$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8d88adc-2ef2-37c9-84f6-0434b5516e76.roa File: c8d88adc-2ef2-37c9-84f6-0434b5516e76.roa (raw, json) Hash identifier: sjhv3NIRHiYn9fuuu0WcisacMr/1mXc7NW0LRlq5Crg= Subject key identifier: 61:24:CB:D5:71:3E:4B:F3:22:2B:0C:23:E3:60:FF:CB:72:BB:50:B5 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A74B5D2FFD93CA195A3F76400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8d88adc-2ef2-37c9-84f6-0434b5516e76.roa Signing time: Wed 09 Jul 2025 01:00:49 +0000 ROA not before: Wed 09 Jul 2025 01:00:49 +0000 ROA not after: Tue 07 Oct 2025 01:00:49 +0000 asID: 852 IP address blocks: 205.206.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:d2:ff:d9:3c:a1:95:a3:f7:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 9 01:00:49 2025 GMT Not After : Oct 7 01:00:49 2025 GMT Subject: CN=5c33e763-4955-4986-9058-e81bd3824f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:25:2e:57:fe:1a:e5:29:55:18:cb:99:30:66: d4:1c:3d:cf:34:b1:16:9a:f6:25:95:ba:77:9f:6c: 15:0a:a0:29:8d:11:a4:03:93:a0:bf:77:39:f5:05: 88:f7:5d:f3:41:64:a1:f7:c7:8e:a0:f1:7d:ec:35: 5a:f4:82:4a:87:a4:63:b2:54:c7:51:98:97:b9:cb: 8a:c1:46:70:a9:42:82:8c:31:33:59:c8:e7:4b:f8: fd:61:fa:13:31:45:7c:bf:78:ff:4b:58:70:aa:b5: d5:7d:47:34:09:21:dd:04:8e:24:88:78:0a:58:d7: 44:7b:83:d4:db:a9:c2:37:0a:94:cb:ce:b6:73:df: d1:0b:bc:4c:35:37:df:8f:bc:01:37:cc:c6:9a:9c: 61:8f:a5:55:12:2b:a8:b3:d2:e8:9c:f5:82:6e:10: a1:0f:0d:2f:c5:4c:69:54:fb:48:27:d1:58:0e:b4: 74:dc:36:6f:31:f8:91:a4:7c:c9:21:0a:c9:50:31: 4f:1f:05:b6:10:5f:ea:73:84:5e:68:7b:35:4c:f5: 83:ad:72:12:3f:d0:ca:73:20:1a:40:60:46:8f:4b: e0:a1:5b:76:d8:ee:7f:04:ac:79:6f:86:9b:73:ac: 23:43:24:6a:01:ae:78:48:9e:4a:01:f4:3b:25:c1: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:24:CB:D5:71:3E:4B:F3:22:2B:0C:23:E3:60:FF:CB:72:BB:50:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c8d88adc-2ef2-37c9-84f6-0434b5516e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 205.206.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:51:dc:47:54:84:88:e6:64:6c:93:68:55:c3:19:03:6f:cc: c1:c2:5e:6d:b7:d1:41:82:ad:23:56:a1:06:a9:e6:b3:9f:f5: 05:73:8f:a6:72:3c:d0:15:91:d9:48:e8:58:df:55:ee:9a:8b: 5f:08:9c:95:2a:47:2c:a9:83:1d:6b:55:07:a5:e0:ef:a3:1d: 6b:45:d3:c8:6c:a5:0b:c1:17:55:8f:82:6d:4b:30:b0:6b:da: de:c8:a2:62:5f:35:19:64:9d:a6:bf:20:64:3b:a3:84:26:66: 52:c6:7b:91:d4:71:92:2c:f8:e9:df:ab:39:66:3f:74:55:65: cd:11:f3:98:44:e6:f4:e6:bb:ce:77:fc:70:9c:5f:fc:e7:2f: c4:20:6a:52:67:62:b1:0d:01:f6:52:dc:4f:af:2a:03:1e:5e: 62:84:05:90:b4:26:16:00:9c:d0:d0:c3:8f:5a:51:0b:81:72: 49:28:4d:05:54:45:e3:ff:25:24:8d:af:16:78:92:58:a3:bc: e2:27:3f:3c:14:19:94:ac:a9:7b:28:f1:b3:63:5b:05:17:48: 0c:3d:8a:a5:b3:23:70:a4:52:b9:1b:1a:e3:d7:f4:14:0c:52: 69:fc:61:89:11:ed:36:56:90:e6:a4:3e:3f:bf:e3:e0:0d:77: 15:22:fa:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdL/2TyhlaP3ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk NWMzM2U3NjMtNDk1NS00OTg2LTkwNTgtZTgxYmQzODI0ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iUuV/4a5SlVGMuZMGbUHD3PNLEWmvYllbp3 n2wVCqApjRGkA5Ogv3c59QWI913zQWSh98eOoPF97DVa9IJKh6RjslTHUZiXucuK wUZwqUKCjDEzWcjnS/j9YfoTMUV8v3j/S1hwqrXVfUc0CSHdBI4kiHgKWNdEe4PU 26nCNwqUy862c9/RC7xMNTffj7wBN8zGmpxhj6VVEiuos9LonPWCbhChDw0vxUxp VPtIJ9FYDrR03DZvMfiRpHzJIQrJUDFPHwW2EF/qc4ReaHs1TPWDrXISP9DKcyAa QGBGj0vgoVt22O5/BKx5b4abc6wjQyRqAa54SJ5KAfQ7JcGkQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEky9VxPkvzIisMI+Ng/8tyu1C1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzhkODhhZGMtMmVmMi0z N2M5LTg0ZjYtMDQzNGI1NTE2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc5BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9R3EdUhIjmZGyTaFXDGQNvzMHCXm230UGCrSNWoQap5rOf9QVzj6Zy PNAVkdlI6FjfVe6ai18InJUqRyypgx1rVQel4O+jHWtF08hspQvBF1WPgm1LMLBr 2t7IomJfNRlknaa/IGQ7o4QmZlLGe5HUcZIs+OnfqzlmP3RVZc0R85hE5vTmu853 /HCcX/znL8QgalJnYrENAfZS3E+vKgMeXmKEBZC0JhYAnNDQw49aUQuBckkoTQVU ReP/JSSNrxZ4klijvOInPzwUGZSsqXso8bNjWwUXSAw9iqWzI3CkUrkbGuPX9BQM Umn8YYkR7TZWkOakPj+/4+ANdxUi+uA= -----END CERTIFICATE-----Generated at Fri Jul 25 19:21:45 2025 by rpki-client