$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa File: 234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa (raw, json) Hash identifier: JZf+l9HE0KUQFbpwKoPvIG27Re2ISm1nMIpClP7O3pM= Subject key identifier: CF:F4:12:A8:56:44:11:CC:DD:5F:90:64:E1:CE:7D:17:E1:D7:5B:B1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D50D280D6180DC35C8C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 209.52.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d5:0d:28:0d:61:80:dc:35:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=3b6f52d5-d3aa-498f-9f77-54e5343daaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:b7:8b:0c:92:0c:0b:6c:70:fd:d2:60:98: bc:11:34:1c:f7:0e:1d:84:5c:10:90:20:d9:da:fa: 07:85:2a:9f:1f:43:3e:64:03:ab:dd:86:b0:58:b0: 27:e2:d8:e1:c2:16:19:9f:21:8b:df:b9:94:e9:56: b8:c9:88:b3:71:b0:3e:c6:bd:64:19:5c:06:04:b5: dd:f3:1a:2e:76:39:f6:95:ba:ca:b1:2e:5e:da:80: a0:46:f2:82:7d:10:5d:7c:38:d7:1e:4e:e8:12:53: 2d:fb:ba:5b:17:6f:7a:97:09:44:2b:1f:12:8f:ee: d8:ea:2d:ad:86:fa:d3:cb:ae:80:9e:fe:c1:0a:ad: f1:5f:db:8b:3f:0c:a7:74:a6:c7:5b:2f:d2:6b:b9: 82:7b:50:1d:54:65:b8:5c:e5:59:6c:e1:ac:a6:25: 5a:87:63:73:58:af:37:bc:a3:17:c7:96:30:85:31: fd:3f:d3:ea:56:92:1f:f7:9e:b2:a8:4e:31:93:a8: 60:14:f0:e2:31:50:25:a9:c6:0a:f1:e4:fd:8a:18: 31:a1:9f:7e:30:28:a7:ff:8c:a1:ea:70:7d:6b:50: 9e:d1:08:a9:e4:f9:ee:2c:78:00:85:42:04:33:8d: e3:01:0c:3a:1f:ea:ee:d7:6c:60:c4:d1:d4:8a:03: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F4:12:A8:56:44:11:CC:DD:5F:90:64:E1:CE:7D:17:E1:D7:5B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/234a4d7c-16e8-37f4-ac06-1ddcc4528f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:ce:45:f0:33:fc:89:0e:8e:c3:dc:48:1b:30:17:0e:55:98: 50:2b:6a:a3:1b:70:a9:19:5e:03:ad:0f:d9:ef:74:c5:65:f7: 4d:4b:19:b0:1d:30:71:2f:ec:cf:cd:6b:51:2f:b8:10:23:59: cf:44:09:c3:4b:2b:56:95:d7:49:35:f7:11:68:3c:02:4f:69: 37:3c:8f:e2:97:29:94:ca:20:30:e0:67:06:85:f5:0c:ec:94: 09:c7:2a:63:0e:76:af:cb:ed:ff:c7:99:5b:e2:36:4a:a4:43: 90:24:da:13:28:e3:c2:67:16:92:f0:a2:8b:c1:3b:58:83:aa: 93:ad:70:3e:0b:e0:64:33:72:b2:36:82:41:2a:06:88:cd:cb: 62:4c:2b:f6:ab:fb:e1:18:b3:21:e7:91:97:cd:06:76:8d:a5: 44:08:8f:cb:c0:b9:b9:af:44:84:9a:45:a1:c5:37:4a:08:d5: 8f:c5:a4:d4:be:84:1b:45:c9:7f:1f:04:4c:f7:83:c4:5c:e1: a6:db:6b:82:69:9d:47:38:79:05:3e:a5:63:b7:a6:ae:08:9a: cb:a2:34:1d:49:99:82:e1:22:f8:d8:35:e3:2b:0c:a0:3c:79: 31:a9:46:bb:34:3f:eb:79:f6:43:d5:96:c7:f2:18:10:8a:f2: c7:81:2b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdUNKA1hgNw1yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk M2I2ZjUyZDUtZDNhYS00OThmLTlmNzctNTRlNTM0M2RhYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVu3iwySDAtscP3SYJi8ETQc9w4dhFwQkCDZ 2voHhSqfH0M+ZAOr3YawWLAn4tjhwhYZnyGL37mU6Va4yYizcbA+xr1kGVwGBLXd 8xoudjn2lbrKsS5e2oCgRvKCfRBdfDjXHk7oElMt+7pbF296lwlEKx8Sj+7Y6i2t hvrTy66Anv7BCq3xX9uLPwyndKbHWy/Sa7mCe1AdVGW4XOVZbOGspiVah2NzWK83 vKMXx5YwhTH9P9PqVpIf956yqE4xk6hgFPDiMVAlqcYK8eT9ihgxoZ9+MCin/4yh 6nB9a1Ce0Qip5PnuLHgAhUIEM43jAQw6H+ru12xgxNHUigP/cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/0EqhWRBHM3V+QZOHOfRfh11uxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjM0YTRkN2MtMTZlOC0z N2Y0LWFjMDYtMWRkY2M0NTI4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOTORfAz/IkOjsPcSBswFw5VmFAraqMbcKkZXgOtD9nvdMVl901LGbAd MHEv7M/Na1EvuBAjWc9ECcNLK1aV10k19xFoPAJPaTc8j+KXKZTKIDDgZwaF9Qzs lAnHKmMOdq/L7f/HmVviNkqkQ5Ak2hMo48JnFpLwoovBO1iDqpOtcD4L4GQzcrI2 gkEqBojNy2JMK/ar++EYsyHnkZfNBnaNpUQIj8vAubmvRISaRaHFN0oI1Y/FpNS+ hBtFyX8fBEz3g8Rc4abba4JpnUc4eQU+pWO3pq4ImsuiNB1JmYLhIvjYNeMrDKA8 eTGpRrs0P+t59kPVlsfyGBCK8seBKxU= -----END CERTIFICATE-----Generated at Fri Jul 25 19:23:49 2025 by rpki-client