$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d52507c-514a-3543-a962-8a632682ac24.roa File: 7d52507c-514a-3543-a962-8a632682ac24.roa (raw, json) Hash identifier: 6hqcuO3sq6nsxKhormUQwjRVJ+vZn3kyOta7N7Mn/ec= Subject key identifier: 69:09:B1:C6:28:36:3F:A3:99:3F:0E:98:D6:2D:C8:8D:36:84:2A:17 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D16C8AF93BAAA7572380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d52507c-514a-3543-a962-8a632682ac24.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 209.29.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d1:6c:8a:f9:3b:aa:a7:57:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=4ef2a574-8398-430e-b60e-d0a7cdd75150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:cf:50:cb:bc:e1:d7:dc:25:dd:b0:7f:cb: 8d:04:7b:c4:5a:3d:fd:7e:78:04:6c:82:ab:4c:f6: 5b:61:a3:ba:40:f3:74:14:46:b8:ad:14:31:3d:b2: d3:2f:2e:7d:11:b6:4b:ae:13:70:f0:12:b9:3c:a9: ee:4a:9f:5b:bb:c0:13:8f:26:79:b9:e0:0f:5d:c9: 2e:b2:31:70:69:a0:8e:b4:ad:48:81:7c:0a:3a:17: f8:20:91:59:4a:00:a0:6e:cd:5e:63:38:15:2c:65: 5b:35:d1:12:7d:9a:01:87:0e:81:76:9e:74:14:d9: 3f:b4:c7:7f:0a:cf:e4:a5:cc:cc:c5:ca:89:d2:cf: f0:36:1a:4f:d0:35:88:ba:5d:97:0a:20:41:08:fc: db:90:9a:38:b2:f1:fc:27:69:95:1f:84:f3:9c:3a: c6:08:90:e1:fb:90:fc:4d:57:a6:d9:97:02:80:9d: e2:ee:b7:34:32:d8:77:96:fb:2c:03:c7:64:5a:16: b7:8d:f0:ae:ce:7a:91:e0:d8:63:a5:57:d2:36:67: d4:38:be:87:7f:6b:08:6f:2d:a8:a6:d4:1f:82:10: 03:f4:6b:1b:c2:b6:78:eb:58:bb:10:f6:37:46:79: 0e:f9:c2:a2:b2:cf:fe:79:7b:9b:f6:e2:a0:f6:cc: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:B1:C6:28:36:3F:A3:99:3F:0E:98:D6:2D:C8:8D:36:84:2A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7d52507c-514a-3543-a962-8a632682ac24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:81:3e:5f:00:db:f2:ca:15:1c:8d:f1:d8:14:bb:e4:17:2b: e7:b6:a0:bf:83:ab:aa:0f:8c:70:8d:9b:78:ce:97:86:dc:0c: 8d:85:0a:7b:09:ed:7d:27:b2:1a:8a:16:ea:1a:2e:1f:f4:bc: 11:71:62:ec:b1:8d:a0:a7:86:29:47:ea:ee:c0:c4:a6:c9:6c: 8e:b2:9f:4d:13:c5:7e:6e:da:a2:a7:6d:b3:0c:ee:aa:01:03: 34:d7:8a:7a:76:6e:d9:10:6b:00:63:bc:2a:57:25:91:d5:93: c4:ac:fa:bc:50:c1:1a:9b:f6:13:3f:b2:21:93:ba:80:ca:39: 26:6d:ea:3f:91:ac:cf:8e:3e:a0:34:f4:66:66:13:d1:f8:0c: a1:5f:d0:cf:b0:37:ce:14:8b:91:64:0c:b6:81:9c:99:85:15: a2:0c:99:95:b6:3b:1a:cc:cc:a6:a2:5e:ad:b4:79:2b:b6:cc: 5c:47:78:d4:68:7a:7c:01:ca:d1:2b:b9:70:8f:dd:f7:98:77: 98:d6:56:ed:7f:ea:d6:6e:64:74:02:4f:6d:6a:41:c9:35:9c: b9:f1:b4:1c:6a:b4:75:56:cc:cb:47:cb:6d:a5:93:e8:0c:ba: 0c:f9:d8:51:00:f0:ca:a0:34:06:fb:05:1f:7c:34:58:20:77: ad:53:60:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdFsivk7qqdXI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk NGVmMmE1NzQtODM5OC00MzBlLWI2MGUtZDBhN2NkZDc1MTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg63PUMu84dfcJd2wf8uNBHvEWj39fngEbIKr TPZbYaO6QPN0FEa4rRQxPbLTLy59EbZLrhNw8BK5PKnuSp9bu8ATjyZ5ueAPXcku sjFwaaCOtK1IgXwKOhf4IJFZSgCgbs1eYzgVLGVbNdESfZoBhw6Bdp50FNk/tMd/ Cs/kpczMxcqJ0s/wNhpP0DWIul2XCiBBCPzbkJo4svH8J2mVH4TznDrGCJDh+5D8 TVem2ZcCgJ3i7rc0Mth3lvssA8dkWha3jfCuznqR4NhjpVfSNmfUOL6Hf2sIby2o ptQfghAD9GsbwrZ461i7EPY3RnkO+cKiss/+eXub9uKg9syHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkJscYoNj+jmT8OmNYtyI02hCoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2Q1MjUwN2MtNTE0YS0z NTQzLWE5NjItOGE2MzI2ODJhYzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCBPl8A2/LKFRyN8dgUu+QXK+e2oL+Dq6oPjHCNm3jOl4bcDI2FCnsJ 7X0nshqKFuoaLh/0vBFxYuyxjaCnhilH6u7AxKbJbI6yn00TxX5u2qKnbbMM7qoB AzTXinp2btkQawBjvCpXJZHVk8Ss+rxQwRqb9hM/siGTuoDKOSZt6j+RrM+OPqA0 9GZmE9H4DKFf0M+wN84Ui5FkDLaBnJmFFaIMmZW2OxrMzKaiXq20eSu2zFxHeNRo enwBytEruXCP3feYd5jWVu1/6tZuZHQCT21qQck1nLnxtBxqtHVWzMtHy22lk+gM ugz52FEA8MqgNAb7BR98NFggd61TYO8= -----END CERTIFICATE-----Generated at Fri Jul 25 19:38:01 2025 by rpki-client