$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa File: 33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa (raw, json) Hash identifier: tgZn16oShhwoiHJnwFp6hUgT0sBAuqFXM4eUGAFsSEo= Subject key identifier: AB:2A:34:49:74:62:16:11:DE:F7:21:60:0A:05:AA:C2:54:81:90:06 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55C910B947F523C008CF80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 21723 IP address blocks: 209.53.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:c9:10:b9:47:f5:23:c0:08:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=991b9d2d-1a2b-4190-a275-971dcc0305d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:b4:45:be:f2:6b:00:06:11:8d:ff:26:77: 14:0a:b7:de:b4:09:ee:fc:38:d2:d5:5c:56:a1:02: 39:30:75:e7:53:39:06:c2:1d:37:01:15:70:6f:79: 10:d3:58:f0:43:24:bb:e7:9f:f0:78:67:6a:b1:05: 96:dc:a9:4a:ab:e0:38:bc:2c:fd:f9:02:7a:f0:f2: fc:10:18:02:79:0c:e1:8e:de:cd:b1:ad:4e:da:4a: 7f:41:05:d6:8a:3e:3b:c7:0b:4e:91:22:11:05:b0: 5d:f3:90:84:4f:99:63:8e:1e:6f:8f:82:e0:7f:93: a6:97:48:02:1a:f3:db:d6:ab:34:8d:0d:04:e6:e0: 05:e4:94:fa:4a:ca:70:bf:30:74:b6:8d:79:c9:2b: 31:82:30:15:19:1f:df:9f:f8:1a:94:5b:d4:d1:53: 35:69:88:64:b9:f0:d6:bd:90:7e:2e:87:ea:6e:32: 9c:2c:77:e9:a0:ab:cf:60:5f:5a:ca:ca:9e:14:af: eb:22:4e:02:a3:51:bf:a3:54:a9:66:bb:43:9f:2e: 79:b3:a4:f8:d7:34:4f:09:c8:2c:50:ca:3b:d7:6e: 11:e7:e0:a8:f3:d6:58:f9:0a:8f:a3:76:ac:45:cc: fd:1c:69:19:54:df:5d:c9:91:bb:1b:a8:4f:1e:cc: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:34:49:74:62:16:11:DE:F7:21:60:0A:05:AA:C2:54:81:90:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/33334af2-b76c-3f3d-9a71-46ea21b30ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:87:d0:e8:00:d1:ad:ea:38:e6:29:6e:9b:7b:01:3c:85:be: 7d:18:27:85:6e:b6:41:08:f1:50:c3:a8:07:f2:e8:e4:0b:71: 1c:c8:43:32:c4:95:b1:bb:19:bc:9f:b3:27:af:12:73:7c:0c: 57:cc:dc:de:ad:58:99:44:7c:a6:8c:ad:90:be:6d:7a:c3:2b: b6:be:0a:e1:ad:07:82:c0:85:b2:e7:08:c7:4d:f4:63:a9:37: 82:74:b7:84:90:6d:55:5c:1d:42:ae:9f:c0:91:89:5a:25:72: 28:1c:8a:ca:67:f2:dc:fc:b0:a5:bb:12:37:f3:3b:d9:12:6e: 0a:73:df:92:18:56:a3:a4:53:15:69:bb:75:c9:80:9d:56:dd: c0:66:fe:bf:d4:9d:75:f4:11:8f:4b:12:cd:ea:e6:e8:2f:32: 96:b8:87:f2:ec:26:cd:1e:8c:78:d2:0c:12:7a:7f:38:f7:fe: c8:19:c5:ad:02:85:46:e6:e8:70:c0:6a:51:be:6a:f0:8e:10: ba:a1:87:30:41:6b:01:41:bd:dc:29:55:88:ab:f7:6f:ae:51: 42:75:d6:0d:74:8b:39:c3:c1:71:e1:f2:c1:e9:61:93:4c:a2: 18:9b:2d:92:d2:cf:a1:20:4e:2a:96:4d:d8:09:70:be:22:b1: d8:67:1d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVckQuUf1I8AIz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OTkxYjlkMmQtMWEyYi00MTkwLWEyNzUtOTcxZGNjMDMwNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/60Rb7yawAGEY3/JncUCrfetAnu/DjS1VxW oQI5MHXnUzkGwh03ARVwb3kQ01jwQyS755/weGdqsQWW3KlKq+A4vCz9+QJ68PL8 EBgCeQzhjt7Nsa1O2kp/QQXWij47xwtOkSIRBbBd85CET5ljjh5vj4Lgf5Oml0gC GvPb1qs0jQ0E5uAF5JT6SspwvzB0to15ySsxgjAVGR/fn/galFvU0VM1aYhkufDW vZB+LofqbjKcLHfpoKvPYF9aysqeFK/rIk4Co1G/o1SpZrtDny55s6T41zRPCcgs UMo7124R5+Co89ZY+QqPo3asRcz9HGkZVN9dyZG7G6hPHswhLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsqNEl0YhYR3vchYAoFqsJUgZAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzMzMzRhZjItYjc2Yy0z ZjNkLTlhNzEtNDZlYTIxYjMwY2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESH0OgA0a3qOOYpbpt7ATyFvn0YJ4VutkEI8VDDqAfy6OQLcRzIQzLE lbG7GbyfsyevEnN8DFfM3N6tWJlEfKaMrZC+bXrDK7a+CuGtB4LAhbLnCMdN9GOp N4J0t4SQbVVcHUKun8CRiVolcigcispn8tz8sKW7EjfzO9kSbgpz35IYVqOkUxVp u3XJgJ1W3cBm/r/UnXX0EY9LEs3q5ugvMpa4h/LsJs0ejHjSDBJ6fzj3/sgZxa0C hUbm6HDAalG+avCOELqhhzBBawFBvdwpVYir92+uUUJ11g10iznDwXHh8sHpYZNM ohibLZLSz6EgTiqWTdgJcL4isdhnHes= -----END CERTIFICATE-----Generated at Fri Jul 25 19:28:47 2025 by rpki-client