$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa File: c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa (raw, json) Hash identifier: xXC87a2MKspte9mac/VVn3vWzUXX6dVLDFQuKkP6z6I= Subject key identifier: DC:40:14:95:7E:1F:CA:5F:B8:E3:28:98:D3:6B:9F:04:44:DC:B5:3D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7D15F245BFC408DBCC2290E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 852 IP address blocks: 209.29.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f2:45:bf:c4:08:db:cc:22:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=186a7539-f5a4-4299-89aa-f6dbfa65e7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:0c:1c:97:71:f4:f3:19:fc:ee:19:12:c0: 8f:96:5d:0b:fd:33:a0:59:55:3f:56:3b:0a:aa:5f: 1d:e1:37:5f:81:38:ec:bf:1f:5a:70:a2:d0:2f:44: 49:85:7d:15:24:68:16:2b:7a:8b:f0:4f:f6:05:02: 6c:b9:91:4a:f2:58:f4:e0:b5:1b:4d:53:26:f2:29: b0:78:e5:61:d4:23:6a:29:48:cd:13:5e:5e:be:d3: 17:1e:48:d9:b1:81:79:aa:be:ef:cf:2c:66:e1:85: 51:be:b2:fa:c2:cf:03:fa:4f:bd:23:32:33:06:6a: b0:02:ea:e9:0b:ac:b7:5c:0e:de:5a:2f:f5:a7:b5: db:87:fb:29:26:eb:01:fa:3c:ac:c1:61:9f:04:37: 24:58:a7:f3:fe:ae:ed:1f:4c:0a:91:5e:84:91:5c: 18:74:85:1d:82:8e:32:eb:8c:a5:bc:b6:5f:84:c3: 6c:7e:43:aa:4a:ea:b1:64:3a:66:91:3c:5a:92:37: 4b:11:ca:70:28:bd:ba:d6:c9:88:7d:1e:82:bb:57: e3:d4:81:49:d5:86:12:ec:d6:64:68:0f:45:8a:0f: 9d:b8:ea:ae:50:68:1a:ce:e8:68:2e:c2:96:85:28: fb:79:7b:fc:09:e2:9a:5f:c0:c3:08:b7:3a:e2:08: b4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:40:14:95:7E:1F:CA:5F:B8:E3:28:98:D3:6B:9F:04:44:DC:B5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a4:2c:e4:fd:b3:bb:de:87:b3:7a:45:7c:51:52:2a:fe:73: 6e:12:65:0c:81:88:f9:4b:0f:21:20:28:c1:04:b5:aa:77:03: 5c:56:c9:6a:27:a4:3b:27:10:00:54:b0:31:8c:fe:5d:df:3c: 61:3c:9d:3b:dc:f7:38:42:48:f1:7d:13:47:e0:98:3e:e1:c6: 63:6d:14:00:b5:4d:47:fd:5a:7b:60:46:a3:86:ed:d6:35:b5: 25:14:f2:15:e7:1d:fa:5d:79:47:30:ba:1d:01:8e:a2:c8:a2: 77:d2:45:9f:ec:17:ba:ee:12:11:d6:67:34:80:47:43:2d:ff: 3e:65:fb:66:75:59:56:3d:43:81:dd:d1:ee:44:cd:bc:af:44: f8:d3:e2:43:87:d2:86:80:f7:de:98:1e:f7:18:f8:5a:f0:78: f3:00:09:a7:40:b0:7b:00:c9:0f:ee:ba:d3:c1:5a:5f:88:88: c7:bb:c0:5e:a1:5f:f5:81:83:d3:fa:a8:98:72:d9:36:f3:eb: 22:ce:be:a3:4e:f4:0a:94:cd:da:91:b6:60:a2:41:f9:85:00: 5d:03:99:57:e7:fb:f9:a5:1a:14:8d:ed:56:8e:c9:39:24:b2: f2:57:02:36:48:f2:a8:0b:5b:15:ca:2a:6c:48:1c:eb:89:d5: 43:c6:b8:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfJFv8QI28wikOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MTg2YTc1MzktZjVhNC00Mjk5LTg5YWEtZjZkYmZhNjVlN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0MMHJdx9PMZ/O4ZEsCPll0L/TOgWVU/VjsK ql8d4TdfgTjsvx9acKLQL0RJhX0VJGgWK3qL8E/2BQJsuZFK8lj04LUbTVMm8imw eOVh1CNqKUjNE15evtMXHkjZsYF5qr7vzyxm4YVRvrL6ws8D+k+9IzIzBmqwAurp C6y3XA7eWi/1p7Xbh/spJusB+jyswWGfBDckWKfz/q7tH0wKkV6EkVwYdIUdgo4y 64ylvLZfhMNsfkOqSuqxZDpmkTxakjdLEcpwKL261smIfR6Cu1fj1IFJ1YYS7NZk aA9Fig+duOquUGgazuhoLsKWhSj7eXv8CeKaX8DDCLc64gi0XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxAFJV+H8pfuOMomNNrnwRE3LU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzdmNmJiZDctNzBkYi0z OGI4LTljZWEtOWEzMzFlMzA3ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6kLOT9s7veh7N6RXxRUir+c24SZQyBiPlLDyEgKMEEtap3A1xWyWon pDsnEABUsDGM/l3fPGE8nTvc9zhCSPF9E0fgmD7hxmNtFAC1TUf9WntgRqOG7dY1 tSUU8hXnHfpdeUcwuh0BjqLIonfSRZ/sF7ruEhHWZzSAR0Mt/z5l+2Z1WVY9Q4Hd 0e5EzbyvRPjT4kOH0oaA996YHvcY+FrwePMACadAsHsAyQ/uutPBWl+IiMe7wF6h X/WBg9P6qJhy2Tbz6yLOvqNO9AqUzdqRtmCiQfmFAF0DmVfn+/mlGhSN7VaOyTkk svJXAjZI8qgLWxXKKmxIHOuJ1UPGuEc= -----END CERTIFICATE-----Generated at Fri Jul 25 19:19:22 2025 by rpki-client