$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66fd05c3-2a7f-3e12-9ed9-5885f3241205.roa File: 66fd05c3-2a7f-3e12-9ed9-5885f3241205.roa (raw, json) Hash identifier: VjN5CGQO54uzfkpVv/YHE2V/SLuwjElJQz2Eo5Xlrw4= Subject key identifier: 9E:29:25:5A:52:D4:E2:F0:75:F9:5C:15:56:49:97:03:1C:12:2B:6A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7085EFE43CA0B5E15F523500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66fd05c3-2a7f-3e12-9ed9-5885f3241205.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 7861 IP address blocks: 209.91.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:ef:e4:3c:a0:b5:e1:5f:52:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=5a165f40-0233-491a-89d5-40a5ab8fc050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:c4:0e:42:17:2d:bf:f0:6d:c8:4d:22:4c: ea:ee:67:c3:ff:c3:ec:5c:d8:79:b7:00:0f:76:20: f8:38:b7:c1:0f:d4:42:19:61:a2:c8:b6:ae:17:45: 50:4b:7f:e8:ab:0f:44:a2:20:a3:81:b4:a6:7b:37: c1:8b:60:98:b7:a2:02:d9:69:d3:f9:0f:42:d1:cb: a5:c7:99:ac:9a:fa:6c:6a:41:5b:04:b5:a8:7f:c0: 85:7e:3d:24:83:ab:c0:87:03:90:8e:c2:2e:af:50: 45:3d:72:0d:74:1b:10:8d:76:fd:9e:d8:3e:33:cb: 33:f3:85:72:d1:b5:fc:28:c0:a8:9c:a0:f0:26:76: 8e:ed:8c:52:58:2b:b2:af:65:39:7f:9f:fe:6d:c5: c1:fc:1b:96:d9:b5:d7:e5:71:5f:d9:39:02:4d:f5: 1f:de:7b:0c:74:11:d7:b1:3a:7c:94:02:6a:93:e4: e0:d3:ce:22:d1:1e:2a:ea:fe:50:ae:b9:26:1d:9d: f1:11:19:8c:0d:11:fe:d9:ed:f6:37:bc:73:e8:fb: 1b:77:1b:53:02:7d:51:f1:7e:c1:20:eb:7f:2a:41: 11:65:41:ae:d9:9c:41:05:8b:80:6b:d0:35:e4:93: 99:1d:98:3e:e9:75:1f:12:8b:1b:05:34:1f:1a:40: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:29:25:5A:52:D4:E2:F0:75:F9:5C:15:56:49:97:03:1C:12:2B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66fd05c3-2a7f-3e12-9ed9-5885f3241205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:e7:cd:bf:62:32:1c:d1:a0:74:f9:04:e1:c3:6b:7d:89:9b: 79:76:95:18:0f:e7:a9:ac:12:4f:37:b4:8a:17:27:98:d2:08: ca:9c:a7:3e:f2:9d:0e:d1:d0:3e:54:1d:65:b3:61:da:9b:7a: ad:f1:ed:d3:45:3d:3d:e3:79:6a:e2:f9:c7:25:69:bf:a2:8c: f1:cd:f2:84:de:5b:1e:c6:1e:fd:77:53:f4:d5:96:0e:e9:e9: 17:ca:60:61:0c:43:b3:91:1b:6d:dd:a0:5a:02:9f:fd:6e:9c: f4:1f:0e:63:f2:29:62:e0:74:79:7a:27:7b:8a:bb:5c:26:cf: e7:e8:54:f3:04:ee:f6:f0:b1:a8:a4:87:db:79:cd:1f:74:54: 1c:d7:75:6d:f4:f1:a5:16:eb:99:34:9b:ed:cd:e0:09:5e:60: e9:a9:37:1c:b2:1b:17:14:89:3b:c0:c3:66:69:d8:e2:16:ae: a4:60:a0:86:91:c0:99:30:2b:27:7b:4f:05:f0:05:6f:f0:12: 0f:1c:ae:c1:11:bc:1e:26:8d:6c:f3:56:26:c8:51:f1:94:c3: e7:50:a3:f0:cb:90:92:e4:37:19:1d:77:d5:6e:69:83:db:fc: 3d:f2:c2:e5:f6:a2:a7:a0:45:21:36:8a:88:e3:c5:04:13:96: 5e:e8:29:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhe/kPKC14V9SNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk NWExNjVmNDAtMDIzMy00OTFhLTg5ZDUtNDBhNWFiOGZjMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldXEDkIXLb/wbchNIkzq7mfD/8PsXNh5twAP diD4OLfBD9RCGWGiyLauF0VQS3/oqw9EoiCjgbSmezfBi2CYt6IC2WnT+Q9C0cul x5msmvpsakFbBLWof8CFfj0kg6vAhwOQjsIur1BFPXINdBsQjXb9ntg+M8sz84Vy 0bX8KMConKDwJnaO7YxSWCuyr2U5f5/+bcXB/BuW2bXX5XFf2TkCTfUf3nsMdBHX sTp8lAJqk+Tg084i0R4q6v5QrrkmHZ3xERmMDRH+2e32N7xz6PsbdxtTAn1R8X7B IOt/KkERZUGu2ZxBBYuAa9A15JOZHZg+6XUfEosbBTQfGkCRFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4pJVpS1OLwdflcFVZJlwMcEitqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjZmZDA1YzMtMmE3Zi0z ZTEyLTllZDktNTg4NWYzMjQxMjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VtaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfnzb9iMhzRoHT5BOHDa32Jm3l2lRgP56msEk83tIoXJ5jSCMqcpz7y nQ7R0D5UHWWzYdqbeq3x7dNFPT3jeWri+cclab+ijPHN8oTeWx7GHv13U/TVlg7p 6RfKYGEMQ7ORG23doFoCn/1unPQfDmPyKWLgdHl6J3uKu1wmz+foVPME7vbwsaik h9t5zR90VBzXdW308aUW65k0m+3N4AleYOmpNxyyGxcUiTvAw2Zp2OIWrqRgoIaR wJkwKyd7TwXwBW/wEg8crsERvB4mjWzzVibIUfGUw+dQo/DLkJLkNxkdd9VuaYPb /D3ywuX2oqegRSE2iojjxQQTll7oKb4= -----END CERTIFICATE-----Generated at Sat Jul 26 19:45:11 2025 by rpki-client