$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa File: a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa (raw, json) Hash identifier: Y/Ac70VfNcjy6BzcGDXELllToLxjwcmPm6+C5Y9/KII= Subject key identifier: 19:75:FD:66:7A:14:05:52:95:B3:4C:76:45:1D:68:DD:04:82:B7:CB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B33AD254D196A632454C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 209.171.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:33:ad:25:4d:19:6a:63:24:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=9c8b710e-6956-49f8-ae03-d2d744229b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:36:d2:09:e8:a7:ab:6e:38:c9:91:fd:56: c2:16:3f:8d:8e:61:21:53:96:93:95:82:1b:ea:04: 11:5e:36:a8:4f:a3:a2:73:40:c4:f3:e4:a8:fc:24: da:f1:00:51:a1:01:40:0a:15:b5:51:e4:6a:4b:0d: 7b:f1:9c:4d:c7:e4:e1:e3:2b:4e:7f:a7:3e:f2:05: 12:d5:69:62:2d:7b:e4:55:2b:ab:15:05:d5:d1:74: 4f:06:5f:14:40:3a:e4:e8:ef:d7:54:bf:91:a4:18: b6:a3:45:f6:56:93:7c:db:af:67:12:de:83:a5:65: 44:3d:ec:8e:91:fb:28:c8:bb:49:41:7a:25:85:46: 5c:17:4a:b1:5f:24:0c:cf:58:88:39:5a:5e:96:86: c6:9a:35:8e:0c:65:d9:16:29:ea:eb:e1:c8:cd:75: ea:fc:c0:c7:30:1e:64:5e:a1:28:db:1e:cc:ce:06: 82:05:16:27:34:52:c6:7b:52:66:ca:48:7a:ec:7e: b5:56:f4:be:44:5a:c9:c5:0b:d1:ee:91:e8:11:be: 50:a7:2d:bd:eb:40:4d:56:66:01:79:d4:57:74:3c: d7:bb:06:b6:1a:40:77:90:ca:92:90:55:37:0b:c9: 01:40:2f:3a:c4:a9:d5:73:c2:31:05:73:39:92:31: 07:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:75:FD:66:7A:14:05:52:95:B3:4C:76:45:1D:68:DD:04:82:B7:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:07:c7:2b:95:72:4c:38:b1:73:40:41:2f:04:ac:8c:06:e9: 47:53:fc:9a:8f:23:56:25:93:65:50:c6:9a:57:dd:ad:d5:87: 3f:b1:38:0d:77:74:ec:38:6d:8f:d9:eb:7b:6a:7f:f0:d9:6d: 62:ea:26:ce:8d:91:d8:59:56:34:d5:c3:ea:45:8a:80:1c:69: 91:3f:7b:bb:82:ee:50:38:6b:0c:28:8d:b3:f2:c9:42:f6:cf: e7:6f:54:3f:7e:ff:a7:6f:86:75:9e:d3:39:dc:0c:a4:6d:8f: 0d:e3:71:a3:6c:b2:ab:de:a6:45:9c:c3:b9:a1:ed:8b:3c:3b: c3:4d:c4:be:06:04:56:8e:bf:16:d5:e5:6c:a5:e7:93:33:3c: 37:ec:1b:0a:6f:d4:be:06:31:0f:8a:c9:03:91:c6:d1:ef:3b: 08:35:7c:10:72:eb:ca:70:8a:98:14:61:70:37:24:89:7f:e2: fc:eb:da:f7:e2:40:98:f1:6c:21:40:41:61:48:a5:d1:75:ee: f9:4f:b7:7b:35:fa:4b:67:73:29:c4:78:c9:84:8a:d9:47:58: 24:32:88:25:3d:5d:e4:c9:56:65:5d:d8:06:16:8a:1a:9f:88: 32:57:81:e5:3f:fd:3e:ac:4a:ed:b7:d4:68:d4:7a:a9:e2:11: 4a:db:e2:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzOtJU0ZamMkVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk OWM4YjcxMGUtNjk1Ni00OWY4LWFlMDMtZDJkNzQ0MjI5YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpE20gnop6tuOMmR/VbCFj+NjmEhU5aTlYIb 6gQRXjaoT6Oic0DE8+So/CTa8QBRoQFAChW1UeRqSw178ZxNx+Th4ytOf6c+8gUS 1WliLXvkVSurFQXV0XRPBl8UQDrk6O/XVL+RpBi2o0X2VpN8269nEt6DpWVEPeyO kfsoyLtJQXolhUZcF0qxXyQMz1iIOVpelobGmjWODGXZFinq6+HIzXXq/MDHMB5k XqEo2x7MzgaCBRYnNFLGe1Jmykh67H61VvS+RFrJxQvR7pHoEb5Qpy2960BNVmYB edRXdDzXuwa2GkB3kMqSkFU3C8kBQC86xKnVc8IxBXM5kjEHlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl1/WZ6FAVSlbNMdkUdaN0EgrfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTYxY2JkNGQtNmNlYS0z MmJkLTljNjctN2IxM2JmMmMxNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0asQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAHxyuVckw4sXNAQS8ErIwG6UdT/JqPI1Ylk2VQxppX3a3Vhz+xOA13 dOw4bY/Z63tqf/DZbWLqJs6NkdhZVjTVw+pFioAcaZE/e7uC7lA4awwojbPyyUL2 z+dvVD9+/6dvhnWe0zncDKRtjw3jcaNssqvepkWcw7mh7Ys8O8NNxL4GBFaOvxbV 5Wyl55MzPDfsGwpv1L4GMQ+KyQORxtHvOwg1fBBy68pwipgUYXA3JIl/4vzr2vfi QJjxbCFAQWFIpdF17vlPt3s1+ktncynEeMmEitlHWCQyiCU9XeTJVmVd2AYWihqf iDJXgeU//T6sSu231GjUeqniEUrb4mc= -----END CERTIFICATE-----Generated at Fri Jul 25 19:24:58 2025 by rpki-client