$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07e0765c-1d4f-3390-aa20-4cfda2e54e44.roa File: 07e0765c-1d4f-3390-aa20-4cfda2e54e44.roa (raw, json) Hash identifier: lK2IbDNkwIVA6spcn03GpBSa3nwG9XJ+w7zXJKtNwDw= Subject key identifier: C1:C9:4D:0B:AC:76:81:70:30:68:68:7F:FC:99:00:89:52:AE:97:43 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B35D2D25B858F5FE62BD8 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07e0765c-1d4f-3390-aa20-4cfda2e54e44.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 207.34.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:35:d2:d2:5b:85:8f:5f:e6:2b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=1d51670e-7c24-4732-b6a1-083211b585c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:09:73:d0:c9:80:1f:3c:f1:6e:27:ff:e1:b5: c8:b7:12:ab:ce:d4:b4:7f:dc:ed:9f:46:c6:07:ef: 59:f2:ab:a6:dc:e0:aa:3c:70:69:58:f2:e6:a5:f2: 1e:36:83:2f:3b:2d:57:b8:a1:9a:90:42:fa:9b:6f: b3:1e:c8:cd:4e:4d:ce:7e:a2:82:70:72:65:53:ec: 87:93:5a:18:b8:50:f5:2f:e6:2e:51:4c:67:3d:ed: 2f:15:1d:3e:8d:72:bf:be:74:70:74:5f:d6:e5:dd: a6:11:d9:9b:c6:c1:d7:d4:0a:80:12:17:ae:a4:fb: 73:51:a0:ac:d8:4e:1a:be:ec:01:3f:6b:82:a7:43: 46:cf:86:e7:35:95:de:12:b2:db:51:a8:57:3e:bd: ce:37:0f:b7:b9:b1:3c:35:ca:ed:a5:fc:3c:35:95: bd:fc:82:92:19:b1:d5:c9:c8:e8:a2:84:cc:7a:c5: d0:49:ad:f4:61:a8:89:fc:49:75:43:f4:4a:8a:e2: 91:7a:7e:69:54:42:28:f1:35:48:0d:cd:2a:39:ff: a8:e3:96:37:fa:b0:b8:13:a9:8d:c4:c6:87:22:14: d2:9b:23:22:fd:43:a9:c3:24:6a:bc:a5:c9:b5:25: 5f:77:15:a9:c3:9a:e3:bb:fe:35:b5:2d:1a:82:76: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C9:4D:0B:AC:76:81:70:30:68:68:7F:FC:99:00:89:52:AE:97:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07e0765c-1d4f-3390-aa20-4cfda2e54e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.34.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:5e:13:1e:76:63:3e:aa:2a:00:ed:e9:15:68:e8:2e:9f:3a: 29:ac:f6:f9:8f:c9:b8:90:0e:2d:7a:5c:3f:05:a7:7f:9a:ef: 40:c7:9f:05:49:ab:ec:d5:17:b2:9b:25:0e:1f:9e:b6:90:af: 01:24:2a:ec:73:06:07:5c:c0:64:05:45:30:cf:2e:0b:64:f2: 26:6e:40:32:a4:8a:4a:42:b8:a0:6d:e9:55:7b:0d:e8:32:ea: 29:d7:38:b6:76:15:b6:8a:ab:62:51:1f:fb:cc:a7:0f:28:fd: a2:ba:d9:21:20:f4:24:78:ce:43:35:54:6e:58:ec:32:b0:4c: 21:05:56:e2:3c:83:f3:31:c6:fa:8e:e3:12:77:3f:f2:f6:97: a8:cc:74:01:30:6e:ea:dd:70:70:0b:82:af:e0:0a:ab:da:05: bd:5a:21:3a:fd:56:2c:3e:e4:ca:3d:fd:7e:bc:e1:c8:76:8e: 01:fa:97:25:d9:0b:ab:2e:58:4c:f7:1e:f1:fd:58:cf:4d:f6: a9:1d:67:66:0d:28:8e:53:a2:45:98:e8:af:fe:9b:42:14:a5: 68:ad:38:3a:43:83:c1:15:49:e1:bd:3a:c9:10:b0:25:09:79: 60:b1:07:3e:44:7a:20:c7:48:9b:66:07:32:49:bf:ac:48:c6: bf:60:05:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzXS0luFj1/mK9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MWQ1MTY3MGUtN2MyNC00NzMyLWI2YTEtMDgzMjExYjU4NWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/wlz0MmAHzzxbif/4bXItxKrztS0f9ztn0bG B+9Z8qum3OCqPHBpWPLmpfIeNoMvOy1XuKGakEL6m2+zHsjNTk3OfqKCcHJlU+yH k1oYuFD1L+YuUUxnPe0vFR0+jXK/vnRwdF/W5d2mEdmbxsHX1AqAEheupPtzUaCs 2E4avuwBP2uCp0NGz4bnNZXeErLbUahXPr3ONw+3ubE8Ncrtpfw8NZW9/IKSGbHV ycjoooTMesXQSa30YaiJ/El1Q/RKiuKRen5pVEIo8TVIDc0qOf+o45Y3+rC4E6mN xMaHIhTSmyMi/UOpwyRqvKXJtSVfdxWpw5rju/41tS0agnZogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHJTQusdoFwMGhof/yZAIlSrpdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDdlMDc2NWMtMWQ0Zi0z MzkwLWFhMjAtNGNmZGEyZTU0ZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzyKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5eEx52Yz6qKgDt6RVo6C6fOims9vmPybiQDi16XD8Fp3+a70DHnwVJ q+zVF7KbJQ4fnraQrwEkKuxzBgdcwGQFRTDPLgtk8iZuQDKkikpCuKBt6VV7Degy 6inXOLZ2FbaKq2JRH/vMpw8o/aK62SEg9CR4zkM1VG5Y7DKwTCEFVuI8g/MxxvqO 4xJ3P/L2l6jMdAEwburdcHALgq/gCqvaBb1aITr9Viw+5Mo9/X684ch2jgH6lyXZ C6suWEz3HvH9WM9N9qkdZ2YNKI5TokWY6K/+m0IUpWitODpDg8EVSeG9OskQsCUJ eWCxBz5EeiDHSJtmBzJJv6xIxr9gBdQ= -----END CERTIFICATE-----Generated at Fri Jul 25 19:21:44 2025 by rpki-client