$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa File: 9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa (raw, json) Hash identifier: 1TUS+wRFD28mMFdjBBZT3A5uqJ2UHgzjxoiKSy/k5MU= Subject key identifier: F6:81:B9:D0:F2:1C:D8:D9:9C:E6:A2:92:D5:CA:52:BE:07:E0:64:D0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA7940CBB31AC2C5D843E9580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21723 IP address blocks: 209.53.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:0c:bb:31:ac:2c:5d:84:3e:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2025b2df-0c22-4d9a-86ed-8fabbb0eb591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b3:8d:be:c8:dc:2b:0e:7b:76:b3:c9:88:da: f2:fd:af:5c:e2:7f:6d:ef:ad:82:e0:d9:3b:12:c5: da:68:52:52:95:92:4c:c8:da:ee:ca:1d:32:5b:d2: f9:ab:f5:bd:ea:40:21:e9:eb:5b:f0:51:cc:34:6a: 76:c6:c5:63:9b:e4:9a:16:3c:8c:bf:96:6e:db:f7: 02:de:57:a5:10:ad:71:22:08:b7:40:9b:0f:4c:70: 9a:f5:5b:2a:47:94:89:dc:51:e8:f5:6d:24:92:16: f5:59:87:df:7e:28:4c:6a:b4:0e:48:70:63:47:fb: 23:f8:b6:12:aa:f9:b0:1d:4a:24:c4:e6:c5:ed:16: 1e:85:f0:d6:7f:f2:53:67:62:18:3c:0e:a1:b9:b1: a8:1b:7f:1e:2e:3e:a3:1e:68:c7:cc:fe:4d:80:0d: 0d:20:cf:97:9b:89:a6:0f:aa:09:52:18:aa:9d:f1: f6:53:b7:99:c8:c0:4c:7f:af:e5:50:b8:11:42:ae: 6c:46:a3:6e:e6:12:b6:00:dd:e6:1c:35:a3:2f:4d: 6c:96:b4:9a:c4:a1:ec:2e:0e:44:f0:30:de:5f:c3: 20:b1:40:ca:24:ac:c2:50:ce:79:cb:a8:69:f7:cf: 2b:18:f3:92:df:8e:0e:73:f9:3f:b1:fc:ed:84:f4: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:81:B9:D0:F2:1C:D8:D9:9C:E6:A2:92:D5:CA:52:BE:07:E0:64:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9cafcd7f-32ae-3a79-97b6-3aab3673281f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:26:ca:a2:17:be:0f:c7:84:c5:a6:89:c2:30:8e:cf:0a:ca: 19:b2:89:9c:be:17:b1:b1:1f:6b:b9:2d:53:bd:37:3b:df:97: 4b:6e:95:12:80:e0:04:f6:56:73:06:03:25:48:86:ab:3a:2f: ac:a7:b2:f6:a1:8b:7c:64:8b:53:b4:53:21:98:ae:e5:d3:41: 3f:44:70:9a:b6:c3:00:cd:5b:c3:5d:61:4c:f4:dc:68:61:96: cc:90:72:98:10:21:d0:1d:91:02:e6:48:8a:3c:52:54:bd:32: 3d:28:9d:1d:f0:3c:be:d7:d9:20:bb:42:d4:98:df:f4:3e:4a: e2:48:2b:0f:90:1b:bf:b9:33:5f:b7:55:1c:5e:16:b0:08:dd: f4:94:8d:90:39:4c:8b:db:1f:1b:45:51:73:ff:d1:22:0b:bd: a3:e9:71:18:b7:a7:73:05:68:52:1e:68:e2:a4:18:c7:75:b7: 1d:c5:4e:5d:e9:a6:13:b8:24:80:45:ed:de:95:e5:a4:6b:68: c0:d3:e2:1e:39:ee:d0:21:22:26:43:7d:c9:02:ab:ba:4e:12: 7e:d3:f9:75:25:f0:40:f5:a3:a6:d4:4c:90:f4:54:16:d4:22: f8:a5:db:45:7d:1c:ac:f3:e3:0e:e6:24:2a:33:05:61:90:c6: 5b:85:20:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlAy7MawsXYQ+lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjAyNWIyZGYtMGMyMi00ZDlhLTg2ZWQtOGZhYmJiMGViNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrONvsjcKw57drPJiNry/a9c4n9t762C4Nk7 EsXaaFJSlZJMyNruyh0yW9L5q/W96kAh6etb8FHMNGp2xsVjm+SaFjyMv5Zu2/cC 3lelEK1xIgi3QJsPTHCa9VsqR5SJ3FHo9W0kkhb1WYfffihMarQOSHBjR/sj+LYS qvmwHUokxObF7RYehfDWf/JTZ2IYPA6hubGoG38eLj6jHmjHzP5NgA0NIM+Xm4mm D6oJUhiqnfH2U7eZyMBMf6/lULgRQq5sRqNu5hK2AN3mHDWjL01slrSaxKHsLg5E 8DDeX8MgsUDKJKzCUM55y6hp988rGPOS344Oc/k/sfzthPTObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaBudDyHNjZnOaiktXKUr4H4GTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWNhZmNkN2YtMzJhZS0z YTc5LTk3YjYtM2FhYjM2NzMyODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0myqIXvg/HhMWmicIwjs8KyhmyiZy+F7GxH2u5LVO9Nzvfl0tulRKA 4AT2VnMGAyVIhqs6L6ynsvahi3xki1O0UyGYruXTQT9EcJq2wwDNW8NdYUz03Ghh lsyQcpgQIdAdkQLmSIo8UlS9Mj0onR3wPL7X2SC7QtSY3/Q+SuJIKw+QG7+5M1+3 VRxeFrAI3fSUjZA5TIvbHxtFUXP/0SILvaPpcRi3p3MFaFIeaOKkGMd1tx3FTl3p phO4JIBF7d6V5aRraMDT4h457tAhIiZDfckCq7pOEn7T+XUl8ED1o6bUTJD0VBbU Ivil20V9HKzz4w7mJCozBWGQxluFIFk= -----END CERTIFICATE-----Generated at Wed Jul 29 06:29:00 2026 by rpki-client