$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa File: 35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa (raw, json) Hash identifier: a6lOiylfYm1CL6pzAEgwCd0eOvNTslkANaTgLdUvfvA= Subject key identifier: 29:D3:79:DD:4C:2F:BB:5D:2F:C7:8D:AA:E1:62:20:DC:C4:12:D3:38 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FAAACCD242AB36B68B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7861 IP address blocks: 209.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fa:aa:cc:d2:42:ab:36:b6:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba7da6f9-64f6-4d8a-98f5-ec5cf003b007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:1b:e4:05:c8:31:a8:45:2e:da:96:7c:e6: a1:38:06:0e:4a:b1:24:25:91:62:20:20:d6:f9:08: e0:d4:06:5f:4f:f9:86:2f:6c:c7:d8:95:4b:09:51: c6:10:18:79:dc:2e:cc:d3:f4:e4:08:0c:22:73:0e: c9:50:1d:b5:2b:68:b9:c3:b9:82:34:35:77:13:75: a4:a2:bd:f7:a6:17:92:af:ab:dc:73:f3:44:13:3a: 0e:41:08:b3:a2:9e:60:7d:8a:a5:2c:f6:d1:96:05: 96:0f:fe:80:81:a2:38:5e:6a:87:3a:19:d0:d3:09: 01:67:ab:56:38:88:36:7f:62:f2:4d:a9:bd:b1:f6: 24:a1:83:c2:5b:50:fc:67:a2:f5:6d:8f:5f:f8:25: 7d:b5:36:f1:2e:b9:8f:47:5b:94:23:b7:5c:3b:11: 44:90:01:4f:b2:8f:59:c6:8c:ae:38:79:36:c9:88: 22:5a:62:66:2f:93:59:6f:9f:83:f1:1b:10:13:4b: 48:f6:4f:39:5e:c5:aa:86:99:60:41:f7:14:29:74: 30:4a:36:2c:0d:b3:62:5e:d9:e3:f4:74:79:9f:8e: 1d:bf:4e:d6:a0:d8:97:54:e6:5e:c3:e4:77:2b:46: 7f:5d:70:45:80:0f:47:57:99:9b:76:70:de:1f:7a: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D3:79:DD:4C:2F:BB:5D:2F:C7:8D:AA:E1:62:20:DC:C4:12:D3:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e9:0f:f2:cb:9d:10:49:3e:66:22:5b:9a:0c:92:72:05:2c:98: 84:aa:1b:91:7c:b0:eb:7f:bd:2a:73:31:1d:53:0b:f1:c3:cf: 05:ab:f5:24:0f:95:af:61:f2:a4:b7:1f:0e:8c:79:c8:87:71: 27:16:99:8b:e1:d6:12:7d:88:da:c4:a9:e0:9b:03:dc:3d:9a: bd:e0:9a:17:1b:c2:4d:cd:62:fd:aa:03:00:2b:3d:8e:71:c7: fb:c2:6f:04:0e:26:24:8e:3d:0f:eb:ff:4d:40:42:5b:05:a5: 38:86:f5:96:97:ac:1d:4c:9d:7e:e7:2d:b7:8e:60:36:a3:4e: 0f:d3:89:ec:66:a6:14:30:dc:5b:c0:d0:45:6d:a6:8b:41:29: b2:41:19:37:af:62:28:8c:75:1a:24:ff:de:db:e4:d8:18:18: c9:50:07:9b:56:a2:85:0d:11:e1:f7:2f:82:27:c9:1f:69:7d: 9f:d5:2a:7e:2e:b9:98:46:03:e2:8a:25:ff:cc:db:35:e8:a6: 06:b6:67:b5:34:02:29:ea:c5:bd:87:20:38:5d:35:7e:6d:ab: ec:61:7a:91:fc:19:76:57:ca:68:96:2e:4a:8b:55:69:95:21: 77:9f:f6:db:87:fa:81:8a:c7:4e:7a:42:eb:4a:39:b5:a1:0a: f5:fc:c8:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/qqzNJCqza2iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE3ZGE2ZjktNjRmNi00ZDhhLTk4ZjUtZWM1Y2YwMDNiMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6kb5AXIMahFLtqWfOahOAYOSrEkJZFiICDW +Qjg1AZfT/mGL2zH2JVLCVHGEBh53C7M0/TkCAwicw7JUB21K2i5w7mCNDV3E3Wk or33pheSr6vcc/NEEzoOQQizop5gfYqlLPbRlgWWD/6AgaI4XmqHOhnQ0wkBZ6tW OIg2f2LyTam9sfYkoYPCW1D8Z6L1bY9f+CV9tTbxLrmPR1uUI7dcOxFEkAFPso9Z xoyuOHk2yYgiWmJmL5NZb5+D8RsQE0tI9k85XsWqhplgQfcUKXQwSjYsDbNiXtnj 9HR5n44dv07WoNiXVOZew+R3K0Z/XXBFgA9HV5mbdnDeH3plsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnTed1ML7tdL8eNquFiINzEEtM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzVhNDlkYjMtYTc3OC0z YmZjLTg3N2EtYzljZWE5ZTVhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOkP8sudEEk+ZiJbmgyScgUsmISqG5F8sOt/vSpzMR1TC/HDzwWr9SQP la9h8qS3Hw6MeciHcScWmYvh1hJ9iNrEqeCbA9w9mr3gmhcbwk3NYv2qAwArPY5x x/vCbwQOJiSOPQ/r/01AQlsFpTiG9ZaXrB1MnX7nLbeOYDajTg/TiexmphQw3FvA 0EVtpotBKbJBGTevYiiMdRok/97b5NgYGMlQB5tWooUNEeH3L4InyR9pfZ/VKn4u uZhGA+KKJf/M2zXopga2Z7U0Ainqxb2HIDhdNX5tq+xhepH8GXZXymiWLkqLVWmV IXef9tuH+oGKx056QutKObWhCvX8yHE= -----END CERTIFICATE-----Generated at Tue Sep 29 02:52:16 2026 by rpki-client