$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa File: 3baf912b-384b-3427-b752-a35aa9af6107.roa (raw, json) Hash identifier: b8QxF60RJ4kaPr5cEeu8uvkyBU1XqxZIEmGRM4lqG2s= Subject key identifier: 4B:35:9C:B1:20:C1:FD:5A:4A:B1:6A:14:8B:50:A3:8E:89:6D:00:BF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3758A2C1EBAED9C20C00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 172.219.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:37:58:a2:c1:eb:ae:d9:c2:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=793622b3-f748-4fce-98bd-cc3ef0d2fc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9c:6b:74:6a:61:fe:9b:f0:71:ed:6c:70:98: 4b:cf:bd:5b:6a:dd:31:6b:9e:28:63:65:21:3f:a4: 83:b3:82:da:1d:b7:4a:7b:68:fa:5e:94:a6:36:42: d8:6a:6f:3d:09:e0:6a:83:3a:b8:91:37:af:19:f5: 4a:c9:ea:81:8b:b7:ce:4b:a2:b4:85:d5:0d:4f:d5: 82:11:ff:43:10:30:a3:6d:d8:8b:ce:c7:6b:80:a9: cf:f4:2c:dc:7e:df:0a:9e:8c:bb:c7:a0:1f:e4:be: c0:df:66:05:03:2b:ee:fc:f3:e0:5a:e7:94:3a:ad: dc:51:92:8d:22:dc:76:a6:ba:a0:34:87:b5:ab:d3: 22:a1:5e:be:f4:c8:6e:8f:dc:dd:4c:87:4c:30:dd: 53:3d:2d:d1:33:f9:9f:78:d8:72:3f:98:b1:a8:4a: 5a:b8:8d:a4:63:a4:5d:30:aa:d0:55:91:a2:9e:a0: f7:38:34:d9:6c:12:31:40:93:cf:f8:93:07:53:c0: 9a:04:7e:64:18:65:a9:7c:c1:92:52:f7:26:04:9a: 3b:20:c2:02:cb:4f:50:3e:4b:a5:a6:38:dd:f6:e1: d3:ff:3c:2e:5a:6f:79:56:94:62:2a:03:ef:de:a7: e6:82:65:f2:7e:88:62:75:53:15:ea:56:2d:8b:bd: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:35:9C:B1:20:C1:FD:5A:4A:B1:6A:14:8B:50:A3:8E:89:6D:00:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 172.219.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f8:3d:07:fb:4e:d3:d2:7e:a5:95:49:51:c9:07:48:c2:4b: 0e:a9:4c:98:16:a2:9b:bc:b1:c8:18:6b:49:53:ca:ab:71:fe: 79:f3:e7:a9:38:0a:fb:12:40:c0:7d:6a:38:88:10:03:39:c6: 05:aa:2b:d3:70:23:64:1d:7e:fd:0a:14:db:ee:e8:a3:da:6d: b9:33:8e:42:56:7c:24:83:67:60:03:57:25:de:5f:66:92:45: 29:d9:ec:c4:68:cd:75:ae:1d:46:f8:f5:30:37:bc:66:34:e6: c1:c7:9c:9b:30:d0:35:9d:84:6d:22:37:24:4c:8b:61:f1:fe: 04:04:38:dd:76:b2:77:d8:10:26:ce:f6:79:e1:51:4d:f5:d8: a0:3b:c2:19:46:06:4e:bb:14:23:f5:3e:cf:9f:15:77:c1:37: e8:88:93:95:2d:ec:be:8a:71:f3:1f:a5:09:19:21:20:f6:1e: 27:f6:fb:53:e6:2f:23:b4:9e:6d:5f:a7:b7:76:f9:62:f9:ed: 47:5e:3e:a0:e6:ac:ec:d5:ee:b3:40:f6:47:3a:5d:02:68:d6: 97:02:2b:bd:42:ca:17:06:ea:67:c2:b6:d0:f1:2b:fd:1c:95: b8:24:83:30:51:a7:28:16:cf:d0:02:41:0b:2a:4d:04:5e:3d: 92:79:9e:2d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp6SzdYosHrrtnCDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NzkzNjIyYjMtZjc0OC00ZmNlLTk4YmQtY2MzZWYwZDJmYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpxrdGph/pvwce1scJhLz71bat0xa54oY2Uh P6SDs4LaHbdKe2j6XpSmNkLYam89CeBqgzq4kTevGfVKyeqBi7fOS6K0hdUNT9WC Ef9DEDCjbdiLzsdrgKnP9Czcft8Knoy7x6Af5L7A32YFAyvu/PPgWueUOq3cUZKN Itx2prqgNIe1q9MioV6+9Mhuj9zdTIdMMN1TPS3RM/mfeNhyP5ixqEpauI2kY6Rd MKrQVZGinqD3ODTZbBIxQJPP+JMHU8CaBH5kGGWpfMGSUvcmBJo7IMICy09QPkul pjjd9uHT/zwuWm95VpRiKgPv3qfmgmXyfohidVMV6lYti72b3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEs1nLEgwf1aSrFqFItQo46JbQC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2JhZjkxMmItMzg0Yi0z NDI3LWI3NTItYTM1YWE5YWY2MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAB/g9B/tO09J+pZVJUckHSMJLDqlMmBaim7yxyBhrSVPKq3H+efPnqTgK +xJAwH1qOIgQAznGBaor03AjZB1+/QoU2+7oo9ptuTOOQlZ8JINnYANXJd5fZpJF KdnsxGjNda4dRvj1MDe8ZjTmwcecmzDQNZ2EbSI3JEyLYfH+BAQ43Xayd9gQJs72 eeFRTfXYoDvCGUYGTrsUI/U+z58Vd8E36IiTlS3svopx8x+lCRkhIPYeJ/b7U+Yv I7SebV+nt3b5YvntR14+oOas7NXus0D2RzpdAmjWlwIrvULKFwbqZ8K20PEr/RyV uCSDMFGnKBbP0AJBCypNBF49knmeLQ== -----END CERTIFICATE-----Generated at Fri Jul 25 19:22:08 2025 by rpki-client