$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa File: 31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa (raw, json) Hash identifier: +7ByTk0oQfphXK8LSFiXUNTH/3cgiwV9u8hEfCyk3No= Subject key identifier: DA:39:B3:1F:58:80:7F:7A:3C:E0:8D:0F:DE:7E:E0:68:0C:F6:26:07 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A71EB3CFD2B4810FAFC7B16C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 7861 IP address blocks: 209.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:3c:fd:2b:48:10:fa:fc:7b:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=9a4e463f-ff14-41de-8723-4e7d1f08bfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1e:ba:32:be:2d:28:b1:01:7e:62:d7:53:d5: 8a:f2:28:d7:98:c8:0b:c3:d8:d7:56:3f:65:79:47: d7:fc:da:da:5f:e2:7c:d4:08:bc:ce:54:dc:a2:48: a5:05:ed:64:8a:a2:c3:c8:2e:91:88:75:b8:bc:ca: 74:76:9e:13:e1:d6:a7:9e:e2:3a:28:c2:7b:74:67: 8c:96:ee:68:b8:45:ed:36:21:56:24:f6:54:a9:38: a5:a6:4d:11:fc:88:75:56:e8:ad:21:d5:fe:66:33: bf:27:da:aa:4f:20:72:d0:53:8d:6b:ce:71:5f:95: a4:80:8d:d1:f9:d4:25:66:7b:d2:cd:22:59:bd:58: 93:e4:1b:6b:08:02:4f:6b:ab:9d:03:14:b8:54:d2: 8e:66:29:60:d7:ba:27:16:ed:2a:bb:43:13:1d:8d: 3d:bc:27:7b:c1:95:0a:b6:5f:1c:0c:f2:dd:5b:37: 1b:e0:a9:21:21:f2:58:c0:41:ac:af:e6:bd:26:20: ac:92:17:10:05:1c:41:41:0d:c6:27:95:41:ba:40: b4:0b:ae:48:9b:5a:e1:7e:fe:e9:24:86:45:63:60: c1:5d:35:42:a5:0d:e3:4b:e6:80:90:93:a8:8b:a6: de:24:b7:b9:93:b2:05:92:57:16:25:3d:6d:4c:2c: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:39:B3:1F:58:80:7F:7A:3C:E0:8D:0F:DE:7E:E0:68:0C:F6:26:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31957a02-b0ea-3ae7-b577-0f3188d3ca54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:5a:2a:f0:e7:28:a8:91:68:30:86:38:0c:8a:9b:95:a3:c2: ba:ee:e8:3e:63:43:ed:44:4d:3c:e0:a1:1e:9f:06:ac:df:08: e0:b8:ee:30:07:65:ab:87:02:9c:65:f1:8d:4b:f8:08:33:64: 80:44:3e:64:8f:5b:51:43:6d:9e:0a:3f:6c:e5:4f:50:9c:fe: 2c:df:b5:45:f7:0e:c1:c5:82:63:df:8c:73:32:ac:4d:89:28: c8:15:f9:7e:50:bd:d1:de:27:28:3a:93:4b:e5:33:eb:6c:6b: 83:01:61:fa:ad:3e:6c:49:0e:c2:b5:ac:a7:c8:34:4e:7a:de: ef:5e:55:fc:c9:33:63:a6:36:12:d9:b5:d5:76:83:3f:61:6e: d3:98:c4:72:80:40:c6:e2:d2:cd:a4:9e:be:49:ae:5b:91:0b: 69:85:09:f1:fe:9c:e7:56:e9:e5:70:23:e8:eb:4b:59:9e:aa: 57:07:5f:f6:99:24:ae:09:a5:b1:e4:3b:80:6d:a1:c3:04:e8: fb:b9:c6:56:cc:a8:45:37:52:0c:4c:b3:a3:78:ff:5b:14:a8: 43:92:10:5d:a1:95:48:53:da:80:5e:98:bd:7d:71:c6:39:93: b1:0d:14:6d:7b:73:d1:7e:cf:f6:ec:d4:06:4b:d2:19:73:df: ce:9d:65:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6zz9K0gQ+vx7FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk OWE0ZTQ2M2YtZmYxNC00MWRlLTg3MjMtNGU3ZDFmMDhiZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx66Mr4tKLEBfmLXU9WK8ijXmMgLw9jXVj9l eUfX/NraX+J81Ai8zlTcokilBe1kiqLDyC6RiHW4vMp0dp4T4dannuI6KMJ7dGeM lu5ouEXtNiFWJPZUqTilpk0R/Ih1VuitIdX+ZjO/J9qqTyBy0FONa85xX5WkgI3R +dQlZnvSzSJZvViT5BtrCAJPa6udAxS4VNKOZilg17onFu0qu0MTHY09vCd7wZUK tl8cDPLdWzcb4KkhIfJYwEGsr+a9JiCskhcQBRxBQQ3GJ5VBukC0C65Im1rhfv7p JIZFY2DBXTVCpQ3jS+aAkJOoi6beJLe5k7IFklcWJT1tTCwg/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo5sx9YgH96POCND95+4GgM9iYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzE5NTdhMDItYjBlYS0z YWU3LWI1NzctMGYzMTg4ZDNjYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZaKvDnKKiRaDCGOAyKm5Wjwrru6D5jQ+1ETTzgoR6fBqzfCOC47jAH ZauHApxl8Y1L+AgzZIBEPmSPW1FDbZ4KP2zlT1Cc/izftUX3DsHFgmPfjHMyrE2J KMgV+X5QvdHeJyg6k0vlM+tsa4MBYfqtPmxJDsK1rKfINE563u9eVfzJM2OmNhLZ tdV2gz9hbtOYxHKAQMbi0s2knr5JrluRC2mFCfH+nOdW6eVwI+jrS1meqlcHX/aZ JK4JpbHkO4BtocME6Pu5xlbMqEU3UgxMs6N4/1sUqEOSEF2hlUhT2oBemL19ccY5 k7ENFG17c9F+z/bs1AZL0hlz386dZXw= -----END CERTIFICATE-----Generated at Fri Jul 25 19:41:40 2025 by rpki-client