$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa File: 825b10e9-fa31-33b9-a80e-e58c85226acf.roa (raw, json) Hash identifier: qrNBC00WUtq31iR/CiMVdEXVdVDGu0ZA935O7k+uApA= Subject key identifier: F1:60:50:66:8B:FD:66:4B:ED:27:65:37:C1:55:26:EC:31:1A:59:47 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7780870D5901132A259AAA00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 209.29.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:87:0d:59:01:13:2a:25:9a:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=799580fe-2f25-463c-99c1-5980bd1baf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6c:dd:d9:a2:08:69:a2:f4:9f:f9:32:48:15: 88:34:b6:7c:8b:31:51:a3:99:15:82:f0:7c:c7:9b: 1b:eb:f3:09:73:f8:3c:8c:67:e0:4b:54:2a:f0:02: 78:62:fc:ac:5c:29:2b:e0:97:be:5f:da:eb:17:62: 3f:47:c3:d8:76:0d:27:a3:81:69:de:3a:c7:c1:9e: cb:c7:e5:30:a0:4b:70:54:34:17:5a:cc:8d:d3:a2: 2c:4f:77:ed:d3:6b:e7:e0:c7:30:fa:b3:13:66:c3: 1e:02:af:b4:4d:45:35:e7:17:6e:a2:e0:9e:d5:6e: 05:ca:84:5d:8d:a5:77:43:40:2f:19:ec:98:f7:83: 11:dc:56:00:9c:03:d5:97:1d:91:b4:62:2a:a8:4b: 23:a5:a3:d9:14:5d:2c:ab:b9:ad:83:e4:08:9c:a5: d3:84:a4:65:63:3b:78:bb:43:d4:60:3f:5f:3a:da: 11:6f:39:f2:11:b3:c5:eb:bc:42:a9:59:c0:74:b9: a6:0a:ef:fe:1a:d9:20:18:1b:c2:8e:39:ef:03:a2: 90:bc:21:b7:c5:79:91:14:a3:d3:25:ba:72:a2:77: c9:b6:a4:f6:93:33:17:28:c5:2a:3f:0b:c9:e4:a2: b5:38:a1:64:e1:63:ab:fa:0f:83:d4:b4:84:d8:92: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:60:50:66:8B:FD:66:4B:ED:27:65:37:C1:55:26:EC:31:1A:59:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/825b10e9-fa31-33b9-a80e-e58c85226acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:34:03:4e:74:d2:da:b0:f0:a6:52:c5:8a:0a:bb:3f:40:68: f0:cf:40:2b:08:ee:f1:78:01:03:e1:e1:37:7a:43:3b:67:71: 12:ff:f5:be:e0:50:07:10:b9:a8:38:5d:92:f3:6f:16:5a:2a: d8:ae:92:27:79:2c:87:78:11:41:98:8f:f9:92:95:1c:61:1a: 44:d2:59:57:cb:b3:be:02:3d:8e:4f:73:e1:7b:27:c7:2a:67: e0:21:8e:19:07:53:98:da:91:00:93:36:68:6d:2b:f9:4d:ac: 6e:8e:ce:7a:99:60:53:4b:4c:ac:7d:a0:5c:7d:06:90:4a:58: 05:a4:f7:7a:67:41:40:df:5c:9d:1f:a1:d2:ff:ae:7a:02:3d: 82:4c:dd:a1:8b:64:7a:59:12:bd:52:1c:5f:50:f3:97:9c:18: 5e:40:97:19:a8:34:e0:5f:d5:38:e5:e7:1e:e4:32:67:8d:28: 8b:55:36:c3:8f:18:ea:d4:1d:6f:cb:6c:83:11:18:80:09:e1: 65:97:b7:c9:f8:df:38:ae:04:aa:58:ec:97:f7:d3:a2:01:7f: 59:13:be:aa:1c:b9:72:2e:ae:d5:d6:a5:51:2e:3b:16:d9:7f: 84:34:6c:20:c4:e0:f0:14:1b:f0:63:6d:b9:0f:8d:f0:b4:90: fb:c6:90:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIcNWQETKiWaqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk Nzk5NTgwZmUtMmYyNS00NjNjLTk5YzEtNTk4MGJkMWJhZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmzd2aIIaaL0n/kySBWINLZ8izFRo5kVgvB8 x5sb6/MJc/g8jGfgS1Qq8AJ4YvysXCkr4Je+X9rrF2I/R8PYdg0no4Fp3jrHwZ7L x+UwoEtwVDQXWsyN06IsT3ft02vn4Mcw+rMTZsMeAq+0TUU15xduouCe1W4FyoRd jaV3Q0AvGeyY94MR3FYAnAPVlx2RtGIqqEsjpaPZFF0sq7mtg+QInKXThKRlYzt4 u0PUYD9fOtoRbznyEbPF67xCqVnAdLmmCu/+GtkgGBvCjjnvA6KQvCG3xXmRFKPT JbpyonfJtqT2kzMXKMUqPwvJ5KK1OKFk4WOr+g+D1LSE2JLLAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFgUGaL/WZL7SdlN8FVJuwxGllHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODI1YjEwZTktZmEzMS0z M2I5LWE4MGUtZTU4Yzg1MjI2YWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0R18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw0A0500tqw8KZSxYoKuz9AaPDPQCsI7vF4AQPh4Td6QztncRL/9b7g UAcQuag4XZLzbxZaKtiukid5LId4EUGYj/mSlRxhGkTSWVfLs74CPY5Pc+F7J8cq Z+AhjhkHU5jakQCTNmhtK/lNrG6OznqZYFNLTKx9oFx9BpBKWAWk93pnQUDfXJ0f odL/rnoCPYJM3aGLZHpZEr1SHF9Q85ecGF5AlxmoNOBf1Tjl5x7kMmeNKItVNsOP GOrUHW/LbIMRGIAJ4WWXt8n43ziuBKpY7Jf306IBf1kTvqocuXIurtXWpVEuOxbZ f4Q0bCDE4PAUG/BjbbkPjfC0kPvGkCo= -----END CERTIFICATE-----Generated at Fri Jul 25 19:23:02 2025 by rpki-client