$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29607c22-9eb6-34db-ad57-b7018dc41198.roa File: 29607c22-9eb6-34db-ad57-b7018dc41198.roa (raw, json) Hash identifier: ev+TMwMQMfmzBAESMGy2wv3jfNTflVR+3iVkaH11Ueg= Subject key identifier: 33:37:5F:FC:6C:3B:E9:32:A4:B7:88:C7:4E:94:A8:EA:1C:E1:97:04 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A778082E4205750104B948840 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29607c22-9eb6-34db-ad57-b7018dc41198.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 142.169.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:82:e4:20:57:50:10:4b:94:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=46745ed4-8df4-468f-a18d-4d366f68c088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:0c:5d:6d:87:59:87:1c:cc:b9:d5:d4:c8: 73:4d:c5:27:3e:c0:ec:fb:78:80:1a:be:00:c3:67: a2:eb:06:1d:07:da:c6:35:22:24:98:33:5c:f1:e5: 92:8a:a9:30:6c:aa:55:48:c3:bb:96:9f:4a:27:28: 3e:e6:54:68:c0:de:dd:67:a5:83:92:fc:47:91:c3: 48:38:81:6f:39:91:83:41:5e:c5:7d:c6:25:84:72: d3:9b:42:d5:e0:e0:c2:28:40:00:1f:44:50:8d:c6: a0:0f:53:2e:03:49:5d:84:22:45:79:b0:c9:38:9d: e0:7d:cc:d1:1a:a4:60:fe:0c:88:af:0d:85:43:20: f2:5d:0e:ff:cb:de:3c:9e:32:fe:75:50:be:c4:6f: f4:72:a9:97:26:79:05:1d:11:5d:6f:1a:c6:fe:7b: a2:8a:30:74:6b:e7:8d:e5:5e:96:34:5b:45:ac:8b: 49:22:a1:c2:23:32:5e:2b:27:9a:ab:59:9d:8c:cc: 6f:72:d9:4d:3e:fe:d7:54:1a:07:8b:b0:91:cd:7a: d1:9d:92:e0:42:27:88:d7:ba:c3:16:eb:22:ce:7e: cc:97:61:89:27:30:ca:91:df:78:e1:8c:70:90:3a: 18:d2:a0:37:5a:d9:12:a4:28:df:6b:13:8a:fe:bf: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:37:5F:FC:6C:3B:E9:32:A4:B7:88:C7:4E:94:A8:EA:1C:E1:97:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/29607c22-9eb6-34db-ad57-b7018dc41198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.169.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fb:be:2c:56:f8:c4:14:cd:31:a6:bb:fe:60:6f:6b:71:ba: 81:e5:11:84:6f:c5:69:f1:00:33:2d:24:58:45:99:1e:d7:f3: 42:3c:31:ba:d7:db:04:ec:b9:ce:bd:68:c2:54:dc:45:64:8c: 98:e7:38:ee:3b:22:ed:f6:04:c9:80:93:c2:0e:b6:f7:e3:9b: 6d:fa:c9:0a:ab:d6:66:3c:73:e7:9d:2f:6d:14:c5:80:01:42: 2b:f2:56:71:85:3a:cd:93:c0:e0:0a:3b:fe:a5:1f:4c:91:e2: 50:f3:7a:35:9c:08:cf:09:f8:4b:0a:a7:b1:d6:00:32:98:9d: 79:a5:61:92:ea:3c:96:aa:a5:9d:73:4e:07:83:ff:13:03:b5: d9:1a:17:42:1b:c0:7a:30:7b:d1:7e:3f:cc:b6:ef:c7:6e:21: 3a:16:f7:3d:5f:64:96:05:5d:80:44:7f:5c:f4:9f:6f:6b:ab: 70:a0:2f:bd:d1:8c:c3:24:4c:3e:2f:29:8c:02:a9:8b:db:93: 6a:c3:e5:f2:9e:cb:09:b8:8e:89:2a:d3:fe:ab:73:ab:45:90: 70:a4:d7:0c:16:ea:2f:41:95:69:94:cc:88:3f:6f:75:19:43: 2b:8e:0c:81:79:72:6b:83:36:cc:a2:e3:7b:0a:53:6b:1a:59: 0a:8e:d8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gILkIFdQEEuUiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NDY3NDVlZDQtOGRmNC00NjhmLWExOGQtNGQzNjZmNjhjMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLEMXW2HWYcczLnV1MhzTcUnPsDs+3iAGr4A w2ei6wYdB9rGNSIkmDNc8eWSiqkwbKpVSMO7lp9KJyg+5lRowN7dZ6WDkvxHkcNI OIFvOZGDQV7FfcYlhHLTm0LV4ODCKEAAH0RQjcagD1MuA0ldhCJFebDJOJ3gfczR GqRg/gyIrw2FQyDyXQ7/y948njL+dVC+xG/0cqmXJnkFHRFdbxrG/nuiijB0a+eN 5V6WNFtFrItJIqHCIzJeKyeaq1mdjMxvctlNPv7XVBoHi7CRzXrRnZLgQieI17rD Fusizn7Ml2GJJzDKkd944YxwkDoY0qA3WtkSpCjfaxOK/r/QTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM3X/xsO+kypLeIx06UqOoc4ZcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjk2MDdjMjItOWViNi0z NGRiLWFkNTctYjcwMThkYzQxMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjqmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB77vixW+MQUzTGmu/5gb2txuoHlEYRvxWnxADMtJFhFmR7X80I8MbrX 2wTsuc69aMJU3EVkjJjnOO47Iu32BMmAk8IOtvfjm236yQqr1mY8c+edL20UxYAB QivyVnGFOs2TwOAKO/6lH0yR4lDzejWcCM8J+EsKp7HWADKYnXmlYZLqPJaqpZ1z TgeD/xMDtdkaF0IbwHowe9F+P8y278duIToW9z1fZJYFXYBEf1z0n29rq3CgL73R jMMkTD4vKYwCqYvbk2rD5fKeywm4jokq0/6rc6tFkHCk1wwW6i9BlWmUzIg/b3UZ QyuODIF5cmuDNsyi43sKU2saWQqO2B8= -----END CERTIFICATE-----Generated at Fri Jul 25 19:27:18 2025 by rpki-client