$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6fbb6b5d-3be3-3154-a556-543df2e9ed2b.roa File: 6fbb6b5d-3be3-3154-a556-543df2e9ed2b.roa (raw, json) Hash identifier: 8FBKJNJXjoSGJ2sUbuQpkOaUGmxhB85fNqCIUWbtzas= Subject key identifier: 08:21:9B:65:AE:27:E3:F3:3A:1E:FF:02:71:24:0C:02:23:E8:63:57 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D3DA4F754B9F169B7F20 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6fbb6b5d-3be3-3154-a556-543df2e9ed2b.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 137.186.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d3:da:4f:75:4b:9f:16:9b:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=4a0a8e33-3411-4124-8c4c-16a14e9393e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3e:8a:40:48:ce:60:0e:5f:e6:83:14:30:0d: e6:b7:6d:53:9a:71:c0:17:a2:86:f7:bd:78:95:3f: f3:5b:ef:6b:cc:a0:77:3a:f7:5c:d1:73:60:bd:16: 98:17:45:0b:65:15:eb:aa:82:98:74:bd:be:48:7e: a1:7d:de:52:ad:2c:23:b1:82:01:8a:75:69:ab:2f: 43:b7:ca:a7:fa:f3:39:a9:98:06:7d:50:f3:ac:3c: 1a:dc:86:a6:b0:f2:40:de:33:bf:ca:15:b0:73:14: 3d:f7:5f:5c:b2:9c:a0:8b:2c:a0:af:44:fd:0f:4b: f1:32:6c:ef:f2:0e:d1:c6:db:32:cf:c1:7e:e6:c6: 47:2b:57:4b:11:d5:3a:f9:14:bd:64:a5:3e:4a:58: 4f:59:5b:1f:10:5e:e5:f2:19:6c:5e:17:b8:80:79: f7:45:8f:54:31:88:60:d2:f0:89:9b:ce:99:65:10: 08:b9:89:1a:fd:8a:5c:55:ea:18:f2:4e:95:51:ab: c4:59:9e:37:86:62:07:de:57:9a:78:9c:f9:1e:75: b2:3e:c4:c3:bc:be:be:7a:18:7e:bd:82:dc:e3:45: 63:a6:00:93:87:1b:e0:a2:46:11:07:da:83:f5:45: b5:b1:d2:ce:f9:44:11:80:af:21:8d:b8:26:f7:40: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:21:9B:65:AE:27:E3:F3:3A:1E:FF:02:71:24:0C:02:23:E8:63:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6fbb6b5d-3be3-3154-a556-543df2e9ed2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 137.186.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:98:c5:b6:89:60:39:d5:32:d8:81:15:2d:b4:a7:b0:ab:c7: 7d:f3:25:92:4b:97:8b:28:47:5c:9c:90:b2:9f:ee:24:1f:45: 02:f7:f9:05:91:fa:bf:45:72:46:1f:2f:e9:b8:e4:e4:eb:1f: 77:65:6c:62:9f:b2:79:e9:d8:01:1f:64:2d:1f:35:2a:99:9a: 48:4d:2d:96:95:af:8d:4a:99:03:25:40:85:04:10:62:aa:47: 6d:34:fb:70:2f:f1:e5:94:cd:3d:31:a0:c1:34:cd:6e:df:86: b5:93:87:dc:53:de:b2:7e:43:42:90:c4:b8:11:4e:3b:f1:ca: c3:3d:f8:84:41:17:60:76:62:04:7c:8a:c7:30:4d:f5:1d:e0: 08:ed:40:ed:7e:77:6e:c6:19:57:bc:5a:27:84:8b:87:c6:eb: 61:0e:f5:58:05:fb:5a:da:08:81:51:33:bc:74:35:b6:72:0e: b3:6b:93:7e:b8:33:8e:c5:f2:a5:01:6b:23:87:c3:f4:48:99: 18:8d:3a:1b:83:74:d1:6d:ea:75:27:87:4c:c0:b5:8a:7a:20: 53:2b:66:81:95:fe:9a:d8:e7:54:7b:2e:aa:68:5e:01:49:21: e4:91:71:bc:26:de:0f:50:16:a5:64:d6:98:08:84:ee:53:ab: 72:fd:22:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdPaT3VLnxabfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk NGEwYThlMzMtMzQxMS00MTI0LThjNGMtMTZhMTRlOTM5M2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz6KQEjOYA5f5oMUMA3mt21TmnHAF6KG9714 lT/zW+9rzKB3Ovdc0XNgvRaYF0ULZRXrqoKYdL2+SH6hfd5SrSwjsYIBinVpqy9D t8qn+vM5qZgGfVDzrDwa3IamsPJA3jO/yhWwcxQ9919cspygiyygr0T9D0vxMmzv 8g7Rxtsyz8F+5sZHK1dLEdU6+RS9ZKU+SlhPWVsfEF7l8hlsXhe4gHn3RY9UMYhg 0vCJm86ZZRAIuYka/YpcVeoY8k6VUavEWZ43hmIH3leaeJz5HnWyPsTDvL6+ehh+ vYLc40VjpgCThxvgokYRB9qD9UW1sdLO+UQRgK8hjbgm90AuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAghm2WuJ+PzOh7/AnEkDAIj6GNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmZiYjZiNWQtM2JlMy0z MTU0LWE1NTYtNTQzZGYyZTllZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiboVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKYxbaJYDnVMtiBFS20p7Crx33zJZJLl4soR1yckLKf7iQfRQL3+QWR +r9FckYfL+m45OTrH3dlbGKfsnnp2AEfZC0fNSqZmkhNLZaVr41KmQMlQIUEEGKq R200+3Av8eWUzT0xoME0zW7fhrWTh9xT3rJ+Q0KQxLgRTjvxysM9+IRBF2B2YgR8 iscwTfUd4AjtQO1+d27GGVe8WieEi4fG62EO9VgF+1raCIFRM7x0NbZyDrNrk364 M47F8qUBayOHw/RImRiNOhuDdNFt6nUnh0zAtYp6IFMrZoGV/prY51R7LqpoXgFJ IeSRcbwm3g9QFqVk1pgIhO5Tq3L9Ij4= -----END CERTIFICATE-----Generated at Fri Jul 25 19:22:10 2025 by rpki-client