$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa File: 45cd8a14-452c-33e9-949f-176742ba4487.roa (raw, json) Hash identifier: CG9Vgo6vadvLV0kE5rxEYBzrG0YJWDa0ipTLEw27Om4= Subject key identifier: B3:35:5E:1B:FB:DA:88:F4:77:B4:62:3D:FB:DA:6F:94:CE:39:B7:1C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3B5B5FB4686F792B7200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 209.52.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:3b:5b:5f:b4:68:6f:79:2b:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=8d402d2f-52f3-47a5-89db-4e6e0810f651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:30:dc:63:96:83:3b:ab:82:f0:c1:24:51: d0:62:df:25:c4:c0:a6:7c:55:46:96:d5:08:8b:c5: 2a:2d:4a:3f:a8:fb:ca:fb:56:c6:b9:fc:f6:e5:5c: ae:66:81:9c:93:f9:0c:44:4e:29:f2:4a:41:d6:82: e8:6f:a8:41:5a:91:69:07:55:c2:f8:f2:1f:e7:dc: d0:77:a9:7e:c8:26:b3:48:b7:38:d7:66:87:a4:17: 1b:13:21:49:73:ac:85:55:6f:41:7f:1f:8b:53:53: c8:e3:2b:3e:14:1f:b8:e8:85:64:c2:9b:e8:60:81: 3a:b8:6f:1b:6d:90:ae:db:d5:81:20:53:b9:9d:f8: ac:80:93:50:a3:b5:c5:62:6e:b6:f0:e4:57:30:8d: 0a:ef:b0:e5:72:f5:5c:e8:66:5d:b2:5e:3f:7c:41: ed:cd:51:62:31:a4:4b:b7:c4:bd:b3:d6:2b:36:e4: a4:33:88:87:9f:d1:4f:8e:3c:bc:89:68:e8:e0:da: 03:9b:d3:ef:00:34:49:2c:24:a6:b7:2b:80:bb:57: 11:31:56:e1:8c:56:77:26:cf:b1:eb:3b:28:54:d0: 53:4e:b8:40:cd:db:82:ae:1a:6a:2f:2c:09:a5:85: bf:82:f4:81:3c:60:9a:c2:2e:9f:98:3c:04:18:20: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:35:5E:1B:FB:DA:88:F4:77:B4:62:3D:FB:DA:6F:94:CE:39:B7:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45cd8a14-452c-33e9-949f-176742ba4487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3d:d9:9c:47:96:10:93:20:85:49:c8:92:20:d0:12:d5:e5: 09:07:c5:98:83:f8:fb:ca:15:3f:b2:9a:04:c7:f8:7d:c3:a3: 00:9b:38:dd:fa:15:53:18:49:60:a0:20:4f:49:a5:4c:aa:92: 15:88:e9:ce:8b:61:e5:52:12:73:79:07:c8:65:f5:f4:95:32: 9d:f9:f6:22:6f:2a:6e:97:f1:84:6c:54:35:40:b8:50:9d:ed: ea:2d:d6:e1:fd:0e:7d:70:35:73:06:c3:a6:40:b9:97:18:15: 37:b6:fa:7b:33:57:2b:a1:84:97:70:df:66:98:eb:27:f0:f4: 46:20:04:d4:1e:83:b4:fe:3d:88:23:0a:dd:ca:1e:bc:1f:cb: e5:b9:bd:51:c7:09:78:72:d1:71:25:cb:6c:1a:f6:6e:41:65: 94:fb:28:09:dc:90:97:80:e6:f0:b3:47:77:8a:8b:73:b6:94: ea:25:e8:5b:fe:e4:68:9a:b6:91:9a:b5:9f:0a:d4:68:1c:12: bc:ff:70:32:16:93:72:ef:5f:06:c3:1c:42:b8:ef:ba:c2:29: b3:af:22:fe:b1:01:13:87:31:0e:e9:e1:13:63:bb:f0:21:61: 00:0b:83:31:d3:f2:f7:6a:c3:68:f7:ed:16:ef:d5:39:f8:12: f0:a8:e4:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SztbX7Rob3krcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk OGQ0MDJkMmYtNTJmMy00N2E1LTg5ZGItNGU2ZTA4MTBmNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXUw3GOWgzurgvDBJFHQYt8lxMCmfFVGltUI i8UqLUo/qPvK+1bGufz25VyuZoGck/kMRE4p8kpB1oLob6hBWpFpB1XC+PIf59zQ d6l+yCazSLc412aHpBcbEyFJc6yFVW9Bfx+LU1PI4ys+FB+46IVkwpvoYIE6uG8b bZCu29WBIFO5nfisgJNQo7XFYm628ORXMI0K77DlcvVc6GZdsl4/fEHtzVFiMaRL t8S9s9YrNuSkM4iHn9FPjjy8iWjo4NoDm9PvADRJLCSmtyuAu1cRMVbhjFZ3Js+x 6zsoVNBTTrhAzduCrhpqLywJpYW/gvSBPGCawi6fmDwEGCBItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM1Xhv72oj0d7RiPfvab5TOObccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDVjZDhhMTQtNDUyYy0z M2U5LTk0OWYtMTc2NzQyYmE0NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ92ZxHlhCTIIVJyJIg0BLV5QkHxZiD+PvKFT+ymgTH+H3DowCbON36 FVMYSWCgIE9JpUyqkhWI6c6LYeVSEnN5B8hl9fSVMp359iJvKm6X8YRsVDVAuFCd 7eot1uH9Dn1wNXMGw6ZAuZcYFTe2+nszVyuhhJdw32aY6yfw9EYgBNQeg7T+PYgj Ct3KHrwfy+W5vVHHCXhy0XEly2wa9m5BZZT7KAnckJeA5vCzR3eKi3O2lOol6Fv+ 5GiatpGatZ8K1GgcErz/cDIWk3LvXwbDHEK477rCKbOvIv6xAROHMQ7p4RNju/Ah YQALgzHT8vdqw2j37Rbv1Tn4EvCo5BQ= -----END CERTIFICATE-----Generated at Fri Jul 25 19:33:27 2025 by rpki-client