$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa File: cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa (raw, json) Hash identifier: dA33a38XGaLhgG6FF+2LLXHgcDDutEiA7ECSJMK+SVk= Subject key identifier: 5B:E3:F9:6E:C8:A0:A2:C5:C8:AF:A0:7C:D5:24:9E:69:15:E0:EA:8B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55D16B4F8BE289FF73C480 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 14908 IP address blocks: 216.226.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d1:6b:4f:8b:e2:89:ff:73:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=cade4394-417d-45ef-9ee8-ccefb023fd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:e3:28:0c:da:14:f3:cd:ad:93:cf:e2:87: a9:d9:1c:c2:64:0b:e7:4a:fe:85:6a:eb:7d:f2:46: e0:c8:c7:54:6d:b7:f6:7f:67:de:2a:45:54:65:dd: b0:8f:51:e5:e7:17:9b:79:1b:50:d1:16:ba:fe:97: e8:66:05:de:3d:5e:29:55:d3:74:b1:bb:fd:35:ec: 23:88:79:3c:49:6b:99:7e:3b:42:bd:54:4a:11:14: dc:2d:43:36:0f:6f:8c:d8:03:ed:cd:e9:af:38:5d: d1:56:96:11:99:1d:dc:11:81:20:f2:b4:29:3e:97: 4a:e4:36:e0:9f:73:60:17:06:62:1a:70:62:93:99: e0:fc:43:cf:44:6b:6d:99:e1:d2:dc:ee:6e:82:c6: 3c:39:ee:c5:44:64:cc:b0:77:24:5a:07:1d:51:b8: 9d:a0:85:3c:f6:c9:58:a7:b7:82:39:4e:a6:80:96: 60:9d:0f:c7:d6:ec:4b:61:ae:0b:2b:b3:55:f6:b5: b8:3a:14:2e:13:0c:21:77:a9:e5:0b:35:85:37:17: 69:e0:bd:53:16:b1:7a:65:50:be:97:d5:f6:cb:93: a4:aa:cd:e3:28:8f:e1:28:46:3d:bc:1a:6e:45:90: cd:8a:80:9f:8c:a6:0d:33:35:3b:d6:11:91:aa:d1: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E3:F9:6E:C8:A0:A2:C5:C8:AF:A0:7C:D5:24:9E:69:15:E0:EA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd5c2b1f-7c39-39e7-8721-f99ae419a209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.226.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:12:1a:56:d3:0b:00:49:90:90:ea:7e:1f:87:2c:c7:e9:4b: 5d:27:d5:97:cc:5c:99:c0:28:60:06:91:78:c2:13:4c:c1:4c: e1:17:92:9f:05:6d:95:42:36:00:5d:69:7c:af:fd:06:a4:14: 19:93:2a:73:e4:cd:7e:df:0c:4d:2e:19:8a:e8:89:5e:dc:70: d8:9f:a5:2f:76:23:97:34:45:be:24:77:b0:32:a8:61:29:e4: 5f:16:96:f1:b7:c2:c3:60:fc:f2:64:dd:79:eb:1d:96:a3:2e: 73:b9:22:85:99:83:f8:e6:0c:0e:d7:f6:23:58:57:26:3f:f6: 9c:ff:8b:ac:fd:79:45:24:79:27:cf:f3:a6:31:2d:3b:04:6f: 79:15:35:ac:ad:25:d5:ab:ab:45:9b:ee:fb:0d:81:dc:51:78: ed:e8:56:73:e1:5d:ce:51:56:d0:70:40:2b:0b:2b:cd:9e:10: 8e:00:02:a3:27:a3:03:67:e9:b1:15:12:15:4f:7c:db:8b:ef: 86:66:76:01:76:d0:27:68:f5:43:68:58:08:99:f3:6f:15:0e: a1:5b:d3:16:18:4f:7a:84:db:5e:8c:a7:bb:44:85:c6:39:73: c3:c1:c4:0e:f1:13:38:9f:a1:c2:53:98:1d:9f:60:44:bd:b0: c4:8e:bc:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdFrT4viif9zxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk Y2FkZTQzOTQtNDE3ZC00NWVmLTllZTgtY2NlZmIwMjNmZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaHjKAzaFPPNrZPP4oep2RzCZAvnSv6Faut9 8kbgyMdUbbf2f2feKkVUZd2wj1Hl5xebeRtQ0Ra6/pfoZgXePV4pVdN0sbv9Newj iHk8SWuZfjtCvVRKERTcLUM2D2+M2APtzemvOF3RVpYRmR3cEYEg8rQpPpdK5Dbg n3NgFwZiGnBik5ng/EPPRGttmeHS3O5ugsY8Oe7FRGTMsHckWgcdUbidoIU89slY p7eCOU6mgJZgnQ/H1uxLYa4LK7NV9rW4OhQuEwwhd6nlCzWFNxdp4L1TFrF6ZVC+ l9X2y5Okqs3jKI/hKEY9vBpuRZDNioCfjKYNMzU71hGRqtF9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvj+W7IoKLFyK+gfNUknmkV4OqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1YzJiMWYtN2MzOS0z OWU3LTg3MjEtZjk5YWU0MTlhMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OIyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANYSGlbTCwBJkJDqfh+HLMfpS10n1ZfMXJnAKGAGkXjCE0zBTOEXkp8F bZVCNgBdaXyv/QakFBmTKnPkzX7fDE0uGYroiV7ccNifpS92I5c0Rb4kd7AyqGEp 5F8WlvG3wsNg/PJk3XnrHZajLnO5IoWZg/jmDA7X9iNYVyY/9pz/i6z9eUUkeSfP 86YxLTsEb3kVNaytJdWrq0Wb7vsNgdxReO3oVnPhXc5RVtBwQCsLK82eEI4AAqMn owNn6bEVEhVPfNuL74ZmdgF20Cdo9UNoWAiZ828VDqFb0xYYT3qE216Mp7tEhcY5 c8PBxA7xEzifocJTmB2fYES9sMSOvL0= -----END CERTIFICATE-----Generated at Fri Jul 25 19:28:45 2025 by rpki-client