$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3493a3af-69ea-35f9-a93b-07d4a0dc254a.roa File: 3493a3af-69ea-35f9-a93b-07d4a0dc254a.roa (raw, json) Hash identifier: 3yYL+BtuE5O8EWMXsQi0YlOsg0L5rINXh5QDFXVhFWE= Subject key identifier: 63:C2:16:48:82:B9:8F:F8:07:CD:F2:6F:5A:71:A1:78:75:CD:11:B6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A77808270A3A0CD4D31F3A320 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3493a3af-69ea-35f9-a93b-07d4a0dc254a.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 209.53.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:82:70:a3:a0:cd:4d:31:f3:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=2563d918-8c9e-4b2b-96ef-a0a1d532341b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d4:c8:99:3c:eb:c3:d1:b2:19:df:f8:13:ac: 4b:ce:3b:f0:76:3b:c0:92:59:ad:26:7c:55:f6:3b: 3c:b4:52:4e:13:22:52:b8:3f:2a:a8:4b:3e:f4:18: 31:ec:6a:46:84:db:11:39:c3:67:cc:84:e2:3b:a7: 6f:24:39:66:89:14:ef:ee:94:50:cf:85:eb:c1:3b: a5:f8:f9:88:bc:db:79:f6:a4:b5:00:ee:03:7a:38: 29:20:24:de:1d:5f:42:aa:49:44:4c:72:31:c8:c3: 6d:a9:28:0c:2c:42:9a:de:41:d1:a8:73:f9:2a:eb: e3:f7:1a:4d:1a:a1:3f:34:ef:87:1e:73:a7:d4:a3: 0f:90:cf:68:9c:e4:9a:57:54:ca:68:28:28:d5:e8: 5d:17:43:59:b4:98:0c:bf:7d:0e:0f:9f:44:02:08: 4f:f4:72:6e:c8:48:28:86:0a:db:01:d9:12:a4:51: de:38:e1:bd:3c:37:e7:fc:c3:37:24:fb:45:45:41: 2a:89:ce:2a:e2:aa:0d:c6:e2:9e:7b:28:21:32:c6: 97:e9:6c:10:84:d4:36:4e:97:f5:0e:7c:77:9f:28: 5e:26:b6:87:74:4a:3e:c0:9d:3b:18:c9:af:66:93: 07:ad:25:26:c6:a3:e8:28:12:57:31:8f:8b:5d:f3: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C2:16:48:82:B9:8F:F8:07:CD:F2:6F:5A:71:A1:78:75:CD:11:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3493a3af-69ea-35f9-a93b-07d4a0dc254a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d6:9c:15:c8:19:d8:97:f9:51:c5:e9:9e:c6:3e:07:cb:89: e1:7f:d8:67:67:07:29:13:b3:7d:f7:8c:1f:45:14:81:58:8e: 8d:00:cb:24:c3:80:d9:e8:d2:4d:36:0a:d8:29:4b:a4:f9:22: 35:91:bd:7b:19:54:cc:83:02:2a:e0:03:39:e6:ef:97:19:ab: 7d:8b:b9:98:f4:9a:0a:32:1e:71:e2:1f:75:e5:e3:4a:33:62: e7:11:2f:4f:d0:15:e0:c0:3f:a0:d0:87:0b:6a:f4:db:2f:83: df:cb:bf:85:53:75:bf:d9:9e:87:2c:88:eb:af:81:05:71:a0: e0:c6:07:b3:9b:a1:69:ed:52:cc:46:ce:e4:1b:f3:f3:03:b0: 26:7d:17:5d:ab:f0:c5:b7:5b:94:c3:13:73:5f:28:36:21:03: 8e:af:25:2b:a7:ed:91:01:0f:bd:27:09:a8:94:bf:a3:cc:15: 35:0d:88:5e:8d:b7:fd:44:de:41:a6:9f:3a:d7:a6:6e:12:d0: 99:4e:51:7b:04:c4:11:3c:2a:0f:a7:93:01:e0:c8:f7:b8:85: f8:57:08:b5:af:6f:7c:9e:ae:9a:c4:e8:7d:46:02:c5:e2:b5: 04:44:a4:95:5c:06:f1:ea:67:78:4f:6a:b3:8c:26:0a:26:27: b2:bd:00:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIJwo6DNTTHzoyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MjU2M2Q5MTgtOGM5ZS00YjJiLTk2ZWYtYTBhMWQ1MzIzNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtTImTzrw9GyGd/4E6xLzjvwdjvAklmtJnxV 9js8tFJOEyJSuD8qqEs+9Bgx7GpGhNsROcNnzITiO6dvJDlmiRTv7pRQz4XrwTul +PmIvNt59qS1AO4DejgpICTeHV9CqklETHIxyMNtqSgMLEKa3kHRqHP5Kuvj9xpN GqE/NO+HHnOn1KMPkM9onOSaV1TKaCgo1ehdF0NZtJgMv30OD59EAghP9HJuyEgo hgrbAdkSpFHeOOG9PDfn/MM3JPtFRUEqic4q4qoNxuKeeyghMsaX6WwQhNQ2Tpf1 Dnx3nyheJraHdEo+wJ07GMmvZpMHrSUmxqPoKBJXMY+LXfPn2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPCFkiCuY/4B83yb1pxoXh1zRG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzQ5M2EzYWYtNjllYS0z NWY5LWE5M2ItMDdkNGEwZGMyNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXWnBXIGdiX+VHF6Z7GPgfLieF/2GdnBykTs333jB9FFIFYjo0AyyTD gNno0k02CtgpS6T5IjWRvXsZVMyDAirgAznm75cZq32LuZj0mgoyHnHiH3Xl40oz YucRL0/QFeDAP6DQhwtq9Nsvg9/Lv4VTdb/ZnocsiOuvgQVxoODGB7OboWntUsxG zuQb8/MDsCZ9F12r8MW3W5TDE3NfKDYhA46vJSun7ZEBD70nCaiUv6PMFTUNiF6N t/1E3kGmnzrXpm4S0JlOUXsExBE8Kg+nkwHgyPe4hfhXCLWvb3yerprE6H1GAsXi tQREpJVcBvHqZ3hParOMJgomJ7K9AOg= -----END CERTIFICATE-----Generated at Fri Jul 25 19:29:56 2025 by rpki-client