$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa File: 645d7b37-8474-3720-a5a3-bd3189eb639a.roa (raw, json) Hash identifier: UMC645TnZHuNXQHJZ8sbTYFhC269XiiQ8huQYO9Ejpc= Subject key identifier: 2B:57:1D:82:C4:FC:CC:13:B8:58:B2:AE:27:F4:82:DE:73:51:D7:88 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A98267A534F6EE0FA72CED1C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa Signing time: Mon 21 Jul 2025 17:41:10 +0000 ROA not before: Mon 21 Jul 2025 17:41:10 +0000 ROA not after: Sun 19 Oct 2025 17:41:10 +0000 asID: 20115 IP address blocks: 142.173.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:26:7a:53:4f:6e:e0:fa:72:ce:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 21 17:41:10 2025 GMT Not After : Oct 19 17:41:10 2025 GMT Subject: CN=6db27543-fd5d-41e2-9063-a00a2c625712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:d5:3a:eb:2b:5b:0a:f7:95:d5:ab:98:33: e9:42:63:52:58:4a:fc:60:cd:51:8c:ac:6c:ce:c2: db:b7:28:9f:dd:39:45:d4:e1:29:fa:fc:5f:46:51: 05:e4:82:aa:31:17:e7:1a:c2:64:60:ef:32:d6:2e: 30:7a:0e:2b:28:9f:cb:9c:28:0f:d6:95:6a:e8:40: a7:44:56:4c:14:71:d4:a1:46:7d:9f:5d:19:19:89: c9:f6:36:3a:d9:96:fc:25:5d:c3:bb:9d:3a:0d:c4: 4a:9d:cf:3a:99:1c:f0:b7:40:69:a2:a2:b7:10:37: 5c:6c:be:7a:11:28:9f:dc:e1:4c:ec:76:62:a4:ed: c7:64:2f:4b:ff:38:4a:da:81:ea:5d:14:e1:f8:9d: 3c:62:93:7f:20:d0:7b:d0:f5:c3:ae:66:95:e3:23: 13:b4:fb:a2:9c:93:ce:f8:d9:05:ad:c4:8a:76:1f: 09:88:54:40:ce:5b:38:9c:41:58:6d:1d:93:d0:5f: 8e:90:1f:df:1d:2d:c2:9f:71:ef:ab:eb:d6:27:3b: 4b:d5:3d:d6:30:13:cf:b8:83:a1:10:78:3a:46:af: 78:ff:8d:95:b7:7d:56:2f:48:c1:9b:2f:01:35:f0: ad:70:36:32:2c:35:a3:26:08:db:06:41:6d:88:c8: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:57:1D:82:C4:FC:CC:13:B8:58:B2:AE:27:F4:82:DE:73:51:D7:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/645d7b37-8474-3720-a5a3-bd3189eb639a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.173.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:3d:a6:3d:50:22:ca:ee:b5:c5:c3:4a:98:0a:95:46:1d:81: 5a:a6:3a:83:43:51:08:38:d0:cd:c9:3c:a3:19:00:1d:c5:8a: ad:15:0c:e5:de:42:ce:f4:7a:e4:54:51:cb:24:8f:6e:61:95: 39:df:de:5b:f5:bd:89:20:4c:25:2d:39:16:23:4d:07:29:93: 1c:1d:1e:c6:5f:87:97:32:30:86:8e:44:35:29:6d:ff:ae:a8: a8:5a:36:a9:c9:88:76:b0:ef:4b:e1:1c:cc:95:45:15:41:4c: ac:c0:b6:e8:bb:a7:84:68:57:67:ff:cd:57:17:61:1a:71:e6: 7e:ac:e6:c3:31:3d:4a:dd:59:38:f8:8c:84:82:04:e8:4b:95: c0:19:12:21:1c:29:cc:1a:35:0d:db:c2:aa:40:0f:f3:15:90: d1:3a:05:13:c7:c6:6e:a1:82:c7:a4:30:86:46:7e:53:2c:61: 94:86:5b:35:f4:3a:d6:4b:36:d5:09:fa:ee:62:ff:82:be:b7: 78:a3:c3:c7:5d:5c:15:bb:68:91:89:34:03:b4:9f:b8:7b:e3: d7:30:3e:f9:04:5c:bd:4d:05:36:b1:29:b4:b8:54:33:64:c8: 67:0c:35:66:b2:c7:0e:c5:d3:b0:9c:3d:43:84:06:ae:e1:16: 11:d5:cb:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqYJnpTT27g+nLO0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcyMTE3NDExMFoXDTI1MTAxOTE3NDExMFowLzEtMCsGA1UEAxMk NmRiMjc1NDMtZmQ1ZC00MWUyLTkwNjMtYTAwYTJjNjI1NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4bVOusrWwr3ldWrmDPpQmNSWEr8YM1RjKxs zsLbtyif3TlF1OEp+vxfRlEF5IKqMRfnGsJkYO8y1i4weg4rKJ/LnCgP1pVq6ECn RFZMFHHUoUZ9n10ZGYnJ9jY62Zb8JV3Du506DcRKnc86mRzwt0BpoqK3EDdcbL56 ESif3OFM7HZipO3HZC9L/zhK2oHqXRTh+J08YpN/INB70PXDrmaV4yMTtPuinJPO +NkFrcSKdh8JiFRAzls4nEFYbR2T0F+OkB/fHS3Cn3Hvq+vWJztL1T3WMBPPuIOh EHg6Rq94/42Vt31WL0jBmy8BNfCtcDYyLDWjJgjbBkFtiMh3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtXHYLE/MwTuFiyrif0gt5zUdeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjQ1ZDdiMzctODQ3NC0z NzIwLWE1YTMtYmQzMTg5ZWI2MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjq2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMw9pj1QIsrutcXDSpgKlUYdgVqmOoNDUQg40M3JPKMZAB3Fiq0VDOXe Qs70euRUUcskj25hlTnf3lv1vYkgTCUtORYjTQcpkxwdHsZfh5cyMIaORDUpbf+u qKhaNqnJiHaw70vhHMyVRRVBTKzAtui7p4RoV2f/zVcXYRpx5n6s5sMxPUrdWTj4 jISCBOhLlcAZEiEcKcwaNQ3bwqpAD/MVkNE6BRPHxm6hgsekMIZGflMsYZSGWzX0 OtZLNtUJ+u5i/4K+t3ijw8ddXBW7aJGJNAO0n7h749cwPvkEXL1NBTaxKbS4VDNk yGcMNWayxw7F07CcPUOEBq7hFhHVy04= -----END CERTIFICATE-----Generated at Tue Jul 22 19:21:41 2025 by rpki-client