$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa File: 3f4168cf-189e-31fc-8ad6-098547940f9d.roa (raw, json) Hash identifier: M9bBJqvtILNrCGqtLPGPRf0a+q2qD4oYwdpBH1ZW4sU= Subject key identifier: D4:1A:A1:53:1D:BE:17:BB:74:C4:22:42:41:CB:C3:DA:AE:06:AB:A8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A71EB3A92110AF5BED06AC360 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 7861 IP address blocks: 209.20.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:3a:92:11:0a:f5:be:d0:6a:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=2fdec7ef-3733-419f-aacf-b46750673117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:ac:65:b4:80:e5:b6:5d:28:d0:4e:2e:db: 28:5e:ae:57:4f:48:35:71:1e:66:9e:96:8e:50:7e: a9:a2:eb:77:a6:99:6d:e7:dc:a6:67:b5:c5:01:10: cd:9a:c1:22:83:02:68:77:4d:62:9a:fd:69:ea:16: a1:fb:75:8a:73:24:4e:43:45:f4:cd:0f:94:b2:58: 74:ef:31:be:a5:2d:c4:09:56:a6:cf:b1:e6:9f:51: fb:d2:5b:ba:0b:3b:d0:f6:98:d8:23:49:42:3c:b6: 82:c8:6a:06:9a:15:74:43:6e:f0:44:ca:e7:b6:e9: 00:ea:74:74:57:1e:9c:54:40:a5:bb:2b:45:cf:1a: f1:a1:7e:a6:2d:ad:47:f7:19:38:54:6a:77:ad:ae: 26:d3:80:ed:86:fd:10:76:58:35:d0:b7:3e:30:40: df:fc:00:ad:67:17:b4:4d:c3:a7:40:53:cf:fe:0e: a1:d6:f5:dc:9a:e3:8e:7e:53:3a:b2:5d:94:70:c3: 90:1c:ff:b1:40:b5:07:18:07:e5:99:f5:d6:de:a7: fb:dc:37:5b:58:b5:9d:1c:25:3a:9f:a6:66:ff:96: bc:ba:60:2a:64:71:48:f1:59:d6:bb:8d:b9:23:a0: 6a:8b:cf:23:1a:03:6c:a3:5e:9d:93:64:05:9b:24: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1A:A1:53:1D:BE:17:BB:74:C4:22:42:41:CB:C3:DA:AE:06:AB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f4168cf-189e-31fc-8ad6-098547940f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:b2:88:db:05:5d:b6:73:0b:2b:77:f0:27:21:7d:49:30:10: 9a:13:18:3a:e7:5b:79:5c:93:f1:61:b8:e0:eb:64:05:62:ed: 26:e6:11:64:7c:65:90:df:2c:05:f7:b2:bc:7b:6c:dd:19:b8: 7b:69:81:d2:1f:ae:e5:1b:4c:5f:89:c1:7f:3f:80:e9:7b:2e: c8:fe:b1:71:df:e3:ab:1e:77:82:6f:bd:9b:fe:4d:ff:c2:7d: f1:95:a7:36:21:11:7f:5f:26:aa:3e:53:73:c6:99:19:d4:e7: f1:15:e9:84:dd:cf:ff:31:64:ba:c3:7f:7b:bf:40:20:b0:61: 04:37:66:e7:e2:a2:ae:66:70:96:47:42:d3:e3:5f:01:c2:5b: 04:39:42:f7:f1:a6:8c:91:3c:50:c0:58:86:dc:3c:4f:e3:f7: 48:d1:7a:51:36:30:4b:7d:f0:12:2f:28:46:9d:38:c0:c1:ef: 3b:9a:e4:10:4b:a3:d2:eb:2a:f8:41:b9:79:d5:40:14:6d:e0: 1e:dd:b6:18:e6:4b:64:5b:b1:6b:0b:99:94:ce:e9:a7:e7:30: 9a:85:33:2b:f2:2d:46:4f:36:9d:24:da:24:38:2e:ec:ab:8c: 6c:9b:5c:95:72:47:a0:25:60:04:9c:11:c7:0d:8e:f6:16:e7: cf:7f:a3:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6zqSEQr1vtBqw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MmZkZWM3ZWYtMzczMy00MTlmLWFhY2YtYjQ2NzUwNjczMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpKsZbSA5bZdKNBOLtsoXq5XT0g1cR5mnpaO UH6pout3pplt59ymZ7XFARDNmsEigwJod01imv1p6hah+3WKcyROQ0X0zQ+Uslh0 7zG+pS3ECVamz7Hmn1H70lu6CzvQ9pjYI0lCPLaCyGoGmhV0Q27wRMrntukA6nR0 Vx6cVECluytFzxrxoX6mLa1H9xk4VGp3ra4m04Dthv0Qdlg10Lc+MEDf/ACtZxe0 TcOnQFPP/g6h1vXcmuOOflM6sl2UcMOQHP+xQLUHGAflmfXW3qf73DdbWLWdHCU6 n6Zm/5a8umAqZHFI8VnWu425I6Bqi88jGgNso16dk2QFmyRJlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQaoVMdvhe7dMQiQkHLw9quBquoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2Y0MTY4Y2YtMTg5ZS0z MWZjLThhZDYtMDk4NTQ3OTQwZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiyiNsFXbZzCyt38CchfUkwEJoTGDrnW3lck/FhuODrZAVi7SbmEWR8 ZZDfLAX3srx7bN0ZuHtpgdIfruUbTF+JwX8/gOl7Lsj+sXHf46sed4JvvZv+Tf/C ffGVpzYhEX9fJqo+U3PGmRnU5/EV6YTdz/8xZLrDf3u/QCCwYQQ3Zufioq5mcJZH QtPjXwHCWwQ5QvfxpoyRPFDAWIbcPE/j90jRelE2MEt98BIvKEadOMDB7zua5BBL o9LrKvhBuXnVQBRt4B7dthjmS2RbsWsLmZTO6afnMJqFMyvyLUZPNp0k2iQ4Luyr jGybXJVyR6AlYAScEccNjvYW589/o7U= -----END CERTIFICATE-----Generated at Sat Jul 26 19:44:31 2025 by rpki-client