$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa File: 658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa (raw, json) Hash identifier: xr44YOZFNLbAvVcABnnwTUgYTi91N7nb+U+v0a+mQsA= Subject key identifier: B5:D7:E8:B3:A6:A9:6D:BA:D5:5B:4E:76:A8:10:8A:AD:99:06:C3:56 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3B0415C5514294E70380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 75.152.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:3b:04:15:c5:51:42:94:e7:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=0022ea8e-6d0c-40d7-8cd3-1be66f416cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:77:8a:7d:b4:ed:1c:94:54:2e:35:17:9e: 08:93:5a:4c:45:23:1e:08:b1:ea:ab:d4:8f:83:66: 88:07:e4:c6:c6:f7:16:7b:b9:71:04:6b:40:9a:b6: ca:e1:b0:02:fe:4e:a3:6f:7d:3c:d1:af:fd:9a:f9: da:3e:b1:0f:d9:44:09:78:58:f4:e6:b7:80:49:33: e0:3a:36:36:b3:59:6c:ed:84:68:b4:6b:31:5a:26: 28:5f:b1:b9:92:b4:fc:ff:e7:5b:4f:46:64:37:20: 3d:db:61:20:70:a0:76:59:60:2c:d4:0c:69:ca:b1: d8:8f:b4:8c:85:a3:ee:83:c3:4e:d7:f7:ff:b7:dc: f6:fa:35:fc:2b:f9:03:41:0c:0e:a6:49:f7:3d:92: b7:fa:bd:fe:be:a1:16:64:ee:18:47:80:98:aa:cb: 87:a0:d7:dd:22:a0:97:a4:bf:bd:52:b1:0e:58:88: 4a:9c:d2:12:9b:31:41:d6:36:b5:b7:7f:b2:66:37: 6b:78:d0:5a:30:7f:6c:46:29:95:8d:11:e3:3b:03: 9e:df:7a:ca:f2:59:78:bc:75:8b:36:3b:36:38:7c: 5e:e0:93:c4:99:d3:bb:7f:64:81:03:3d:30:44:5e: 2f:6e:36:47:0d:2a:5d:7d:f7:fb:79:3e:aa:97:e7: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D7:E8:B3:A6:A9:6D:BA:D5:5B:4E:76:A8:10:8A:AD:99:06:C3:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.152.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b5:16:9b:30:5f:96:3f:41:df:ef:0a:38:19:9f:c1:3a:d6: 7a:62:bf:e6:ce:85:49:32:30:b4:9b:60:a3:36:c1:cf:95:d1: 3e:0b:76:79:55:ca:64:6d:64:9d:45:15:5e:9d:b3:68:e4:d6: c2:17:58:66:20:2c:a6:4c:d1:07:ef:ad:02:74:b6:8b:d3:5a: ec:52:ec:49:9e:2f:4f:c6:00:d7:40:7c:a7:c3:7f:a3:7e:1e: 2b:fc:ae:fb:55:5f:1f:63:3d:51:d1:ee:bc:e8:be:2c:98:73: 32:ba:93:bc:31:30:a7:a9:4f:19:93:86:68:89:f8:14:18:79: 06:b9:d9:ed:fc:f9:2a:d8:fe:74:fc:24:4c:71:93:6e:d0:9c: 04:9d:75:84:57:cb:d4:20:65:19:da:a7:07:17:1e:19:af:e2: 94:46:84:bd:c2:56:3f:1c:36:ef:a3:87:a3:4c:47:d2:f3:fa: 75:9f:86:c9:94:13:8c:ec:28:4d:1c:da:3c:35:8b:63:a1:b8: 2c:20:e9:46:59:94:c8:53:ea:ba:3f:7d:42:a9:9d:ff:79:77: a3:d4:02:c1:33:d1:41:79:95:14:03:b6:c3:ab:ef:9d:39:1f: d4:1e:81:5d:d1:61:5b:06:22:90:67:49:4a:e0:b3:2b:0e:40: f9:f2:4c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzsEFcVRQpTnA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MDAyMmVhOGUtNmQwYy00MGQ3LThjZDMtMWJlNjZmNDE2Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjF3in207RyUVC41F54Ik1pMRSMeCLHqq9SP g2aIB+TGxvcWe7lxBGtAmrbK4bAC/k6jb3080a/9mvnaPrEP2UQJeFj05reASTPg OjY2s1ls7YRotGsxWiYoX7G5krT8/+dbT0ZkNyA922EgcKB2WWAs1AxpyrHYj7SM haPug8NO1/f/t9z2+jX8K/kDQQwOpkn3PZK3+r3+vqEWZO4YR4CYqsuHoNfdIqCX pL+9UrEOWIhKnNISmzFB1ja1t3+yZjdreNBaMH9sRimVjRHjOwOe33rK8ll4vHWL Njs2OHxe4JPEmdO7f2SBAz0wRF4vbjZHDSpdfff7eT6ql+cKMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXX6LOmqW261VtOdqgQiq2ZBsNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjU4ZDRiNTQtMzdhNS0z ZGIxLThhYTAtOGIyZDkxZDZlOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS5hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa1FpswX5Y/Qd/vCjgZn8E61npiv+bOhUkyMLSbYKM2wc+V0T4LdnlV ymRtZJ1FFV6ds2jk1sIXWGYgLKZM0QfvrQJ0tovTWuxS7EmeL0/GANdAfKfDf6N+ Hiv8rvtVXx9jPVHR7rzoviyYczK6k7wxMKepTxmThmiJ+BQYeQa52e38+SrY/nT8 JExxk27QnASddYRXy9QgZRnapwcXHhmv4pRGhL3CVj8cNu+jh6NMR9Lz+nWfhsmU E4zsKE0c2jw1i2OhuCwg6UZZlMhT6ro/fUKpnf95d6PUAsEz0UF5lRQDtsOr7505 H9QegV3RYVsGIpBnSUrgsysOQPnyTGY= -----END CERTIFICATE-----Generated at Fri Jul 25 19:26:09 2025 by rpki-client