$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09f43a57-985a-3a3e-a281-4bd6a23b81c4.roa File: 09f43a57-985a-3a3e-a281-4bd6a23b81c4.roa (raw, json) Hash identifier: RCqjOgnZjpdl0kkpCLmRe88KM1fDIvJz922bWSJ91P8= Subject key identifier: 1C:49:F4:E4:15:25:FB:F7:77:D6:2A:34:4D:47:FA:B1:D8:CF:98:2C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3CF75F3A170E800F6D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09f43a57-985a-3a3e-a281-4bd6a23b81c4.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 198.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:3c:f7:5f:3a:17:0e:80:0f:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=7abe8193-0950-4dbe-9b8e-0200fff199f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:f4:c3:76:f9:fc:32:c6:bd:07:34:c8:89: ae:17:d7:29:7c:4b:6f:e6:72:8d:a5:7f:7e:20:77: f8:34:50:84:52:db:c0:1b:fa:b3:98:2c:58:63:13: 2c:00:b9:02:0b:2d:98:7a:46:73:44:01:9c:b9:52: 24:7e:02:14:77:30:04:21:02:17:c5:90:8b:44:fb: c0:81:5d:d5:5b:02:da:b8:89:82:58:f7:16:44:65: 28:cf:d8:16:8d:3f:1d:36:f1:74:60:f8:50:a9:e3: 87:97:ac:c6:be:7d:c4:da:27:01:bd:3c:63:f9:ea: 8e:32:65:12:26:e3:ad:8b:21:db:3c:7b:fc:aa:eb: 24:26:96:49:75:73:b8:e8:7a:dc:26:76:5d:81:e5: 1f:af:78:cb:2d:5d:1b:2b:13:7b:f0:35:db:ff:40: 89:96:81:45:57:58:eb:91:70:1c:23:a6:e6:69:fa: 30:ee:af:27:26:ad:8e:86:90:bc:77:fc:f0:9b:86: c1:51:5f:f0:6f:01:e0:e8:29:79:a2:76:b4:1d:ed: 57:44:66:66:be:ae:f2:65:ce:a6:55:92:64:dd:a8: 96:75:fd:e1:ff:e3:62:3b:21:ac:bf:d0:b5:d4:dc: ef:b6:c9:3e:51:fb:ca:14:5b:08:f5:1c:99:68:d2: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:49:F4:E4:15:25:FB:F7:77:D6:2A:34:4D:47:FA:B1:D8:CF:98:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09f43a57-985a-3a3e-a281-4bd6a23b81c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 198.53.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:73:1b:22:1f:27:7f:96:e3:cc:7c:02:d1:77:3a:f3:d6:eb: d9:6b:28:39:88:b2:75:5e:34:3b:c5:93:61:c4:0e:ab:5d:21: da:0e:98:e9:8b:93:33:cd:76:53:3c:68:c6:24:37:31:90:18: 4b:e3:a4:aa:ec:78:f4:0d:4a:d2:db:f0:3d:56:8b:db:d7:97: a9:40:17:25:13:0d:ea:eb:84:4c:f1:be:23:55:5c:53:71:2b: 3a:76:f2:6f:0e:d5:28:9e:c2:81:f2:8c:4a:7c:00:03:1b:a0: f6:30:08:25:d9:7a:72:0c:ad:ed:2c:a4:fa:db:17:8b:21:62: 3d:08:a9:c0:3c:7d:00:a7:68:6f:20:97:62:4d:42:5c:05:27: 03:ad:cd:31:48:40:57:87:e9:21:a3:07:f6:84:04:99:e9:8c: e4:83:66:f0:8b:9e:5f:3e:fd:7b:bc:51:bc:af:e5:53:3c:22: 04:57:a4:a2:d0:20:87:8f:a8:9c:a5:f3:25:0c:58:f5:69:e1: 77:31:6c:96:aa:7b:cd:00:68:11:9c:bf:82:82:4a:93:2e:a7: e5:70:6c:5c:e2:6e:93:1a:b1:92:68:80:d5:db:a0:bf:74:3c: df:d2:fe:f0:63:cf:b7:8d:42:37:0d:85:b1:11:1e:05:07:42: 08:81:bf:34 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp6Szz3XzoXDoAPbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk N2FiZTgxOTMtMDk1MC00ZGJlLTliOGUtMDIwMGZmZjE5OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z70w3b5/DLGvQc0yImuF9cpfEtv5nKNpX9+ IHf4NFCEUtvAG/qzmCxYYxMsALkCCy2YekZzRAGcuVIkfgIUdzAEIQIXxZCLRPvA gV3VWwLauImCWPcWRGUoz9gWjT8dNvF0YPhQqeOHl6zGvn3E2icBvTxj+eqOMmUS JuOtiyHbPHv8quskJpZJdXO46HrcJnZdgeUfr3jLLV0bKxN78DXb/0CJloFFV1jr kXAcI6bmafow7q8nJq2OhpC8d/zwm4bBUV/wbwHg6Cl5ona0He1XRGZmvq7yZc6m VZJk3aiWdf3h/+NiOyGsv9C11Nzvtsk+UfvKFFsI9RyZaNLZdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBxJ9OQVJfv3d9YqNE1H+rHYz5gsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDlmNDNhNTctOTg1YS0z YTNlLWEyODEtNGJkNmEyM2I4MWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxjUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOHMbIh8nf5bjzHwC0Xc689br2WsoOYiydV40O8WTYcQOq10h2g6Y6YuT M812UzxoxiQ3MZAYS+Okqux49A1K0tvwPVaL29eXqUAXJRMN6uuETPG+I1VcU3Er Onbybw7VKJ7CgfKMSnwAAxug9jAIJdl6cgyt7Syk+tsXiyFiPQipwDx9AKdobyCX Yk1CXAUnA63NMUhAV4fpIaMH9oQEmemM5INm8IueXz79e7xRvK/lUzwiBFekotAg h4+onKXzJQxY9WnhdzFslqp7zQBoEZy/goJKky6n5XBsXOJukxqxkmiA1dugv3Q8 39L+8GPPt41CNw2FsREeBQdCCIG/NA== -----END CERTIFICATE-----Generated at Fri Jul 25 19:19:17 2025 by rpki-client