$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/61affa44-9569-3cc0-bf04-c5d3038eb594.roa File: 61affa44-9569-3cc0-bf04-c5d3038eb594.roa (raw, json) Hash identifier: dTcWD5N9aUHh2zAo0G6CgNZhD2PbcGYIQOYPKuIpPRQ= Subject key identifier: 2E:D5:37:35:49:3C:9C:70:CA:10:83:9F:93:AB:13:84:D8:F4:64:CD Certificate issuer: /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Certificate serial: 010D0C9F4328584A9D30D95676773F34E4CB1300 Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/61affa44-9569-3cc0-bf04-c5d3038eb594.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 139309 IP address blocks: 209.58.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:d9:56:76:77:3f:34:e4:cb:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=77a1a26a-86d5-438f-b34c-2d068ef56394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:e5:b4:71:ec:b6:88:8b:9a:50:43:b8:50: 8b:1c:71:15:54:0b:72:df:9c:76:ee:a0:e6:03:88: a8:91:fd:2d:39:93:b6:ad:39:6b:ab:79:70:60:fd: 8e:35:d0:bd:6f:bd:db:8f:df:ed:9d:58:dc:94:16: 09:ad:4b:ca:79:f4:de:89:c5:a9:d0:4e:c4:45:f5: 30:31:ec:b9:e6:d4:64:3f:94:90:13:ab:d2:6a:c1: 36:98:9b:c1:52:e2:c7:8e:0c:ab:14:c5:4b:23:89: 31:e4:86:d7:56:ee:d9:12:b0:9e:3d:96:80:40:56: 19:f9:39:a2:d0:08:90:1f:8b:44:90:ea:b2:40:33: 2c:0e:0c:14:5f:bb:51:17:91:f8:df:44:0d:ba:9b: a2:cc:5e:67:b1:dc:21:c7:b4:b5:48:6f:5e:5b:9b: 25:b7:4b:c0:b0:ba:c4:f3:78:1c:0e:7d:b9:3a:5e: 65:52:dc:ca:84:85:3f:5b:c3:18:04:81:6c:50:ff: 87:01:c9:b1:ec:06:f3:71:2a:27:37:cc:9d:1d:11: 5d:70:46:88:f9:1c:ea:6f:2a:d4:3e:91:ff:42:f4: ac:11:f2:a5:c6:06:7f:a0:02:5e:33:89:41:3c:29: 16:6c:c8:be:3e:63:c4:91:44:93:9a:9f:83:b8:e7: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D5:37:35:49:3C:9C:70:CA:10:83:9F:93:AB:13:84:D8:F4:64:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/61affa44-9569-3cc0-bf04-c5d3038eb594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl X509v3 Authority Key Identifier: keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer sbgp-ipAddrBlock: critical IPv4: 209.58.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:12:54:05:6a:29:2c:8f:75:d2:15:1a:82:b4:35:54:65:56: 70:e9:da:b4:9a:a8:a5:80:9a:82:66:73:e8:91:6a:dd:d7:8f: 90:ec:05:1c:09:16:b5:48:cf:99:4b:f1:91:0e:7f:ba:10:54: 03:20:68:f5:97:e5:91:17:0f:af:7f:11:d4:1d:24:a0:fc:62: c9:cc:b6:e0:95:a5:5a:2c:f7:53:b6:b4:c8:02:33:3d:0c:69: dd:19:d8:95:de:85:4c:56:e1:f2:e5:e0:2e:70:c6:88:9f:f2: fb:5a:2e:62:ef:45:98:32:af:e2:90:86:10:b3:70:d4:f2:98: 48:88:c2:2f:a4:10:65:38:96:5a:5b:5f:59:ec:a9:d2:a6:e8: f1:a1:71:50:13:4c:1f:c2:20:8d:eb:09:13:eb:87:94:65:84: 73:16:24:64:2d:7f:f1:93:b6:d5:af:4c:01:32:0e:48:fc:a6: 66:82:1b:30:98:fd:a2:42:ca:4c:9a:75:1e:0d:3e:e4:52:b8: 93:e8:21:5d:39:1f:dd:66:9b:71:79:39:5d:91:d3:91:a5:d6: eb:e5:6c:9d:ef:62:aa:f1:0c:4e:3f:5c:26:c6:3e:eb:68:61: 73:cd:10:39:76:f5:40:28:a9:49:59:63:7d:93:19:96:82:8a: ea:3d:74:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMNlWdnc/NOTLEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm NzU4MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NzdhMWEyNmEtODZkNS00MzhmLWIzNGMtMmQwNjhlZjU2Mzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPPltHHstoiLmlBDuFCLHHEVVAty35x27qDm A4iokf0tOZO2rTlrq3lwYP2ONdC9b73bj9/tnVjclBYJrUvKefTeicWp0E7ERfUw Mey55tRkP5SQE6vSasE2mJvBUuLHjgyrFMVLI4kx5IbXVu7ZErCePZaAQFYZ+Tmi 0AiQH4tEkOqyQDMsDgwUX7tRF5H430QNupuizF5nsdwhx7S1SG9eW5slt0vAsLrE 83gcDn25Ol5lUtzKhIU/W8MYBIFsUP+HAcmx7AbzcSonN8ydHRFdcEaI+RzqbyrU PpH/QvSsEfKlxgZ/oAJeM4lBPCkWbMi+PmPEkUSTmp+DuOfwpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7VNzVJPJxwyhCDn5OrE4TY9GTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2 MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvNjFhZmZhNDQtOTU2OS0z Y2MwLWJmMDQtYzVkMzAzOGViNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1 Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4SVAVqKSyPddIVGoK0NVRlVnDp2rSaqKWAmoJmc+iRat3Xj5DsBRwJ FrVIz5lL8ZEOf7oQVAMgaPWX5ZEXD69/EdQdJKD8YsnMtuCVpVos91O2tMgCMz0M ad0Z2JXehUxW4fLl4C5wxoif8vtaLmLvRZgyr+KQhhCzcNTymEiIwi+kEGU4llpb X1nsqdKm6PGhcVATTB/CII3rCRPrh5RlhHMWJGQtf/GTttWvTAEyDkj8pmaCGzCY /aJCykyadR4NPuRSuJPoIV05H91mm3F5OV2R05Gl1uvlbJ3vYqrxDE4/XCbGPuto YXPNEDl29UAoqUlZY32TGZaCiuo9dEI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:26:48 2025 by rpki-client