$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa File: 7e03c240-d40c-3273-b7bb-24a81d00abf6.roa (raw, json) Hash identifier: 52rsgMmeCdFhxJU8kNqA2ph0DADe0YOr1G2AVWn0cr8= Subject key identifier: 57:80:D7:EA:AA:90:72:B2:41:2D:DB:54:67:4E:46:F8:A3:2D:28:60 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D8D216B218A390A44360 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 209.53.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d8:d2:16:b2:18:a3:90:a4:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=f4c40726-805a-4d18-a686-5d43e1c0bb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:12:39:3e:3e:a5:d9:7d:8f:02:8b:d3:1c:a0: 40:dc:a9:65:3f:e5:b7:15:dd:a5:0f:de:1b:9c:a1: e9:c3:a2:97:57:71:0f:02:85:c1:f8:97:a3:66:20: 4b:92:c1:a6:17:bf:b1:6b:32:6a:5d:ec:e9:1f:7a: 35:32:dd:a7:42:f5:31:93:36:37:9d:96:88:af:c6: 6f:5c:26:09:62:80:03:05:40:da:a5:0f:ac:26:97: c0:c9:8c:43:40:59:be:4b:cc:04:4a:7f:53:bf:e9: b6:d3:22:27:d7:32:be:80:82:25:45:91:62:c6:ff: 5d:0d:cb:33:19:11:86:d2:0e:2b:a4:0a:3e:4f:ab: fa:10:de:f0:9d:8f:55:88:6e:1a:42:31:99:88:ec: 75:90:15:9e:e4:bd:76:75:07:aa:ef:32:6f:e6:41: 47:6d:e2:2a:55:4d:27:2e:b1:c9:e1:6c:cb:39:83: a0:71:ee:69:db:df:81:c0:a2:d3:05:d4:2a:69:f9: 33:73:80:67:d1:ec:45:9c:c4:63:db:39:32:4f:d6: 07:1f:19:50:ff:b3:89:b9:d2:bb:27:8d:7f:cf:da: a8:5c:8c:b5:9d:5d:da:e9:13:5c:2d:38:d6:a6:eb: df:26:f5:a5:ab:dd:a3:38:23:68:fc:cd:c4:e6:63: 38:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:80:D7:EA:AA:90:72:B2:41:2D:DB:54:67:4E:46:F8:A3:2D:28:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e03c240-d40c-3273-b7bb-24a81d00abf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1b:89:da:cd:f5:fe:b0:94:38:42:c0:77:c2:b4:3b:a2:b4: ef:11:b3:c6:0d:8d:01:d1:c6:a7:a6:5e:83:15:2d:a8:ef:82: 28:be:55:57:60:f6:74:e4:45:85:8b:d6:d9:7b:8e:56:12:62: cb:1a:49:0f:75:0f:7d:7d:22:28:ed:f7:24:be:78:bd:80:5c: b8:db:7c:d1:33:59:b3:9a:1e:37:4b:b2:8f:86:b2:f1:c2:e8: 32:48:23:75:e6:ab:ee:44:b9:cc:4c:f3:8b:b2:a3:c3:26:e8: db:69:34:8e:11:6b:6c:d3:5a:aa:e4:35:c1:54:b9:e2:a3:bb: 9e:ff:85:21:ef:a6:ce:c4:26:b3:06:4c:32:80:9d:c6:89:bf: 9e:3f:99:f7:d6:26:6d:8d:9f:6f:24:a3:97:0d:4e:6a:e9:c0: fd:9b:22:c5:9c:61:b5:4c:08:71:1b:f6:68:e2:33:41:58:ca: 3f:95:ba:60:ad:96:4b:26:06:ae:2e:68:2c:f1:bc:cf:3f:66: 16:62:54:ea:b0:28:6f:61:9b:f1:ae:fc:17:89:0d:7c:93:ca: db:cc:44:b1:37:8d:d3:2a:dd:98:b5:bf:e1:24:d4:7c:d1:f4: 5f:97:0c:95:37:7e:6a:15:f9:04:5f:1b:5b:5c:07:98:2c:e0: d8:82:75:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdjSFrIYo5CkQ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjRjNDA3MjYtODA1YS00ZDE4LWE2ODYtNWQ0M2UxYzBiYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBI5Pj6l2X2PAovTHKBA3KllP+W3Fd2lD94b nKHpw6KXV3EPAoXB+JejZiBLksGmF7+xazJqXezpH3o1Mt2nQvUxkzY3nZaIr8Zv XCYJYoADBUDapQ+sJpfAyYxDQFm+S8wESn9Tv+m20yIn1zK+gIIlRZFixv9dDcsz GRGG0g4rpAo+T6v6EN7wnY9ViG4aQjGZiOx1kBWe5L12dQeq7zJv5kFHbeIqVU0n LrHJ4WzLOYOgce5p29+BwKLTBdQqafkzc4Bn0exFnMRj2zkyT9YHHxlQ/7OJudK7 J41/z9qoXIy1nV3a6RNcLTjWpuvfJvWlq92jOCNo/M3E5mM4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeA1+qqkHKyQS3bVGdORvijLShgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2UwM2MyNDAtZDQwYy0z MjczLWI3YmItMjRhODFkMDBhYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8bidrN9f6wlDhCwHfCtDuitO8Rs8YNjQHRxqemXoMVLajvgii+VVdg 9nTkRYWL1tl7jlYSYssaSQ91D319Iijt9yS+eL2AXLjbfNEzWbOaHjdLso+GsvHC 6DJII3Xmq+5EucxM84uyo8Mm6NtpNI4Ra2zTWqrkNcFUueKju57/hSHvps7EJrMG TDKAncaJv54/mffWJm2Nn28ko5cNTmrpwP2bIsWcYbVMCHEb9mjiM0FYyj+VumCt lksmBq4uaCzxvM8/ZhZiVOqwKG9hm/Gu/BeJDXyTytvMRLE3jdMq3Zi1v+Ek1HzR 9F+XDJU3fmoV+QRfG1tcB5gs4NiCdTk= -----END CERTIFICATE-----Generated at Fri Jul 25 19:35:13 2025 by rpki-client