$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa File: 33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa (raw, json) Hash identifier: Fyc1u9iKQ3NCoLR180EMgPfOfotgL78ExvUQ5nULSgg= Subject key identifier: DC:89:1C:DD:B3:44:B0:75:65:66:BB:79:C1:F6:EC:61:15:5A:C0:72 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973BC841D316EC3B05B69C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21723 IP address blocks: 209.53.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:bc:84:1d:31:6e:c3:b0:5b:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e280fbea-37ee-4d84-92f4-c6081752ffb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:90:39:63:82:a0:53:c3:25:2d:9c:4b:61:bb: 0a:82:97:6e:b5:b3:c1:a8:6b:dc:0b:55:7e:30:0c: bb:dd:a4:05:86:69:b1:7f:40:62:77:1f:3e:85:a4: bf:b4:38:12:b3:09:c4:8e:f0:ba:50:56:aa:5a:28: 2e:22:2e:01:26:fa:de:d6:ae:24:b4:89:3e:8d:4b: cb:a1:31:b5:10:b0:27:7b:da:26:5b:12:b3:45:11: d4:c6:88:61:5e:1e:cb:d2:08:a4:64:0f:ab:0b:d2: 80:e0:4c:b5:f1:90:2c:97:a8:95:35:b9:b5:54:8c: 18:0a:b0:93:bd:71:69:b6:ce:41:67:66:68:18:2e: f9:c4:6d:6e:eb:7f:78:11:a4:06:61:77:e8:07:04: 0f:b7:69:3c:db:e0:12:c5:b5:1e:40:55:bd:f8:3f: 25:91:ae:f1:9c:46:2e:57:ed:a1:c1:b4:23:5f:9b: 1b:80:75:0b:f0:f4:1f:0f:7f:76:55:bc:8b:23:6f: 9d:37:4c:32:d2:88:7f:0b:9e:00:09:31:80:6c:2e: 9b:5b:72:ed:0c:45:47:99:93:c0:52:7b:4b:1d:5f: 92:4e:e4:b5:9e:0c:00:03:7d:6d:2e:dd:3a:74:93: f5:3c:5e:76:7b:a2:19:95:cf:22:3d:0b:0e:a7:c8: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:1C:DD:B3:44:B0:75:65:66:BB:79:C1:F6:EC:61:15:5A:C0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d0:0b:e0:e6:c0:87:3b:dc:03:c3:aa:f8:49:43:86:73:ab: 24:20:dc:53:f2:91:d0:34:43:c7:64:bf:76:1b:a1:c3:ae:9e: 15:0f:02:c3:5b:59:a4:52:8c:97:e5:62:95:cd:af:eb:9c:27: dd:a6:0b:a7:75:24:cb:ab:24:ec:1c:00:cc:3b:bc:1e:bf:fa: 32:5b:a3:da:7a:6c:ab:0a:74:ca:22:c5:b5:68:9d:2d:90:fc: 5b:54:e1:76:00:60:22:7b:22:15:cc:5f:7e:03:07:af:40:33: 71:cc:cf:82:85:b2:a0:84:e3:8c:a3:73:84:eb:19:be:82:75: 98:3e:1d:e7:41:d1:bd:97:63:8e:89:68:e4:f6:e1:2a:fc:15: 0b:65:59:86:ec:05:91:2d:95:2e:a6:0f:bf:1f:8c:93:ec:e4: e9:68:8e:bc:33:5a:a8:45:58:85:2e:11:1f:03:77:8f:f6:33: 98:04:a6:76:53:f8:2e:ca:aa:16:44:05:cb:1a:2d:e1:ca:4f: c9:99:f4:61:ce:ea:9b:db:f2:0b:ee:01:a8:a9:db:ca:94:ee: ac:89:3f:32:d7:32:1d:51:77:7d:7c:00:2e:d9:03:bc:2d:18: 65:b3:29:d6:f5:cf:6e:18:05:43:b7:f6:43:84:3c:66:49:fa: e4:af:16:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7yEHTFuw7BbacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTI4MGZiZWEtMzdlZS00ZDg0LTkyZjQtYzYwODE3NTJmZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJA5Y4KgU8MlLZxLYbsKgpdutbPBqGvcC1V+ MAy73aQFhmmxf0Bidx8+haS/tDgSswnEjvC6UFaqWiguIi4BJvre1q4ktIk+jUvL oTG1ELAne9omWxKzRRHUxohhXh7L0gikZA+rC9KA4Ey18ZAsl6iVNbm1VIwYCrCT vXFpts5BZ2ZoGC75xG1u6394EaQGYXfoBwQPt2k82+ASxbUeQFW9+D8lka7xnEYu V+2hwbQjX5sbgHUL8PQfD392VbyLI2+dN0wy0oh/C54ACTGAbC6bW3LtDEVHmZPA UntLHV+STuS1ngwAA31tLt06dJP1PF52e6IZlc8iPQsOp8g+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyJHN2zRLB1ZWa7ecH27GEVWsByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzMzMzRhZjItYjc2Yy0z ZjNkLTlhNzEtNDZlYTIxYjMwY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvQC+DmwIc73APDqvhJQ4ZzqyQg3FPykdA0Q8dkv3YbocOunhUPAsNb WaRSjJflYpXNr+ucJ92mC6d1JMurJOwcAMw7vB6/+jJbo9p6bKsKdMoixbVonS2Q /FtU4XYAYCJ7IhXMX34DB69AM3HMz4KFsqCE44yjc4TrGb6CdZg+HedB0b2XY46J aOT24Sr8FQtlWYbsBZEtlS6mD78fjJPs5OlojrwzWqhFWIUuER8Dd4/2M5gEpnZT +C7KqhZEBcsaLeHKT8mZ9GHO6pvb8gvuAaip28qU7qyJPzLXMh1Rd318AC7ZA7wt GGWzKdb1z24YBUO39kOEPGZJ+uSvFvk= -----END CERTIFICATE-----Generated at Tue Sep 29 04:50:28 2026 by rpki-client