$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa File: 02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa (raw, json) Hash identifier: xI4Eaj0x+QfF0SjkIo7bMfIHJKOjjrvuvNf8IaVDLNY= Subject key identifier: 01:4D:F9:4C:DE:44:24:2A:9F:CC:7B:17:35:D5:03:D1:12:07:48:08 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55C9CD5E2214FF29DF1C40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 21723 IP address blocks: 208.181.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:c9:cd:5e:22:14:ff:29:df:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=ade5d567-a436-4fcd-a020-5c0529d79872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:c0:83:57:f4:77:69:bc:39:3c:43:f3:3a: 84:00:cf:dd:e8:e9:c2:93:7d:4f:cd:2a:2f:79:9a: 15:57:8f:3b:37:ee:e7:90:e7:8c:f7:60:eb:3d:e6: 7c:fb:e1:84:4d:01:12:96:b8:7e:3b:ba:21:ad:e2: 12:86:9e:a8:eb:ae:c4:b3:70:f9:b8:cf:ed:c8:ad: 77:32:0a:53:b6:04:62:24:29:5e:8a:0b:f6:2f:6a: bc:b4:ec:0a:fc:f8:94:01:a5:a1:a1:2e:a7:cb:6a: c5:e7:e0:08:3c:2f:53:42:9a:1b:5d:4d:c1:6d:54: c0:bf:60:fd:d9:55:3f:aa:f9:eb:cc:fe:cb:0e:23: 6b:7d:1e:79:69:c0:08:6b:7d:c4:59:fd:51:d2:19: 7b:ee:a3:55:a1:d1:91:1a:07:6a:6d:8a:72:c5:11: f1:f9:90:e5:14:5c:85:4c:9e:0a:6d:0c:7c:a8:23: 44:54:bb:51:2f:fa:5a:3c:39:db:a2:3f:51:3e:c5: 8f:e7:44:3b:44:26:39:90:bb:8c:13:e2:43:88:e8: 36:e1:20:47:f3:d7:a8:a7:fc:5a:8d:8f:a6:11:e5: e3:e3:af:90:ea:d0:db:27:6e:23:a8:cd:d7:e6:8e: 58:2b:79:15:5e:3e:89:49:fd:33:e4:d3:09:68:cb: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4D:F9:4C:DE:44:24:2A:9F:CC:7B:17:35:D5:03:D1:12:07:48:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02bd9d9f-98a2-30f1-9ef4-e4db8086263c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3a:a3:42:1e:2a:1c:0f:d5:53:65:54:28:52:32:8e:59:a0: 8d:04:d2:0d:4b:ff:2b:b5:6b:0f:6a:04:0a:5e:96:75:5b:99: 8c:f0:0f:08:58:4b:ea:91:6a:92:5e:db:09:37:7c:ce:25:c0: b3:34:fe:9a:c1:a9:c4:f7:1f:d4:6c:3d:5c:1c:a8:5e:ad:50: 7c:46:9f:6f:a7:f4:91:ad:ac:10:35:7c:24:06:0b:14:fd:9c: 8c:83:67:a6:ea:8a:fc:82:b1:e1:7b:48:44:4b:81:f2:9e:cf: b2:b9:93:43:bc:3a:f3:64:13:29:91:1d:32:62:c5:83:9c:c2: 61:30:9f:1c:22:a4:0d:8d:a1:9e:a7:c2:3f:b9:a4:16:7a:7e: 72:b2:0c:17:96:a0:f2:fe:62:14:22:68:6c:fe:ae:68:d7:3d: d2:e3:3d:71:7c:02:81:1c:03:d7:f2:d2:fa:54:32:61:b7:65: b5:f8:7b:61:85:ae:f7:63:74:6a:2d:07:0e:97:d5:2e:ea:34: 3f:75:84:b1:88:df:13:24:b0:f1:38:a8:f6:23:33:72:ad:b3: 23:58:8c:ca:d3:f1:f3:3f:7d:7e:5c:45:5e:a7:f6:c1:0a:07: 96:fd:26:1b:d7:82:96:02:ca:c8:67:93:fe:01:f5:8f:3d:db: 09:59:a0:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcnNXiIU/ynfHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YWRlNWQ1NjctYTQzNi00ZmNkLWEwMjAtNWMwNTI5ZDc5ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOrAg1f0d2m8OTxD8zqEAM/d6OnCk31PzSov eZoVV487N+7nkOeM92DrPeZ8++GETQESlrh+O7ohreIShp6o667Es3D5uM/tyK13 MgpTtgRiJCleigv2L2q8tOwK/PiUAaWhoS6ny2rF5+AIPC9TQpobXU3BbVTAv2D9 2VU/qvnrzP7LDiNrfR55acAIa33EWf1R0hl77qNVodGRGgdqbYpyxRHx+ZDlFFyF TJ4KbQx8qCNEVLtRL/paPDnboj9RPsWP50Q7RCY5kLuME+JDiOg24SBH89eop/xa jY+mEeXj46+Q6tDbJ24jqM3X5o5YK3kVXj6JSf0z5NMJaMuQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFN+UzeRCQqn8x7FzXVA9ESB0gIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDJiZDlkOWYtOThhMi0z MGYxLTllZjQtZTRkYjgwODYyNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0LXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc6o0IeKhwP1VNlVChSMo5ZoI0E0g1L/yu1aw9qBApelnVbmYzwDwhY S+qRapJe2wk3fM4lwLM0/prBqcT3H9RsPVwcqF6tUHxGn2+n9JGtrBA1fCQGCxT9 nIyDZ6bqivyCseF7SERLgfKez7K5k0O8OvNkEymRHTJixYOcwmEwnxwipA2NoZ6n wj+5pBZ6fnKyDBeWoPL+YhQiaGz+rmjXPdLjPXF8AoEcA9fy0vpUMmG3ZbX4e2GF rvdjdGotBw6X1S7qND91hLGI3xMksPE4qPYjM3KtsyNYjMrT8fM/fX5cRV6n9sEK B5b9JhvXgpYCyshnk/4B9Y892wlZoIw= -----END CERTIFICATE-----Generated at Fri Jul 25 19:19:17 2025 by rpki-client