$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa File: 1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa (raw, json) Hash identifier: jxSkw0NzwdkDDTk1Bg0pXNkskaFVSdyYjiViwie+dJI= Subject key identifier: 4E:C9:65:9A:79:9D:78:65:DB:DB:20:C8:53:86:38:43:86:C3:69:0E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A77808721FABAB3E425C0D280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 209.52.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:87:21:fa:ba:b3:e4:25:c0:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=2ccb44ac-09c7-4389-bfe5-bd19c613d3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:f8:12:2e:5c:12:42:e4:6f:71:dc:64:b7: 5c:82:14:2a:01:c7:be:dc:3f:b3:2c:af:00:42:69: 58:16:3e:2a:f1:47:e6:9f:d3:c6:b2:bf:e7:36:4c: e3:2f:6e:86:95:dc:3e:45:a9:3f:f1:02:73:82:ec: 48:9c:80:b8:7c:a1:ee:34:35:e9:32:04:30:76:61: 23:f1:f6:b5:b6:40:3d:19:02:e9:0b:4f:0e:1a:b4: e2:94:1d:53:41:13:8a:a4:eb:d1:00:aa:54:b7:62: 18:40:89:22:32:b4:d4:b8:40:b6:c4:de:18:ad:6e: b7:0f:ad:5f:b5:75:65:47:9d:8a:d6:61:5b:3d:89: 5e:95:74:ba:7a:79:b6:ef:36:88:7a:a8:2f:09:72: da:f5:29:91:a7:d6:49:43:b1:0c:5a:7f:3b:c4:e5: 08:1b:c6:c5:f5:2b:cf:b4:60:83:ce:05:d6:ba:2e: ab:e1:07:17:f8:f7:6b:37:11:9d:3f:26:96:fb:3d: b5:3a:b6:31:a7:90:96:cf:e9:8c:50:e3:3e:af:85: f5:58:1b:18:ae:b4:ac:ad:ed:44:9d:0b:b0:e7:78: ed:7d:3b:d2:f8:1a:af:77:dd:39:17:02:54:db:6d: 27:31:47:c6:fe:d7:7d:b6:98:58:fb:69:97:68:77: 9f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C9:65:9A:79:9D:78:65:DB:DB:20:C8:53:86:38:43:86:C3:69:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1beebeaf-1f0e-319d-a76d-aa110fadd44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:af:f9:74:d7:13:0c:5d:bc:cd:5d:8d:db:df:ff:64:8e:e6: 4d:1a:4d:76:da:03:45:87:40:ff:20:38:dd:18:b3:f1:75:65: 8f:d4:94:9c:4e:82:d4:f4:4a:97:84:85:c8:c3:74:a6:1d:2e: b1:8e:02:55:17:d5:7f:bd:2e:15:66:4a:99:44:04:46:cb:81: 96:ed:41:3d:33:51:95:5d:d5:4a:20:ad:e4:c2:6e:20:21:9a: 90:11:19:5b:5b:cb:e2:e9:ca:87:26:74:f6:fe:34:59:2e:ee: f2:ce:93:3f:15:35:e0:7b:b5:ef:d8:0a:c3:e6:a9:09:96:06: 70:93:fb:7b:25:27:93:ae:46:d0:20:4a:8c:f0:93:95:c7:36: 88:71:88:1d:91:86:d2:9e:42:93:0e:42:38:8b:13:9e:7f:55: e2:c2:20:89:32:8d:87:95:5f:77:59:b0:cf:1e:29:cc:82:ca: 21:51:24:80:6a:1e:08:d9:93:f3:81:1d:15:ec:a4:d4:b5:e2: 8e:af:2d:4f:4f:1e:67:60:56:f4:89:3b:6a:ad:67:e3:eb:82: 83:c9:56:6c:db:80:95:c1:18:10:e8:63:cb:8f:12:9b:6e:b7: ce:01:2c:c5:a3:1a:1f:30:99:45:a8:1f:f8:d4:ff:31:e7:7d: a9:51:34:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIch+rqz5CXA0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MmNjYjQ0YWMtMDljNy00Mzg5LWJmZTUtYmQxOWM2MTNkM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9T4Ei5cEkLkb3HcZLdcghQqAce+3D+zLK8A QmlYFj4q8Ufmn9PGsr/nNkzjL26Gldw+Rak/8QJzguxInIC4fKHuNDXpMgQwdmEj 8fa1tkA9GQLpC08OGrTilB1TQROKpOvRAKpUt2IYQIkiMrTUuEC2xN4YrW63D61f tXVlR52K1mFbPYlelXS6enm27zaIeqgvCXLa9SmRp9ZJQ7EMWn87xOUIG8bF9SvP tGCDzgXWui6r4QcX+PdrNxGdPyaW+z21OrYxp5CWz+mMUOM+r4X1WBsYrrSsre1E nQuw53jtfTvS+Bqvd905FwJU220nMUfG/td9tphY+2mXaHef/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7JZZp5nXhl29sgyFOGOEOGw2kOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJlZWJlYWYtMWYwZS0z MTlkLWE3NmQtYWExMTBmYWRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCv+XTXEwxdvM1djdvf/2SO5k0aTXbaA0WHQP8gON0Ys/F1ZY/UlJxO gtT0SpeEhcjDdKYdLrGOAlUX1X+9LhVmSplEBEbLgZbtQT0zUZVd1UogreTCbiAh mpARGVtby+LpyocmdPb+NFku7vLOkz8VNeB7te/YCsPmqQmWBnCT+3slJ5OuRtAg Sozwk5XHNohxiB2RhtKeQpMOQjiLE55/VeLCIIkyjYeVX3dZsM8eKcyCyiFRJIBq HgjZk/OBHRXspNS14o6vLU9PHmdgVvSJO2qtZ+PrgoPJVmzbgJXBGBDoY8uPEptu t84BLMWjGh8wmUWoH/jU/zHnfalRNMs= -----END CERTIFICATE-----Generated at Fri Jul 25 19:22:09 2025 by rpki-client