$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa File: 33b10fc7-6c11-3e08-9337-3984e76df073.roa (raw, json) Hash identifier: lZT75473LIVMBBtrM6OMkrRSq0VphDWlxqfL9s3bjUw= Subject key identifier: 29:4D:EF:D3:0D:42:34:06:31:EB:96:CF:DA:28:FF:B0:10:34:BA:A5 Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584A9D30D928E71FEA9D971678C0 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 140911 IP address blocks: 209.58.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:d9:28:e7:1f:ea:9d:97:16:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=60270375-bfe6-46c0-aca2-8b7f90a6f1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:65:5b:96:b9:25:c9:9e:57:99:b6:5f:4a: 91:8b:fc:44:0c:ea:be:a2:01:83:f8:18:1f:f2:50: 2b:4f:96:e4:65:1f:c8:89:7b:7f:71:31:41:5e:7c: ac:04:db:81:63:6c:d5:63:57:a4:c3:90:3f:ad:3b: ec:ff:b6:3e:0e:82:f1:1b:4e:0a:f4:20:73:72:fd: 8a:83:cf:41:a8:c8:98:3f:1a:1d:d0:ed:b9:eb:a3: 97:d8:58:8d:7e:94:49:cf:d5:53:c9:f4:43:14:8c: 70:e4:5c:d8:1e:77:4e:41:9e:0a:cf:a7:74:31:bc: 66:1f:2e:ef:9f:83:1d:f4:96:e9:4b:29:c5:db:0e: d5:82:1e:df:e4:a6:e2:29:c2:8b:d1:74:68:86:8b: cc:33:3b:58:27:42:22:66:ec:ec:18:8b:75:f4:e6: 87:9a:d8:ed:aa:1d:d7:3a:32:ad:2d:71:9c:74:97: 7b:4b:97:6d:eb:9d:a9:8a:bb:65:4b:16:f8:55:26: e2:0f:61:8f:00:50:90:1c:88:87:c5:98:0a:dc:88: 4d:a7:20:ab:23:24:ac:11:e2:65:6d:ce:b6:ec:78: 5f:1f:6f:7a:0e:fb:87:1b:6d:65:dc:2c:77:5c:2e: df:93:d4:a2:24:4f:b3:6b:c0:f4:c2:57:7b:12:69: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4D:EF:D3:0D:42:34:06:31:EB:96:CF:DA:28:FF:B0:10:34:BA:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/33b10fc7-6c11-3e08-9337-3984e76df073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6f:73:14:07:e7:44:17:dc:5d:08:81:bb:cd:9e:ae:2c:ff: e5:0a:ee:04:f3:96:cb:68:0a:80:83:ff:61:33:5e:2b:ab:e5: 64:73:07:20:3c:46:b2:d8:fa:25:a5:96:50:fd:11:23:22:4f: 17:03:65:b7:5a:1f:1a:64:b4:8f:f6:51:17:9f:3e:43:a8:5c: 94:86:b9:38:49:56:73:fc:84:90:1d:ce:90:6c:57:3a:b1:13: ec:b6:04:90:54:31:42:44:80:79:b8:ea:96:23:8a:10:bd:2c: 15:da:34:63:84:a4:f0:11:e0:e2:79:3f:66:83:75:14:a5:fc: 38:ca:49:13:6d:6f:22:75:d8:1c:9f:56:3a:15:2a:35:53:b4: 84:a8:33:0f:40:fe:32:65:a2:c7:f5:ba:35:36:20:cf:7c:b9: 33:5e:3e:77:8b:75:64:be:9f:14:a3:08:fe:19:1c:04:43:9c: 8a:6c:50:44:b2:e8:d4:d5:17:7c:b4:86:6b:b0:af:e7:d4:c6: 1b:63:1e:99:df:bc:7c:d2:ee:f0:d2:54:e4:58:88:d1:24:26: 74:c4:9e:d9:2a:2f:be:8e:ee:76:5e:a1:46:88:03:44:a7:4a: b1:e5:08:3d:7c:ac:e8:8c:71:a6:aa:0b:f5:e5:d7:1f:3d:fa: fc:76:21:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMNko5x/qnZcWeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NjAyNzAzNzUtYmZlNi00NmMwLWFjYTItOGI3ZjkwYTZmMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrJlW5a5JcmeV5m2X0qRi/xEDOq+ogGD+Bgf 8lArT5bkZR/IiXt/cTFBXnysBNuBY2zVY1ekw5A/rTvs/7Y+DoLxG04K9CBzcv2K g89BqMiYPxod0O2566OX2FiNfpRJz9VTyfRDFIxw5FzYHndOQZ4Kz6d0MbxmHy7v n4Md9JbpSynF2w7Vgh7f5KbiKcKL0XRohovMMztYJ0IiZuzsGIt19OaHmtjtqh3X OjKtLXGcdJd7S5dt652pirtlSxb4VSbiD2GPAFCQHIiHxZgK3IhNpyCrIySsEeJl bc627HhfH296DvuHG21l3Cx3XC7fk9SiJE+za8D0wld7Emk9fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClN79MNQjQGMeuWz9oo/7AQNLqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvMzNiMTBmYzctNmMxMS0z ZTA4LTkzMzctMzk4NGU3NmRmMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TpKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9vcxQH50QX3F0IgbvNnq4s/+UK7gTzlstoCoCD/2EzXiur5WRzByA8 RrLY+iWlllD9ESMiTxcDZbdaHxpktI/2URefPkOoXJSGuThJVnP8hJAdzpBsVzqx E+y2BJBUMUJEgHm46pYjihC9LBXaNGOEpPAR4OJ5P2aDdRSl/DjKSRNtbyJ12Byf VjoVKjVTtISoMw9A/jJlosf1ujU2IM98uTNePneLdWS+nxSjCP4ZHARDnIpsUESy 6NTVF3y0hmuwr+fUxhtjHpnfvHzS7vDSVORYiNEkJnTEntkqL76O7nZeoUaIA0Sn SrHlCD18rOiMcaaqC/Xl1x89+vx2Idg= -----END CERTIFICATE-----Generated at Fri Jul 25 12:59:53 2025 by rpki-client