$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/379f40ff-ae27-3318-b062-1fbbd09fdf4d.roa File: 379f40ff-ae27-3318-b062-1fbbd09fdf4d.roa (raw, json) Hash identifier: cCIyNYB0TMBZGXuQWpsBDzKL8eu9JZRnUZ8xh+T0n2k= Subject key identifier: 63:25:98:C6:16:F3:9A:FE:40:27:26:1F:64:41:40:D9:C8:08:21:03 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B39D36D6CD903FFF9C100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/379f40ff-ae27-3318-b062-1fbbd09fdf4d.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 75.154.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:39:d3:6d:6c:d9:03:ff:f9:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=3c2398d7-c081-4ba4-9bf7-55651ef68146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:69:b9:26:ff:d8:8a:67:08:4e:92:25:5d:3b: 42:a6:39:8f:82:67:40:01:42:dc:5b:52:26:b5:db: 85:5e:42:99:36:3d:44:b4:28:c4:43:04:5b:e5:56: 7f:7a:35:f1:5e:d0:c4:30:fa:fc:24:9b:84:3b:7d: 2e:6a:cc:92:e2:e0:d8:0e:68:16:fb:c3:a2:0f:a5: f4:6c:70:e1:ca:dc:e8:cf:0f:be:cd:65:59:7c:1f: 57:1c:99:26:21:23:90:f3:b8:85:ff:01:bc:e4:12: 9e:72:ab:97:5a:43:9a:99:73:6c:e6:f4:71:3e:3d: 94:03:82:26:5b:6b:65:47:ce:b8:6d:7f:36:7a:fc: 3d:e9:2a:a5:2e:30:e6:e8:0d:e7:bd:23:fd:58:8a: 77:49:d9:23:27:9f:17:93:5b:a7:de:ec:53:dd:84: 0e:62:00:21:7a:80:df:a4:08:64:51:31:61:c6:4e: d8:39:1d:9c:ed:94:2e:ce:ed:d1:83:9e:62:65:bf: 8c:9d:ae:5c:8f:7a:67:cf:1f:4e:3d:dc:ca:72:46: 27:de:7b:d2:29:75:9b:e7:c0:6c:ba:ee:bc:71:6f: 19:6d:26:bd:a5:d8:06:02:de:2b:50:d4:dc:0b:4c: be:f0:f8:f2:ff:e4:f8:02:1b:5e:7c:dd:f1:4c:34: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:25:98:C6:16:F3:9A:FE:40:27:26:1F:64:41:40:D9:C8:08:21:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/379f40ff-ae27-3318-b062-1fbbd09fdf4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.154.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:06:6f:9c:b5:c6:63:2c:de:38:3e:3f:eb:28:69:35:95:30: 74:91:60:aa:34:33:1b:96:c8:0d:41:f2:27:22:5e:69:f1:e0: 33:7e:bc:6a:73:d7:5f:06:c9:8c:bd:6d:9e:64:65:53:67:46: f2:ca:88:55:f2:67:9d:53:ac:66:29:1c:76:30:80:63:5c:05: 7a:48:96:cf:12:1c:b6:5e:9c:7a:69:40:51:da:03:42:c6:89: 3d:2e:80:ff:5b:09:31:de:18:0d:aa:e3:5d:9a:66:73:85:d3: e4:d2:17:26:fa:b7:00:41:89:cc:56:f9:93:97:b4:a4:81:b9: 43:8d:5b:41:a4:85:0c:fb:f3:71:e7:3d:d9:3b:75:ac:6e:ee: ca:aa:1c:13:91:4d:08:ae:8e:36:81:5e:c6:6e:a5:0e:af:da: 49:0c:82:6e:60:d2:f5:b8:09:2e:07:42:f5:28:81:5c:33:86: 2c:2b:89:eb:e4:ec:a7:c6:ec:55:1e:a1:4c:28:e8:6d:84:13: 5c:a4:62:c2:c4:b9:a7:c0:97:f1:7d:c5:e1:6a:95:4f:50:e7: 71:24:25:cc:69:fe:d2:b9:5f:fb:70:fc:39:5a:fa:b8:a1:46: c3:2e:14:e4:3c:a2:19:af:ee:44:8e:46:cf:ce:4b:2e:91:b2: 5e:9e:8c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SznTbWzZA//5wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk M2MyMzk4ZDctYzA4MS00YmE0LTliZjctNTU2NTFlZjY4MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGm5Jv/YimcITpIlXTtCpjmPgmdAAULcW1Im tduFXkKZNj1EtCjEQwRb5VZ/ejXxXtDEMPr8JJuEO30uasyS4uDYDmgW+8OiD6X0 bHDhytzozw++zWVZfB9XHJkmISOQ87iF/wG85BKecquXWkOamXNs5vRxPj2UA4Im W2tlR864bX82evw96SqlLjDm6A3nvSP9WIp3SdkjJ58Xk1un3uxT3YQOYgAheoDf pAhkUTFhxk7YOR2c7ZQuzu3Rg55iZb+Mna5cj3pnzx9OPdzKckYn3nvSKXWb58Bs uu68cW8ZbSa9pdgGAt4rUNTcC0y+8Pjy/+T4AhtefN3xTDTd7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMlmMYW85r+QCcmH2RBQNnICCEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzc5ZjQwZmYtYWUyNy0z MzE4LWIwNjItMWZiYmQwOWZkZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES5rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgGb5y1xmMs3jg+P+soaTWVMHSRYKo0MxuWyA1B8iciXmnx4DN+vGpz 118GyYy9bZ5kZVNnRvLKiFXyZ51TrGYpHHYwgGNcBXpIls8SHLZenHppQFHaA0LG iT0ugP9bCTHeGA2q412aZnOF0+TSFyb6twBBicxW+ZOXtKSBuUONW0GkhQz783Hn Pdk7daxu7sqqHBORTQiujjaBXsZupQ6v2kkMgm5g0vW4CS4HQvUogVwzhiwrievk 7KfG7FUeoUwo6G2EE1ykYsLEuafAl/F9xeFqlU9Q53EkJcxp/tK5X/tw/Dla+rih RsMuFOQ8ohmv7kSORs/OSy6Rsl6ejHc= -----END CERTIFICATE-----Generated at Fri Jul 25 19:33:27 2025 by rpki-client