$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa File: c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa (raw, json) Hash identifier: t9npsJ3C+qh/zhfg7uV7pLEkBedSY9fmgVbfjxZ+tlk= Subject key identifier: 7A:23:F1:76:BE:F9:02:34:33:2F:5C:22:47:AA:77:62:D7:BF:9B:15 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55CA21F3500479D3DE9400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 19905 IP address blocks: 209.53.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:ca:21:f3:50:04:79:d3:de:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=ac8e031a-b42d-413d-b4da-e219089a8266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:19:0f:9e:a6:4a:05:60:4b:6a:36:63:14: d1:4a:90:e6:b4:84:ea:58:47:a6:e2:79:3e:47:fa: 01:ed:d4:e0:72:e8:2a:4d:c4:d8:c6:82:d7:fd:36: 6d:29:06:91:f3:72:45:50:45:97:b4:1d:e2:0f:bd: 8c:01:c7:29:74:ae:8c:85:5d:67:3d:dd:86:e7:82: 6b:d7:88:06:a5:ef:a3:7d:b7:1c:7a:49:b8:d7:78: 2b:84:07:61:36:37:63:78:e5:3c:8e:a6:6c:cf:64: e0:70:a7:7c:52:87:05:11:eb:61:34:cd:ce:6c:2c: 12:f4:8b:97:fe:19:d7:95:41:46:ad:1b:7b:74:b0: b8:f2:54:ab:59:3d:61:9b:a0:b2:2c:3c:4f:6f:30: 82:ed:17:6e:e7:51:d8:9a:5d:3a:c6:0d:22:dc:85: 7f:58:de:bc:4c:30:5c:d0:d3:ac:b6:c0:c3:6d:ba: ab:d1:c5:aa:e0:d3:d7:a3:71:b3:35:ed:e2:ad:8d: e8:7e:70:f6:77:44:32:1a:9a:75:77:1d:db:9a:0b: 5c:57:f9:1f:13:20:2d:6d:88:f0:1b:5f:00:8f:93: 0f:71:a9:3a:da:18:d7:f9:f0:a6:dd:d7:30:d4:9a: d4:19:c2:ac:eb:c6:c6:50:9b:65:35:1e:7a:b2:33: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:23:F1:76:BE:F9:02:34:33:2F:5C:22:47:AA:77:62:D7:BF:9B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7716c7f-2ec7-3b0d-acc1-8e1f1ecf7f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e5:d6:c3:7a:80:68:e5:e5:58:2f:b2:5a:80:6a:26:77:a5: 64:4f:65:2a:82:81:55:6d:5f:32:3b:de:52:87:2e:0b:53:c6: 93:ac:12:ed:2b:00:74:e2:5a:9f:a6:8c:20:b2:bf:c7:85:68: 85:bc:50:16:76:4b:c2:d8:5c:62:47:3a:26:66:8b:b6:ed:b5: 49:d6:68:ee:bd:51:40:7e:51:e6:48:40:86:02:48:97:64:3f: 08:a6:fd:78:a2:69:4a:ec:25:39:86:86:39:f0:49:0c:81:4f: 11:15:de:a2:7e:9d:ef:3a:98:f9:f9:ae:fd:c3:c1:5f:d4:bf: 39:d2:17:b5:9c:fb:ca:31:89:3a:58:44:29:ba:37:9d:57:c4: e4:9a:99:62:c3:a8:89:34:f7:b8:c3:01:78:5d:49:b0:8c:6e: 92:ed:c3:40:fe:64:63:05:a7:92:ed:32:50:9b:2e:43:d8:3e: b8:f6:71:f3:25:35:1c:f8:e1:77:5f:79:c3:6d:34:c0:3d:ff: 1d:af:f6:e8:1f:6c:fa:7f:31:fa:04:6e:fd:7a:48:0f:a7:09: b6:1a:a4:05:f1:a5:7e:1e:86:b8:50:80:41:85:ee:9b:b2:f3: 0f:c1:58:3c:ab:45:04:5c:d2:00:90:08:06:57:8b:f9:71:60: 42:c6:56:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcoh81AEedPelAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YWM4ZTAzMWEtYjQyZC00MTNkLWI0ZGEtZTIxOTA4OWE4MjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXIZD56mSgVgS2o2YxTRSpDmtITqWEem4nk+ R/oB7dTgcugqTcTYxoLX/TZtKQaR83JFUEWXtB3iD72MAccpdK6MhV1nPd2G54Jr 14gGpe+jfbccekm413grhAdhNjdjeOU8jqZsz2TgcKd8UocFEethNM3ObCwS9IuX /hnXlUFGrRt7dLC48lSrWT1hm6CyLDxPbzCC7Rdu51HYml06xg0i3IV/WN68TDBc 0NOstsDDbbqr0cWq4NPXo3GzNe3irY3ofnD2d0QyGpp1dx3bmgtcV/kfEyAtbYjw G18Aj5MPcak62hjX+fCm3dcw1JrUGcKs68bGUJtlNR56sjOEEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoj8Xa++QI0My9cIkeqd2LXv5sVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzc3MTZjN2YtMmVjNy0z YjBkLWFjYzEtOGUxZjFlY2Y3ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDl1sN6gGjl5VgvslqAaiZ3pWRPZSqCgVVtXzI73lKHLgtTxpOsEu0r AHTiWp+mjCCyv8eFaIW8UBZ2S8LYXGJHOiZmi7bttUnWaO69UUB+UeZIQIYCSJdk Pwim/XiiaUrsJTmGhjnwSQyBTxEV3qJ+ne86mPn5rv3DwV/UvznSF7Wc+8oxiTpY RCm6N51XxOSamWLDqIk097jDAXhdSbCMbpLtw0D+ZGMFp5LtMlCbLkPYPrj2cfMl NRz44XdfecNtNMA9/x2v9ugfbPp/MfoEbv16SA+nCbYapAXxpX4ehrhQgEGF7puy 8w/BWDyrRQRc0gCQCAZXi/lxYELGVkI= -----END CERTIFICATE-----Generated at Fri Jul 25 19:19:45 2025 by rpki-client