$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa File: ae662cba-3801-3b72-94e1-576c6050fea2.roa (raw, json) Hash identifier: rt7vRxayp0K5RvzIrxAcwgoUgBr6BZxf4FWG6zx77FM= Subject key identifier: 71:C2:59:08:50:62:E7:CB:F3:1A:FF:E4:D3:DD:23:61:94:F7:18:66 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7D15F1C323E0F59EF7500D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 852 IP address blocks: 209.52.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f1:c3:23:e0:f5:9e:f7:50:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=d18d8486-42c4-419e-b27c-2030ed66de44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:c7:9c:82:5b:0e:dd:d4:48:00:05:d1:1d: df:f2:fc:da:f3:c2:56:18:94:8d:a2:20:50:bc:f4: 3d:00:94:69:57:92:1e:ab:33:d1:c3:10:3c:46:04: 06:71:e9:df:f9:17:cf:c8:31:a3:5e:00:9d:a8:dc: 36:93:e7:d7:3d:18:cb:c3:d2:f0:f5:af:17:12:ab: dc:1a:3e:67:81:a8:ae:6c:9b:ee:5a:8e:5b:a2:27: c3:50:fd:27:c8:99:70:46:15:85:20:c1:8e:e8:18: 28:f1:29:01:c3:94:6b:e2:7d:b3:11:21:30:8f:1a: 5f:cc:56:7f:80:e6:44:a4:e0:fd:3c:f0:06:aa:b9: 0d:d6:d6:43:6a:7a:d4:25:cd:47:d6:7b:71:ed:18: 37:26:5e:38:4b:87:c0:f8:31:8d:77:ab:98:65:b2: d5:33:ec:b7:ce:b0:9d:d1:47:2c:53:a8:88:78:91: 32:69:5d:7f:41:29:b3:cf:64:a2:1d:4b:86:c7:dc: fe:76:38:9b:c1:22:62:1c:2a:b8:30:83:43:a0:09: d2:2c:6a:cd:dd:b9:c0:df:48:2b:8d:77:fc:7c:3c: 8a:c0:fb:5a:25:a0:29:78:c4:ce:60:a3:29:9c:af: 28:5c:f0:06:10:db:11:62:01:e4:dd:0a:01:93:28: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C2:59:08:50:62:E7:CB:F3:1A:FF:E4:D3:DD:23:61:94:F7:18:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ae662cba-3801-3b72-94e1-576c6050fea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:39:45:33:63:4d:e7:e7:e8:4e:40:7b:63:87:92:90:90:e1: 32:32:b8:5d:8f:ef:d0:c5:3d:73:e5:43:a6:cb:85:54:b7:4c: b1:5e:0e:5d:80:a0:ae:0c:bf:bb:be:22:85:56:f1:87:31:81: 8e:1e:92:02:74:38:0c:50:78:e3:db:44:4c:a5:4d:85:92:16: f9:ab:51:f2:50:99:fb:b6:27:86:50:a3:52:0b:3d:7e:f8:89: ec:2c:9b:9a:ca:a2:1e:d1:7c:89:37:6f:19:71:27:15:28:f2: d1:57:20:07:50:61:08:b5:42:2f:63:1b:c1:b5:9d:a9:16:33: 14:eb:a2:c3:25:8d:28:8f:bf:fd:16:8d:08:e0:f6:72:5a:68: 88:f9:51:93:40:cb:b1:b1:e6:84:1c:05:5c:01:68:7e:a3:d2: 2c:28:00:e9:ac:44:80:23:59:10:76:d4:1c:9a:11:2f:be:dd: fc:7f:a9:50:f6:b0:8c:6a:96:f4:77:f8:5e:96:43:a8:5c:be: 62:43:80:d5:cd:ff:28:0b:75:42:93:e0:b1:51:d1:92:3f:3a: 3f:46:82:2e:0c:e6:3d:0a:75:c8:8e:a9:e7:bc:4d:70:d5:e6: ea:a6:57:f4:96:54:24:02:17:70:fc:d3:13:d9:39:ea:c0:5d: 81:a6:80:87 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp9FfHDI+D1nvdQDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZDE4ZDg0ODYtNDJjNC00MTllLWIyN2MtMjAzMGVkNjZkZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX7HnIJbDt3USAAF0R3f8vza88JWGJSNoiBQ vPQ9AJRpV5IeqzPRwxA8RgQGcenf+RfPyDGjXgCdqNw2k+fXPRjLw9Lw9a8XEqvc Gj5ngaiubJvuWo5boifDUP0nyJlwRhWFIMGO6Bgo8SkBw5Rr4n2zESEwjxpfzFZ/ gOZEpOD9PPAGqrkN1tZDanrUJc1H1ntx7Rg3Jl44S4fA+DGNd6uYZbLVM+y3zrCd 0UcsU6iIeJEyaV1/QSmzz2SiHUuGx9z+djibwSJiHCq4MINDoAnSLGrN3bnA30gr jXf8fDyKwPtaJaApeMTOYKMpnK8oXPAGENsRYgHk3QoBkyj0NQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHHCWQhQYufL8xr/5NPdI2GU9xhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWU2NjJjYmEtMzgwMS0z YjcyLTk0ZTEtNTc2YzYwNTBmZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0TQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPjlFM2NN5+foTkB7Y4eSkJDhMjK4XY/v0MU9c+VDpsuFVLdMsV4OXYCg rgy/u74ihVbxhzGBjh6SAnQ4DFB449tETKVNhZIW+atR8lCZ+7YnhlCjUgs9fviJ 7CybmsqiHtF8iTdvGXEnFSjy0VcgB1BhCLVCL2MbwbWdqRYzFOuiwyWNKI+//RaN COD2clpoiPlRk0DLsbHmhBwFXAFofqPSLCgA6axEgCNZEHbUHJoRL77d/H+pUPaw jGqW9Hf4XpZDqFy+YkOA1c3/KAt1QpPgsVHRkj86P0aCLgzmPQp1yI6p57xNcNXm 6qZX9JZUJAIXcPzTE9k56sBdgaaAhw== -----END CERTIFICATE-----Generated at Fri Jul 25 19:24:59 2025 by rpki-client