$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e207af5-45f1-3360-ab24-52c2af025105.roa File: 3e207af5-45f1-3360-ab24-52c2af025105.roa (raw, json) Hash identifier: tHsTs5vfy422bUebUmsxiTwkCuM6bWnDA9e+HZTLGmk= Subject key identifier: 75:D7:9B:A2:FF:1B:89:8A:49:ED:C2:B3:91:22:CB:5E:70:ED:98:67 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A778086FDA2C82B75F1A7A100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e207af5-45f1-3360-ab24-52c2af025105.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 207.167.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:86:fd:a2:c8:2b:75:f1:a7:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=29ccbf64-7fc5-40cf-99f9-47b93a353c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:ea:ce:4a:74:20:50:14:a3:1c:7a:95:fe: ac:a1:05:30:24:2c:8b:96:4e:87:3e:37:b0:59:f7: b5:8d:18:9f:52:2d:38:48:f2:a7:22:05:ce:59:a0: 0e:a8:9e:68:92:ac:31:c7:ac:86:9e:4c:29:98:05: 36:9b:31:c5:46:c7:bb:b1:4d:a6:75:c7:58:65:c9: 17:0e:80:0a:b6:fa:3a:87:24:ec:fe:ab:b3:eb:a6: 6c:d3:a8:d5:66:2e:32:a0:58:11:48:f3:3a:7f:cc: 91:c2:df:ae:98:71:af:af:78:4f:a5:ae:2b:b0:2e: 02:21:7f:dd:7f:d8:a3:6a:f5:85:00:82:65:f1:8b: 41:58:f6:bf:de:e3:83:9f:a5:30:d9:9c:f9:1c:6f: 15:e0:6f:b5:19:0e:c8:29:98:24:9f:fa:ec:ac:57: 94:45:96:85:50:b2:48:64:e6:af:44:f2:1a:9c:8d: f1:d1:af:d6:83:64:92:ef:13:d1:56:5e:bd:f1:84: d0:43:ec:72:56:ea:ec:a3:46:74:3c:22:28:7f:09: 76:02:27:14:61:c5:1f:0c:db:59:f3:3d:0e:a8:46: f1:12:8a:12:f9:45:b0:6d:51:5a:5b:91:69:e6:81: 03:cb:80:83:c5:ca:e3:f4:98:e5:1b:f7:63:8c:c7: f1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D7:9B:A2:FF:1B:89:8A:49:ED:C2:B3:91:22:CB:5E:70:ED:98:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e207af5-45f1-3360-ab24-52c2af025105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.167.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ed:0c:5c:e8:60:93:74:ef:d7:3c:03:ea:e5:0f:5e:1e:22: ff:de:3c:4d:c9:54:10:00:00:0f:5b:91:19:f2:91:95:e0:81: b4:d9:d9:23:aa:e7:65:0e:f2:61:c4:50:85:41:c9:b2:e2:37: 05:ec:b4:60:cc:46:3e:96:5d:37:f0:a6:a9:56:3d:f1:78:40: 97:3c:1d:b0:62:94:62:90:58:ad:85:b1:7a:c8:e7:82:e6:21: 34:ab:e5:bd:3d:54:16:a2:38:77:97:f9:df:a9:b9:5f:4c:69: 80:e1:70:5b:f9:5d:00:95:e3:c5:46:f7:8f:6e:59:a1:01:c8: 06:d1:55:fa:71:f5:26:2e:7f:67:df:9f:41:c8:be:0c:eb:a3: a9:c9:16:7c:c5:1b:3a:86:cb:5d:69:f2:f5:d0:6a:56:48:33: 58:5e:fc:db:a6:e9:af:4e:63:9c:50:b9:0a:64:e3:77:61:8d: ee:a9:05:58:6a:47:b5:c5:5c:80:f2:1b:a7:f4:83:c0:fd:30: da:39:63:3a:47:a4:54:84:4c:da:48:55:43:de:6d:11:64:a1: 04:6f:eb:36:29:09:04:1c:f3:50:b1:89:1f:92:0a:e2:3e:05: c0:1b:49:3a:8c:fd:3c:9b:bd:8f:e0:5b:de:ed:0d:79:8e:de: f7:a7:82:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIb9osgrdfGnoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MjljY2JmNjQtN2ZjNS00MGNmLTk5ZjktNDdiOTNhMzUzYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyejqzkp0IFAUoxx6lf6soQUwJCyLlk6HPjew Wfe1jRifUi04SPKnIgXOWaAOqJ5okqwxx6yGnkwpmAU2mzHFRse7sU2mdcdYZckX DoAKtvo6hyTs/quz66Zs06jVZi4yoFgRSPM6f8yRwt+umHGvr3hPpa4rsC4CIX/d f9ijavWFAIJl8YtBWPa/3uODn6Uw2Zz5HG8V4G+1GQ7IKZgkn/rsrFeURZaFULJI ZOavRPIanI3x0a/Wg2SS7xPRVl698YTQQ+xyVurso0Z0PCIofwl2AicUYcUfDNtZ 8z0OqEbxEooS+UWwbVFaW5Fp5oEDy4CDxcrj9JjlG/djjMfxeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXXm6L/G4mKSe3Cs5Eiy15w7ZhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2UyMDdhZjUtNDVmMS0z MzYwLWFiMjQtNTJjMmFmMDI1MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6fEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvtDFzoYJN079c8A+rlD14eIv/ePE3JVBAAAA9bkRnykZXggbTZ2SOq 52UO8mHEUIVBybLiNwXstGDMRj6WXTfwpqlWPfF4QJc8HbBilGKQWK2FsXrI54Lm ITSr5b09VBaiOHeX+d+puV9MaYDhcFv5XQCV48VG949uWaEByAbRVfpx9SYuf2ff n0HIvgzro6nJFnzFGzqGy11p8vXQalZIM1he/Num6a9OY5xQuQpk43dhje6pBVhq R7XFXIDyG6f0g8D9MNo5YzpHpFSETNpIVUPebRFkoQRv6zYpCQQc81CxiR+SCuI+ BcAbSTqM/TybvY/gW97tDXmO3vengkc= -----END CERTIFICATE-----Generated at Fri Jul 25 19:39:01 2025 by rpki-client