$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa File: 844ba2fa-aad0-3721-98c2-12891a1907d3.roa (raw, json) Hash identifier: XRa5rM5zPReOyKplaIEx1ABkS6ErWNhhoPydwMfnDgw= Subject key identifier: C0:BA:11:82:DC:EB:D6:5F:C7:75:89:25:07:D3:D9:16:58:6C:A0:06 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D51C5A98C31E85EADC80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 209.53.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d5:1c:5a:98:c3:1e:85:ea:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=d8d5629e-c0c0-4e7e-9810-910763b2f1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:79:db:73:95:66:fa:7c:af:51:bb:22:75: 21:c6:3d:ef:7b:ef:8a:35:91:94:fc:02:28:d0:6a: 90:87:be:05:64:74:92:eb:62:fb:9d:00:80:e7:35: 72:7a:5c:32:7b:48:72:47:fa:ef:95:8a:1d:6b:9b: e9:f3:a8:40:0d:03:75:ff:6b:39:3d:53:07:f9:09: 38:e3:96:88:a1:de:0f:8c:a6:83:a7:01:21:be:a3: d1:f8:26:ff:df:3d:57:a7:fe:b2:e8:44:be:7b:86: 9e:1f:df:7e:54:93:23:25:3c:a1:66:6f:2e:e7:af: d9:41:c9:bf:11:8e:15:13:9f:40:22:bd:78:95:c2: c0:b2:e8:02:f2:f3:55:ce:3e:63:a1:59:13:5c:0e: 8b:ab:7c:2a:c5:e9:b6:06:b0:65:3b:c8:a5:8c:0d: 7e:ff:12:09:51:f8:8c:d1:b9:c3:f8:12:ca:df:1b: 92:f8:4c:61:03:88:53:bd:8a:b4:70:e9:56:6f:93: e3:73:0f:57:30:43:31:ff:5f:13:5c:9f:fe:7a:9c: d0:d8:d0:da:e8:b3:1b:26:13:6a:45:22:c1:42:ef: 1d:ae:d0:f6:4c:13:23:a0:d4:3e:a7:1a:7f:d2:71: df:2a:e4:b2:b1:68:03:4a:8d:19:dc:7a:75:e4:b3: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BA:11:82:DC:EB:D6:5F:C7:75:89:25:07:D3:D9:16:58:6C:A0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:fd:6e:f5:38:46:92:b4:07:9e:1b:30:db:2a:7f:ca:33:8a: 09:5e:6d:43:5f:55:a0:aa:27:96:c4:7b:26:d4:a0:7c:12:76: ee:87:b5:a2:74:3c:cf:b2:b7:43:d8:74:c0:8a:4d:c0:55:d6: 28:20:00:c4:97:83:d3:b4:e6:9f:d5:87:9f:0d:51:e0:23:b4: 3e:b8:b1:95:31:75:9a:9b:6e:9b:2e:a2:1d:12:32:16:d0:39: e6:b3:0a:f2:9f:29:9e:9d:6f:3b:dd:90:88:a7:33:28:a3:b4: 1c:5b:db:ee:1d:a5:9a:4a:0a:73:1d:20:37:c2:91:9f:e3:66: c9:a9:8d:98:e3:bb:a6:10:ff:f2:06:20:e3:be:8b:7e:d7:8e: 08:e7:b2:50:89:df:1e:96:10:c0:4c:8f:94:23:8f:d9:4f:f4: da:14:9b:ab:2a:55:99:82:21:7b:e1:e3:50:ad:94:3d:c2:91: cd:cd:c6:72:9f:23:e1:26:a8:80:1d:b9:2f:f7:dc:f1:a3:ec: d2:47:48:ce:de:09:37:49:1f:ac:ce:71:b3:f5:43:d6:cd:c9: 31:9e:5a:26:9e:40:ff:f4:6d:69:5d:7d:ac:6c:59:b0:06:94: 40:54:91:e2:09:e8:90:55:15:74:d9:ea:38:7f:60:82:ac:7d: b2:ba:54:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdUcWpjDHoXq3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDhkNTYyOWUtYzBjMC00ZTdlLTk4MTAtOTEwNzYzYjJmMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUB523OVZvp8r1G7InUhxj3ve++KNZGU/AIo 0GqQh74FZHSS62L7nQCA5zVyelwye0hyR/rvlYoda5vp86hADQN1/2s5PVMH+Qk4 45aIod4PjKaDpwEhvqPR+Cb/3z1Xp/6y6ES+e4aeH99+VJMjJTyhZm8u56/ZQcm/ EY4VE59AIr14lcLAsugC8vNVzj5joVkTXA6Lq3wqxem2BrBlO8iljA1+/xIJUfiM 0bnD+BLK3xuS+ExhA4hTvYq0cOlWb5Pjcw9XMEMx/18TXJ/+epzQ2NDa6LMbJhNq RSLBQu8drtD2TBMjoNQ+pxp/0nHfKuSysWgDSo0Z3Hp15LMWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC6EYLc69Zfx3WJJQfT2RZYbKAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODQ0YmEyZmEtYWFkMC0z NzIxLTk4YzItMTI4OTFhMTkwN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALb9bvU4RpK0B54bMNsqf8oziglebUNfVaCqJ5bEeybUoHwSdu6HtaJ0 PM+yt0PYdMCKTcBV1iggAMSXg9O05p/Vh58NUeAjtD64sZUxdZqbbpsuoh0SMhbQ OeazCvKfKZ6dbzvdkIinMyijtBxb2+4dpZpKCnMdIDfCkZ/jZsmpjZjju6YQ//IG IOO+i37XjgjnslCJ3x6WEMBMj5Qjj9lP9NoUm6sqVZmCIXvh41CtlD3Ckc3NxnKf I+EmqIAduS/33PGj7NJHSM7eCTdJH6zOcbP1Q9bNyTGeWiaeQP/0bWldfaxsWbAG lEBUkeIJ6JBVFXTZ6jh/YIKsfbK6VBE= -----END CERTIFICATE-----Generated at Fri Jul 25 19:23:03 2025 by rpki-client