$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa File: 87e99bf2-5548-3267-817c-a07659bc6f1d.roa (raw, json) Hash identifier: JxgCp6kVWLNiCTyG6bv7Xe9CdtHYj9lcwGfMRHDhIAA= Subject key identifier: AA:20:81:1E:E3:C8:77:F8:F0:44:25:93:26:A3:ED:95:AD:B9:1B:3C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A778082CCD660EED680F05380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 209.29.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:82:cc:d6:60:ee:d6:80:f0:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=ce7cee5e-09ce-4b50-bb84-0aa714430176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bd:71:dd:f9:a0:34:c0:c6:c5:05:3e:7c:f5: 76:46:6a:3c:ed:36:32:c3:09:d3:64:38:5d:e6:e9: da:a6:37:83:f8:68:21:8e:e3:fc:5d:ae:b4:81:2f: 7b:e9:36:77:8e:6b:a6:69:1d:e1:07:cb:91:fb:c8: 68:1e:62:a8:e9:30:8f:68:7c:31:31:d8:d0:e5:0a: cc:b2:0a:f8:ba:18:2a:00:0b:ab:d2:1d:7b:94:64: 5d:30:41:41:c7:95:ab:15:d8:69:f8:20:e4:92:b0: 0a:bd:12:32:31:6a:58:2d:9e:de:ff:7b:fb:06:c0: 69:61:8f:3c:37:af:6f:e3:fa:fd:83:2d:8c:db:ca: d2:88:ed:ce:86:e2:61:d2:93:88:5a:e9:6c:a9:39: bb:48:90:58:b8:3c:77:34:10:b3:f3:8a:f1:8f:8f: ca:bf:6d:3e:07:db:6c:ad:d0:ad:51:ea:23:bc:82: e6:68:a9:fd:be:22:15:4b:73:bf:f1:e9:08:26:d7: 1c:91:fa:3d:6b:af:25:27:a0:07:13:f4:4a:c2:c1: 7f:54:3d:03:a9:8b:02:0a:58:35:62:7f:ef:fa:2e: 5d:8d:b2:c2:63:ec:25:a2:4a:45:12:cb:54:d3:39: a2:4a:32:d1:7c:60:6f:d9:8a:0e:db:b4:15:c6:23: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:20:81:1E:E3:C8:77:F8:F0:44:25:93:26:A3:ED:95:AD:B9:1B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/87e99bf2-5548-3267-817c-a07659bc6f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d9:1a:08:0b:dc:c5:ce:f0:86:b7:bc:88:cb:c7:c0:fa:49: 03:79:be:b7:39:03:a0:d6:7a:30:5e:b1:79:51:7c:1f:7f:4e: 42:cf:cb:8d:e5:59:0a:64:5c:67:e3:7d:75:22:fd:be:48:9f: 6c:a7:c1:bc:01:cc:69:d4:ab:97:0c:fb:c5:77:0f:80:a1:2c: 38:fe:f9:dd:fe:d8:ff:c3:0e:97:40:20:84:58:14:14:b5:d4: 1f:f8:a2:98:df:c7:c4:3d:63:01:38:93:11:79:41:c8:6d:59: e8:0d:a4:88:1a:87:fc:5f:6e:54:7e:95:4a:95:46:38:01:9a: 16:53:a8:80:0c:8d:f7:7b:d0:90:6f:a3:22:44:aa:2e:f0:36: fe:ab:9f:13:e8:55:2e:41:dc:2f:9b:1c:c9:ea:62:21:b9:a1: 8c:35:ce:e9:38:5d:43:03:64:ba:82:bb:cf:2d:7d:a6:5b:42: 8b:77:85:9a:21:e2:b3:de:ca:2d:f6:a2:2a:6f:b5:9e:3a:21: c3:f8:f7:56:81:72:90:47:6a:ad:e3:dc:4f:9a:ff:ee:59:0c: 33:ff:55:90:cc:7d:62:1e:c4:1f:51:64:b9:7c:52:51:47:8a: 63:b5:59:ef:80:3a:e1:98:ec:86:74:8d:93:8e:2d:af:15:ec: d8:64:48:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gILM1mDu1oDwU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk Y2U3Y2VlNWUtMDljZS00YjUwLWJiODQtMGFhNzE0NDMwMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr1x3fmgNMDGxQU+fPV2Rmo87TYywwnTZDhd 5unapjeD+GghjuP8Xa60gS976TZ3jmumaR3hB8uR+8hoHmKo6TCPaHwxMdjQ5QrM sgr4uhgqAAur0h17lGRdMEFBx5WrFdhp+CDkkrAKvRIyMWpYLZ7e/3v7BsBpYY88 N69v4/r9gy2M28rSiO3OhuJh0pOIWulsqTm7SJBYuDx3NBCz84rxj4/Kv20+B9ts rdCtUeojvILmaKn9viIVS3O/8ekIJtcckfo9a68lJ6AHE/RKwsF/VD0DqYsCClg1 Yn/v+i5djbLCY+wlokpFEstU0zmiSjLRfGBv2YoO27QVxiM68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoggR7jyHf48EQlkyaj7ZWtuRs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODdlOTliZjItNTU0OC0z MjY3LTgxN2MtYTA3NjU5YmM2ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0R1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/ZGggL3MXO8Ia3vIjLx8D6SQN5vrc5A6DWejBesXlRfB9/TkLPy43l WQpkXGfjfXUi/b5In2ynwbwBzGnUq5cM+8V3D4ChLDj++d3+2P/DDpdAIIRYFBS1 1B/4opjfx8Q9YwE4kxF5QchtWegNpIgah/xfblR+lUqVRjgBmhZTqIAMjfd70JBv oyJEqi7wNv6rnxPoVS5B3C+bHMnqYiG5oYw1zuk4XUMDZLqCu88tfaZbQot3hZoh 4rPeyi32oipvtZ46IcP491aBcpBHaq3j3E+a/+5ZDDP/VZDMfWIexB9RZLl8UlFH imO1We+AOuGY7IZ0jZOOLa8V7NhkSOM= -----END CERTIFICATE-----Generated at Fri Jul 25 19:27:20 2025 by rpki-client