51:a7:28:26: 44:f0:14:f2:94:a5:c0:ca:fb:e2:a3:61:b7:c7:90: c1:2e:fe:b4:5e:eb:50:70:50:97:9d:b8:bf:26:a4: 40:b0:19:b5:ea:86:45:31:ce:21:6a:8c:df:7c:87: 67:66:55:0b:68:02:cd:25:2d:c9:7b:12:cd:f7:01: 3d:b5:57:b3:39:6c:99:7c:e6:5f:64:d7:8e:14:97: 26:d0:48:d0:b2:04:d2:7b:5b:d1:0b:98:fa:df:cc: 05:fb:6d:82:cf:f2:6d:bf:64:47:87:a2:17:a9:f7: fc:4e:8c:65:e8:a0:b5:37:a2:23:cd:4e:2e:47:9e: b6:b3:00:18:89:37:bb:eb:57:91:7e:b7:1d:3f:ae: 75:84:02:4e:31:d0:f0:0c:39:7c:90:51:d1:c6:84: c3:69:fa:8e:b3:ee:2d:cb:18:02:6e:7d:c4:03:47: 4b:77:43:c2:40:15:ea:84:d6:d4:7e:27:f7:0d:25: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:23:11:56:6C:DF:21:48:39:A5:09:0C:DB:68:96:FF:C1:BF:34:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/065d9d1f-ce3c-3be1-b1bd-bf824f37bc8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:61:b0:af:1b:87:51:19:44:93:a4:2e:36:c4:53:dd:a3:ef: 75:6e:08:56:c8:50:5b:fb:70:1c:6e:40:81:95:d8:c6:44:f3: 0f:7a:c0:ef:d3:a3:27:9e:69:3c:d9:69:53:6e:d1:dc:54:d2: b6:a6:f5:85:06:6a:75:b3:93:b5:c9:66:4c:ea:c4:f0:95:38: 6b:84:36:6b:4c:d2:8e:10:22:a1:9e:19:a6:1c:db:e5:89:3a: 8c:28:cd:cf:33:6b:19:4a:6c:7d:ef:95:12:ed:79:4e:56:a9: cf:a4:54:21:de:cd:e2:2a:1e:68:02:61:b7:65:2f:99:61:01: 5d:20:50:37:12:56:93:30:0b:7e:46:dd:4a:c5:25:58:f7:9b: f7:f9:15:a8:20:de:c4:90:e9:ca:71:82:36:84:6d:34:3f:29: 35:c2:e4:bd:7f:9c:4d:bd:64:cc:98:a9:31:15:82:db:c2:a3: 4c:05:12:e0:61:69:0f:aa:8d:cc:6c:8b:79:2c:a6:07:aa:a4: a8:2b:4c:cf:83:50:00:92:6a:95:15:6f:ea:a2:0d:9e:57:d3: 97:43:c3:58:f7:e0:73:ae:9d:49:34:7e:24:a9:e0:ea:e5:18: 17:a9:36:d4:85:42:67:15:60:fa:3b:38:1e:fe:e5:7f:78:ea: 1b:8f:44:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/7fX2EWE53rywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDY3ZGMwMjAtYzFhMS00NGY4LWE0YmMtNGE1ZTkwNjVhNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+MzESP8DRrHdFoTfmNXHc417A4nujMzdX9k GuaWPmxM2FX2BpFOHnkKLo+G0Llp4uKHz1ParsAj8J2kfhraP2Lt7YuIXVGnKCZE 8BTylKXAyvvio2G3x5DBLv60XutQcFCXnbi/JqRAsBm16oZFMc4haozffIdnZlUL aALNJS3JexLN9wE9tVezOWyZfOZfZNeOFJcm0EjQsgTSe1vRC5j638wF+22Cz/Jt v2RHh6IXqff8Toxl6KC1N6IjzU4uR562swAYiTe761eRfrcdP651hAJOMdDwDDl8 kFHRxoTDafqOs+4tyxgCbn3EA0dLd0PCQBXqhNbUfif3DSV9rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4jEVZs3yFIOaUJDNtolv/BvzQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDY1ZDlkMWYtY2UzYy0z YmUxLWIxYmQtYmY4MjRmMzdiYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0asCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACthsK8bh1EZRJOkLjbEU92j73VuCFbIUFv7cBxuQIGV2MZE8w96wO/T oyeeaTzZaVNu0dxU0ram9YUGanWzk7XJZkzqxPCVOGuENmtM0o4QIqGeGaYc2+WJ Oowozc8zaxlKbH3vlRLteU5Wqc+kVCHezeIqHmgCYbdlL5lhAV0gUDcSVpMwC35G 3UrFJVj3m/f5Fagg3sSQ6cpxgjaEbTQ/KTXC5L1/nE29ZMyYqTEVgtvCo0wFEuBh aQ+qjcxsi3kspgeqpKgrTM+DUACSapUVb+qiDZ5X05dDw1j34HOunUk0fiSp4Orl GBepNtSFQmcVYPo7OB7+5X946huPROU= -----END CERTIFICATE-----Generated at Sat Sep 26 04:11:20 2026 by rpki-client