$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa File: 28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa (raw, json) Hash identifier: 8dzBo8nS9R179MwGo8OjA6U0tq6lrVpsRtUuByvNJOw= Subject key identifier: D4:D1:A8:F7:60:92:40:97:12:A8:C8:41:67:16:1F:AA:67:79:E7:76 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D8C1D465458168ECC7A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 209.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d8:c1:d4:65:45:81:68:ec:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=e7abde1c-a288-4ffc-9949-0f41b102bfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:34:3a:8b:bf:ae:44:be:1c:c6:9e:37:1f: be:1c:b3:eb:0d:5b:f8:7f:16:c2:93:52:45:44:c5: eb:dc:f8:3e:07:50:91:48:f4:e5:80:32:36:2a:f3: a5:ec:f3:5b:6e:b6:a9:f7:5d:ba:33:2c:ed:27:11: e0:70:a6:0c:08:f8:77:42:0f:21:90:df:ed:83:fc: f4:dd:a7:23:50:00:0c:4f:5f:8e:87:b3:ec:9e:a8: 22:8a:c7:f8:de:41:66:22:2d:b7:3d:b7:c3:eb:b2: 84:2b:b8:55:2b:49:a4:99:55:c7:e0:88:90:a2:b8: ef:5e:6d:2b:a6:b8:b7:84:39:6f:0f:31:ca:6a:e2: cf:28:1d:64:84:81:ba:9f:96:e1:3a:83:2a:b4:e5: 7f:2c:b2:92:67:98:12:a6:67:6b:b0:ee:02:63:e4: 7e:9c:1d:93:fb:a8:be:e3:26:78:c0:5e:fc:ce:fc: 9e:50:2a:ea:40:73:84:0a:2a:fe:66:31:a2:5d:7a: 5d:08:d2:d8:06:03:37:9a:da:0d:d8:2b:86:29:c5: e8:a6:46:de:7d:41:0e:34:05:5b:d5:bc:09:56:83: a4:35:72:a0:20:ea:89:f9:86:10:30:aa:ba:6d:65: be:46:35:ea:65:d4:df:61:11:4c:92:b2:12:eb:34: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D1:A8:F7:60:92:40:97:12:A8:C8:41:67:16:1F:AA:67:79:E7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:11:b1:a5:9a:9c:2b:0a:47:75:95:6e:00:91:3a:a9:c1:b1: 6e:28:19:75:17:02:27:97:f8:89:2c:23:1b:1c:15:72:80:f9: bc:38:73:8c:e6:9f:9b:d0:3b:49:1f:28:cd:e2:b7:89:98:7c: 92:6e:8c:9a:78:5f:80:31:4b:e2:e5:62:e6:b4:ad:20:5f:0c: 77:ee:48:4c:5d:9d:92:ec:a8:ad:63:c7:15:8c:b6:b6:50:7d: 11:3d:79:5f:b4:f7:7a:a0:dc:2b:cd:7c:38:66:8f:07:b7:c3: 15:e8:c9:bb:1e:c1:cd:95:4c:af:87:ed:82:d8:78:38:f0:40: 37:4f:b4:d2:cd:15:3d:c8:ab:fd:b0:71:6e:b9:db:94:1d:8b: 44:e3:00:0b:14:ea:c4:e6:84:4c:e9:99:57:7e:18:96:5b:96: b9:18:d1:16:f8:e2:74:f8:ea:f7:1a:e2:1c:63:19:e5:23:6f: 32:e3:3e:ab:f5:bb:ec:46:ae:50:7f:f0:a3:23:6d:4f:ca:3f: ee:89:11:01:96:14:fb:d7:f8:1b:b3:32:5b:c8:ec:60:76:15: 9c:0b:ec:09:2e:7c:01:49:0d:f6:ca:17:9a:76:bf:07:34:1d: bb:7b:64:43:31:0a:d6:ed:a8:bf:10:a6:b9:9b:8f:14:60:f7: 17:a3:4c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdjB1GVFgWjsx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTdhYmRlMWMtYTI4OC00ZmZjLTk5NDktMGY0MWIxMDJiZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVg0Oou/rkS+HMaeNx++HLPrDVv4fxbCk1JF RMXr3Pg+B1CRSPTlgDI2KvOl7PNbbrap9126MyztJxHgcKYMCPh3Qg8hkN/tg/z0 3acjUAAMT1+Oh7Psnqgiisf43kFmIi23PbfD67KEK7hVK0mkmVXH4IiQorjvXm0r pri3hDlvDzHKauLPKB1khIG6n5bhOoMqtOV/LLKSZ5gSpmdrsO4CY+R+nB2T+6i+ 4yZ4wF78zvyeUCrqQHOECir+ZjGiXXpdCNLYBgM3mtoN2CuGKcXopkbefUEONAVb 1bwJVoOkNXKgIOqJ+YYQMKq6bWW+RjXqZdTfYRFMkrIS6zQJvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTRqPdgkkCXEqjIQWcWH6pneed2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjhkMDY5NmItOGRmZC0z Y2FiLThmYWItMWEwN2Y4ZGJlZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQRsaWanCsKR3WVbgCROqnBsW4oGXUXAieX+IksIxscFXKA+bw4c4zm n5vQO0kfKM3it4mYfJJujJp4X4AxS+LlYua0rSBfDHfuSExdnZLsqK1jxxWMtrZQ fRE9eV+093qg3CvNfDhmjwe3wxXoybsewc2VTK+H7YLYeDjwQDdPtNLNFT3Iq/2w cW6525Qdi0TjAAsU6sTmhEzpmVd+GJZblrkY0Rb44nT46vca4hxjGeUjbzLjPqv1 u+xGrlB/8KMjbU/KP+6JEQGWFPvX+BuzMlvI7GB2FZwL7AkufAFJDfbKF5p2vwc0 Hbt7ZEMxCtbtqL8QprmbjxRg9xejTFY= -----END CERTIFICATE-----Generated at Fri Jul 25 19:23:50 2025 by rpki-client