$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa File: 5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa (raw, json) Hash identifier: dmdwbaUnHM0L9qY/Nn8bLcf5utRtmTAaTwBaXichaRI= Subject key identifier: BF:A7:07:D4:52:82:63:01:2E:56:23:25:86:51:80:B3:C7:B5:4B:C1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7D15F60F95A70EBF57F9C180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 852 IP address blocks: 209.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f6:0f:95:a7:0e:bf:57:f9:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=b3216836-b156-4b62-81af-77280609d6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:2e:ec:48:91:40:24:06:df:d5:97:35:49: c2:20:21:e4:44:39:42:0b:cb:de:75:0d:05:bc:30: bb:fc:ef:63:3c:28:92:42:b2:f8:61:b0:ef:92:f0: b1:56:2f:7c:25:59:5b:a8:e9:81:9a:4a:4b:3a:fc: 48:e9:6d:8b:04:ef:fa:08:77:02:a8:2c:32:f3:2f: fa:32:7a:fd:87:6c:85:08:4c:90:dc:fd:72:26:69: d1:da:86:43:8d:1f:1a:c4:7f:02:a5:51:64:2d:fd: 17:8f:cf:9d:e6:8e:a9:fb:09:48:d8:98:f2:3d:5e: c6:e2:8c:1c:6f:03:94:a7:0d:b5:3d:ad:33:a7:a9: c4:91:5d:96:24:ed:d8:2f:22:2e:46:11:88:f4:66: 6b:4d:2d:34:5d:10:89:1d:1a:47:0b:6e:90:0e:07: 1c:eb:81:81:be:53:28:e4:2b:56:77:37:cd:8b:36: 1c:99:3f:f3:b7:8c:88:f1:b0:0a:37:3a:0b:f8:fd: 05:21:50:ac:9a:d0:e2:c6:ee:ba:d8:bf:33:38:75: 4e:45:45:2b:9f:19:cf:6c:bb:c6:fc:70:79:6f:75: 60:1c:e6:50:ad:23:8a:f8:e7:ef:e3:40:ab:56:63: 8d:21:2a:5c:73:c7:2d:5d:57:0a:f3:61:5c:74:43: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A7:07:D4:52:82:63:01:2E:56:23:25:86:51:80:B3:C7:B5:4B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d5c0b86-aba9-32da-a6c9-63c7faa1cc2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:df:29:21:ed:01:09:86:03:35:87:75:77:cc:c1:af:ab:a3: b8:b1:16:58:29:31:6d:e1:4a:0a:21:01:d2:42:1b:59:9a:22: 98:f2:6a:87:be:5b:c7:31:28:89:25:44:8e:f2:d8:cb:9a:c2: ed:ad:f2:0e:1e:af:c4:5b:ff:91:c8:29:47:fe:dd:96:97:06: 72:52:71:4e:ac:80:8e:e3:b0:b8:87:a9:67:8a:a5:9b:c4:c1: e5:2f:15:79:81:01:84:c4:36:f7:cd:dc:6a:27:c7:65:f4:71: 0b:ac:52:31:8a:97:f8:bc:b2:6a:d9:d8:48:37:67:cb:7e:21: 27:34:b8:11:b5:0f:1d:24:ec:da:ba:fa:01:01:d5:3d:c5:86: dd:8d:ce:7e:c5:c4:9f:64:ee:17:4f:5f:e7:53:32:36:25:fb: 47:60:69:82:b4:e4:0c:53:5d:d2:25:f3:e7:dd:5f:c5:bb:0e: e2:5e:b2:43:ce:08:55:41:e2:3d:85:9b:df:a7:3d:a8:df:d7: 5f:84:e4:10:47:b8:47:85:b7:aa:c2:06:3e:9a:b7:cc:93:2c: 69:a4:67:d6:59:a5:fe:0e:03:c5:98:ab:4c:00:9f:8c:27:ef: b2:b9:82:d7:cc:83:ce:8e:2d:6f:1a:00:57:2f:b7:c0:26:ad: 4e:08:f0:54 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp9FfYPlacOv1f5wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk YjMyMTY4MzYtYjE1Ni00YjYyLTgxYWYtNzcyODA2MDlkNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Qu7EiRQCQG39WXNUnCICHkRDlCC8vedQ0F vDC7/O9jPCiSQrL4YbDvkvCxVi98JVlbqOmBmkpLOvxI6W2LBO/6CHcCqCwy8y/6 Mnr9h2yFCEyQ3P1yJmnR2oZDjR8axH8CpVFkLf0Xj8+d5o6p+wlI2JjyPV7G4owc bwOUpw21Pa0zp6nEkV2WJO3YLyIuRhGI9GZrTS00XRCJHRpHC26QDgcc64GBvlMo 5CtWdzfNizYcmT/zt4yI8bAKNzoL+P0FIVCsmtDixu662L8zOHVORUUrnxnPbLvG /HB5b3VgHOZQrSOK+Ofv40CrVmONISpcc8ctXVcK82FcdEPqNQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL+nB9RSgmMBLlYjJYZRgLPHtUvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWQ1YzBiODYtYWJhOS0z MmRhLWE2YzktNjNjN2ZhYTFjYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0aswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd98pIe0BCYYDNYd1d8zBr6ujuLEWWCkxbeFKCiEB0kIbWZoimPJqh75b xzEoiSVEjvLYy5rC7a3yDh6vxFv/kcgpR/7dlpcGclJxTqyAjuOwuIepZ4qlm8TB 5S8VeYEBhMQ2983caifHZfRxC6xSMYqX+LyyatnYSDdny34hJzS4EbUPHSTs2rr6 AQHVPcWG3Y3OfsXEn2TuF09f51MyNiX7R2BpgrTkDFNd0iXz591fxbsO4l6yQ84I VUHiPYWb36c9qN/XX4TkEEe4R4W3qsIGPpq3zJMsaaRn1lml/g4DxZirTACfjCfv srmC18yDzo4tbxoAVy+3wCatTgjwVA== -----END CERTIFICATE-----Generated at Fri Jul 25 19:26:09 2025 by rpki-client