$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/418c036f-9728-34df-8e15-d3b02fa7d48b.roa File: 418c036f-9728-34df-8e15-d3b02fa7d48b.roa (raw, json) Hash identifier: 9WLAUdjEk5M8vg8NHjnfY6cKYWIsWhwucM06wDrFwgo= Subject key identifier: D8:98:45:5E:CA:90:78:C4:06:AE:D5:AB:CB:6F:22:54:C4:35:0C:02 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55CA81E646E1FBF8982300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/418c036f-9728-34df-8e15-d3b02fa7d48b.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 19905 IP address blocks: 209.53.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:ca:81:e6:46:e1:fb:f8:98:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=ae57722e-f9aa-4a9d-9dd7-e49d94d500b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bb:83:70:46:10:f3:31:7b:32:d2:6d:bb:67: 7a:25:ed:aa:d0:21:d3:76:42:4f:e4:e5:4f:01:b5: 11:38:6a:c4:3d:23:bf:a5:e7:c4:71:9e:cc:15:1e: 2d:08:a8:09:f6:cd:e2:3c:4a:e7:d7:a3:d7:be:4b: 20:59:98:b2:c9:cd:ed:b5:a6:27:bb:77:d8:f6:4c: e0:c9:b3:12:34:9e:b9:68:13:b1:32:32:8e:64:90: d1:5f:3b:44:f5:b7:0a:40:8e:4f:bd:d9:f9:a9:e6: f7:24:34:90:94:83:c9:dc:30:ef:bf:08:af:7d:4d: b5:f7:bb:55:80:54:de:07:96:f5:9c:35:64:33:f5: 3d:e3:16:b6:4d:f5:c0:4f:3b:a5:55:c9:97:f7:6d: b9:24:dc:b1:31:6b:cb:79:96:7d:c3:b2:28:b9:d1: d9:5c:07:c3:ad:58:89:83:ff:59:77:9e:ed:71:56: 5a:29:5d:4e:19:26:40:00:99:f2:48:af:03:18:43: 6f:bd:90:44:82:b1:34:a6:04:e6:e0:b2:72:f6:92: 04:64:e8:f0:f1:cd:ba:b4:8c:19:4b:9f:68:c7:d5: 54:f0:99:34:cc:20:61:23:21:64:6f:25:53:2f:3f: 2f:e8:1c:e9:4d:03:e5:0c:81:81:74:06:d4:ff:a5: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:45:5E:CA:90:78:C4:06:AE:D5:AB:CB:6F:22:54:C4:35:0C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/418c036f-9728-34df-8e15-d3b02fa7d48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:ba:85:9f:ac:86:f6:62:b5:fe:8d:0a:6e:ac:3a:22:1f:99: a2:7f:a7:70:a2:1a:6a:d6:d4:47:d3:d9:8f:c7:8a:21:c6:6b: 62:37:80:14:3c:72:c7:24:c0:6a:39:9c:66:d4:d5:8f:48:ea: 1b:f8:31:52:e8:66:4c:71:3a:83:b1:55:49:78:19:bf:9b:26: 49:bd:fa:95:7a:6e:73:33:b6:9c:2d:60:bf:15:a9:df:80:44: 42:d0:59:7c:29:f7:32:00:1a:32:09:ad:91:76:68:25:da:27: 98:0d:a6:4c:50:a1:1f:02:cb:08:fd:8c:d5:a9:67:77:f7:12: 00:45:95:23:7e:17:35:9a:94:3a:be:d2:6e:7d:12:27:1f:39: 1c:b1:62:f7:a2:b9:9c:6e:03:ca:36:9d:13:51:5d:d6:5d:7a: 97:8c:1c:49:2c:ef:3e:a0:aa:26:10:b0:f5:35:e9:e1:6e:fd: 59:d9:1b:b3:49:10:9a:24:bf:95:20:aa:13:0a:e8:44:be:15: 10:3c:d9:7a:95:77:9a:7c:8b:49:aa:b9:9b:e8:a5:65:06:50: 7d:71:b0:4e:61:22:4a:a4:30:09:5f:8b:96:8d:a9:d6:1a:c5: e8:c4:ab:13:58:bb:4e:68:cb:0b:6f:39:ed:83:cc:94:9b:68: 19:0d:f1:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcqB5kbh+/iYIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YWU1NzcyMmUtZjlhYS00YTlkLTlkZDctZTQ5ZDk0ZDUwMGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87uDcEYQ8zF7MtJtu2d6Je2q0CHTdkJP5OVP AbUROGrEPSO/pefEcZ7MFR4tCKgJ9s3iPErn16PXvksgWZiyyc3ttaYnu3fY9kzg ybMSNJ65aBOxMjKOZJDRXztE9bcKQI5Pvdn5qeb3JDSQlIPJ3DDvvwivfU2197tV gFTeB5b1nDVkM/U94xa2TfXATzulVcmX9225JNyxMWvLeZZ9w7IoudHZXAfDrViJ g/9Zd57tcVZaKV1OGSZAAJnySK8DGENvvZBEgrE0pgTm4LJy9pIEZOjw8c26tIwZ S59ox9VU8Jk0zCBhIyFkbyVTLz8v6BzpTQPlDIGBdAbU/6VsCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiYRV7KkHjEBq7Vq8tvIlTENQwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDE4YzAzNmYtOTcyOC0z NGRmLThlMTUtZDNiMDJmYTdkNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOG6hZ+shvZitf6NCm6sOiIfmaJ/p3CiGmrW1EfT2Y/HiiHGa2I3gBQ8 csckwGo5nGbU1Y9I6hv4MVLoZkxxOoOxVUl4Gb+bJkm9+pV6bnMztpwtYL8Vqd+A RELQWXwp9zIAGjIJrZF2aCXaJ5gNpkxQoR8Cywj9jNWpZ3f3EgBFlSN+FzWalDq+ 0m59EicfORyxYveiuZxuA8o2nRNRXdZdepeMHEks7z6gqiYQsPU16eFu/VnZG7NJ EJokv5UgqhMK6ES+FRA82XqVd5p8i0mquZvopWUGUH1xsE5hIkqkMAlfi5aNqdYa xejEqxNYu05oywtvOe2DzJSbaBkN8dk= -----END CERTIFICATE-----Generated at Fri Jul 25 19:32:13 2025 by rpki-client