$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa File: aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa (raw, json) Hash identifier: Ar8TcdAq8xTeKxHnNJRS9xHvuq2/j+WNGLJPti8jh1U= Subject key identifier: F3:38:B0:E4:A7:6E:CE:49:53:EF:72:DD:4D:53:3F:70:37:FA:89:9E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7085EF70C4CC5C9E89739280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 7861 IP address blocks: 209.89.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:ef:70:c4:cc:5c:9e:89:73:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=4ba04b8e-6e4f-4ce8-96fa-091e3509b4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:77:49:f8:19:93:3d:54:69:2b:a9:30:7d: e3:3b:9e:ab:ec:1f:78:1c:3c:d0:45:8f:c2:20:08: f1:5b:f4:21:21:54:f1:8d:7a:93:05:05:4e:97:63: 27:91:dd:63:6c:c3:a7:71:c2:eb:92:e8:b4:1f:56: 97:61:0f:4f:60:9a:97:65:61:4d:ca:fe:06:03:e2: 30:0d:15:7f:42:24:1e:b9:0b:70:2b:3f:e3:27:e8: 69:dc:75:09:2e:05:f5:0a:db:24:f0:9c:7f:87:2d: 0d:2b:92:4b:37:91:89:3a:a6:b8:0e:ef:fb:f7:6d: 54:ac:c4:8a:ca:29:6b:00:61:ab:3a:8a:85:c1:51: 70:db:13:4a:2c:36:47:59:a7:1e:3c:fa:4b:15:23: 37:af:00:70:22:d2:8e:b7:72:ce:07:70:20:98:7d: 96:0b:ec:02:53:02:f8:7b:64:83:3f:c2:57:e8:8f: 48:d6:85:27:f2:f5:5b:0f:bb:5c:67:d8:8b:d8:fb: 16:3d:94:91:76:3e:2a:ad:fc:09:af:79:91:fc:6c: 9c:b3:ca:47:dc:30:2b:9e:55:ea:27:89:8d:b0:75: 47:99:fc:4c:ac:22:73:34:bf:65:7f:e4:d2:10:6a: f1:b4:d4:54:91:b2:f0:b9:34:00:56:70:21:da:06: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:38:B0:E4:A7:6E:CE:49:53:EF:72:DD:4D:53:3F:70:37:FA:89:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aedbc364-26a5-320a-9ba4-fccfe653ab0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:01:4e:dd:46:bd:63:cd:81:d1:4a:06:84:0e:f3:21:2e:00: 0b:d5:6f:42:64:93:5a:74:32:4e:2c:eb:41:e3:36:dc:a2:fa: 66:d0:4a:c2:06:a4:0a:f7:5a:cb:7a:34:df:35:43:76:e9:9d: a5:a0:03:96:7d:c6:72:d7:9e:a4:50:1e:2a:5f:3e:ed:7f:bb: f5:a0:e1:47:5d:33:c6:d4:a7:27:f1:f8:ae:77:51:cd:e4:34: 41:ff:ae:a3:1a:06:b7:02:bd:59:ec:b3:e6:b1:fd:86:ea:91: 99:ac:a8:d6:ad:31:74:0e:73:c4:ed:67:6e:b8:78:e4:ce:ef: 80:ce:c3:93:42:6a:99:28:cf:9e:32:19:98:31:e1:9f:2a:cf: b4:09:b5:35:e8:10:c6:95:de:70:07:c5:56:96:34:32:55:77: ee:a2:3b:58:9f:7e:5a:4e:8c:c3:8b:36:02:82:c9:a4:01:a5: d3:c3:d9:d4:2e:9f:cf:57:c5:07:16:66:e0:94:26:25:48:2e: 79:64:a1:dc:d8:52:cb:76:75:55:6e:3b:f5:cc:51:f2:6d:06: 66:6a:1a:5f:7c:b5:19:43:ea:a3:9f:6d:b1:cc:b6:86:77:17: 5d:c8:71:b4:8e:b8:e5:b1:d4:6e:41:de:bb:b1:3f:57:1a:1a: 54:5f:70:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhe9wxMxcnolzkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk NGJhMDRiOGUtNmU0Zi00Y2U4LTk2ZmEtMDkxZTM1MDliNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlph3SfgZkz1UaSupMH3jO56r7B94HDzQRY/C IAjxW/QhIVTxjXqTBQVOl2Mnkd1jbMOnccLrkui0H1aXYQ9PYJqXZWFNyv4GA+Iw DRV/QiQeuQtwKz/jJ+hp3HUJLgX1Ctsk8Jx/hy0NK5JLN5GJOqa4Du/7921UrMSK yilrAGGrOoqFwVFw2xNKLDZHWacePPpLFSM3rwBwItKOt3LOB3AgmH2WC+wCUwL4 e2SDP8JX6I9I1oUn8vVbD7tcZ9iL2PsWPZSRdj4qrfwJr3mR/Gycs8pH3DArnlXq J4mNsHVHmfxMrCJzNL9lf+TSEGrxtNRUkbLwuTQAVnAh2gbXNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM4sOSnbs5JU+9y3U1TP3A3+omeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWVkYmMzNjQtMjZhNS0z MjBhLTliYTQtZmNjZmU2NTNhYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VlOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsBTt1GvWPNgdFKBoQO8yEuAAvVb0Jkk1p0Mk4s60HjNtyi+mbQSsIG pAr3Wst6NN81Q3bpnaWgA5Z9xnLXnqRQHipfPu1/u/Wg4UddM8bUpyfx+K53Uc3k NEH/rqMaBrcCvVnss+ax/YbqkZmsqNatMXQOc8TtZ264eOTO74DOw5NCapkoz54y GZgx4Z8qz7QJtTXoEMaV3nAHxVaWNDJVd+6iO1ifflpOjMOLNgKCyaQBpdPD2dQu n89XxQcWZuCUJiVILnlkodzYUst2dVVuO/XMUfJtBmZqGl98tRlD6qOfbbHMtoZ3 F13IcbSOuOWx1G5B3ruxP1caGlRfcKs= -----END CERTIFICATE-----Generated at Fri Jul 25 19:30:02 2025 by rpki-client