$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/22c74e9d-2e69-37d5-834b-0f33abaf46e8.roa File: 22c74e9d-2e69-37d5-834b-0f33abaf46e8.roa (raw, json) Hash identifier: KceMH9U0ZBFzp9fX2asdyHTZnSfNO/rhEKu13yUEk8M= Subject key identifier: A7:D7:4F:E3:68:FC:83:DF:5F:ED:7F:08:CD:05:07:91:30:46:6E:16 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3A59D646B98013FCF610 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/22c74e9d-2e69-37d5-834b-0f33abaf46e8.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 209.162.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:3a:59:d6:46:b9:80:13:fc:f6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=ff7e1f87-989c-4fc0-a563-e8f249e97658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:21:53:d6:74:10:bd:aa:1e:03:2f:e1:c2: fa:8c:9c:3b:20:94:43:ae:53:95:8d:1d:a9:03:6d: c6:83:82:48:6d:34:6f:6b:3e:87:28:d3:11:7b:6a: 25:f6:25:9b:01:95:cb:32:62:6d:3e:3e:a5:d9:39: 57:51:65:79:5d:88:e5:4c:ca:ef:26:2a:23:dc:63: 74:6d:23:80:7e:48:da:f7:5d:e8:b3:13:47:8b:6e: 89:d3:80:11:30:9c:ec:c1:b2:8f:fd:4f:b3:5c:30: cd:a9:cd:02:b7:f0:6e:6c:a0:d3:ee:f4:e0:42:24: 09:e2:d0:34:71:1a:8c:d8:70:ee:9f:38:c4:23:95: df:c1:39:dc:d5:89:39:10:c4:04:12:3f:08:b0:5f: d4:db:ad:e6:26:67:74:0d:6e:0b:9c:b5:83:82:69: 45:75:e4:4e:a2:56:4c:47:f2:b6:c0:1f:b8:61:0d: 44:97:bc:e6:fb:27:4b:25:9e:b9:33:d3:8f:d3:73: 71:27:34:9e:d4:35:ad:60:9b:c2:47:e2:b1:35:8c: 52:cd:8a:f8:39:3e:42:0f:fb:1b:e5:4f:5e:29:20: a7:6c:eb:9c:f2:e0:e9:de:42:22:b2:91:a1:e8:e0: 59:07:21:25:a6:e8:04:13:39:88:16:c9:d9:42:1f: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D7:4F:E3:68:FC:83:DF:5F:ED:7F:08:CD:05:07:91:30:46:6E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/22c74e9d-2e69-37d5-834b-0f33abaf46e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.162.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:33:0e:37:4b:56:db:84:3f:ce:56:27:59:65:9d:c2:48:ea: e5:dd:05:2c:33:43:19:75:47:30:4d:d4:48:a4:38:4d:ab:e9: 9c:1c:c6:4e:be:7d:ba:cb:89:80:3f:f5:08:b9:de:8c:70:44: da:8a:77:b3:d4:54:ee:68:0c:85:e8:3a:eb:6b:f0:82:93:e2: 91:6f:b4:98:e2:9c:cf:53:57:9d:2d:e1:3f:ed:ef:7a:83:a0: ef:45:fa:85:b5:d1:f4:d8:56:6e:92:bd:2d:f7:c3:ea:53:13: 09:04:6e:9a:89:7b:e2:f9:80:95:9e:08:e0:2b:10:0d:61:fe: 9b:6b:bb:a1:3e:53:1b:d1:63:9c:12:a1:8f:90:cc:c9:be:a9: ef:54:3f:3c:03:ee:78:2d:79:ae:da:8d:dc:24:f5:5d:dd:39: 8e:03:44:5d:45:c5:ca:7e:7a:51:a7:44:d4:6c:c8:5e:35:88: 4c:b5:72:31:c9:05:06:64:77:aa:27:56:1d:56:66:95:c5:76: f9:de:b9:d7:14:1d:9a:a5:c8:53:d1:fc:2a:5b:a9:4a:a0:db: cb:cf:f2:d9:ea:96:d2:28:76:bc:4b:07:88:24:dc:21:ab:47: fe:63:15:38:46:e0:31:13:66:91:25:81:e6:43:b1:9f:d0:db: 9d:02:88:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzpZ1ka5gBP89hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZmY3ZTFmODctOTg5Yy00ZmMwLWE1NjMtZThmMjQ5ZTk3NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhMhU9Z0EL2qHgMv4cL6jJw7IJRDrlOVjR2p A23Gg4JIbTRvaz6HKNMRe2ol9iWbAZXLMmJtPj6l2TlXUWV5XYjlTMrvJioj3GN0 bSOAfkja913osxNHi26J04ARMJzswbKP/U+zXDDNqc0Ct/BubKDT7vTgQiQJ4tA0 cRqM2HDunzjEI5XfwTnc1Yk5EMQEEj8IsF/U263mJmd0DW4LnLWDgmlFdeROolZM R/K2wB+4YQ1El7zm+ydLJZ65M9OP03NxJzSe1DWtYJvCR+KxNYxSzYr4OT5CD/sb 5U9eKSCnbOuc8uDp3kIispGh6OBZByElpugEEzmIFsnZQh8+dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfXT+No/IPfX+1/CM0FB5EwRm4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjJjNzRlOWQtMmU2OS0z N2Q1LTgzNGItMGYzM2FiYWY0NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0aKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGszDjdLVtuEP85WJ1llncJI6uXdBSwzQxl1RzBN1EikOE2r6Zwcxk6+ fbrLiYA/9Qi53oxwRNqKd7PUVO5oDIXoOutr8IKT4pFvtJjinM9TV50t4T/t73qD oO9F+oW10fTYVm6SvS33w+pTEwkEbpqJe+L5gJWeCOArEA1h/ptru6E+UxvRY5wS oY+QzMm+qe9UPzwD7ngtea7ajdwk9V3dOY4DRF1Fxcp+elGnRNRsyF41iEy1cjHJ BQZkd6onVh1WZpXFdvneudcUHZqlyFPR/CpbqUqg28vP8tnqltIodrxLB4gk3CGr R/5jFThG4DETZpElgeZDsZ/Q250CiEA= -----END CERTIFICATE-----Generated at Fri Jul 25 19:19:44 2025 by rpki-client