$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa File: d18ff211-0ee2-3022-8c45-6711b4123785.roa (raw, json) Hash identifier: k1AU2f131D1ssdrH6WJP+NJPjrc6E2GoBIt6XxN/vhY= Subject key identifier: 2E:74:1F:E7:DB:A3:CC:03:98:37:B0:D3:1A:25:38:41:19:34:44:BB Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7D15F277A075C5A396270B20 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 852 IP address blocks: 209.29.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:f2:77:a0:75:c5:a3:96:27:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=f9fa2b5f-de33-41e9-aa35-6e5155ac1f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:5b:4c:e0:87:1a:59:8c:0d:f5:f1:26:55: 59:8c:67:c0:fe:55:e1:68:36:b3:c5:62:1f:82:f2: 9d:de:a9:3b:b6:c2:dd:99:1b:0b:04:26:7b:9c:dd: 45:2e:2e:c2:85:28:4d:1d:27:39:4c:08:ac:ec:d6: 1d:5c:0e:fa:5d:c7:f1:62:d5:0d:6a:62:d5:fe:d2: 67:af:9c:f7:45:96:f1:22:77:af:b2:29:8b:e1:55: 2e:2a:d3:d2:10:d0:c7:97:0c:6e:36:86:9b:df:6d: bc:d4:35:c7:c9:b4:10:d0:32:f1:2d:7b:50:b2:e1: f2:bf:8d:db:d3:b8:46:29:e8:9a:8e:31:46:8e:75: c9:76:48:76:24:95:3a:75:11:0a:8e:e2:e9:08:a2: 58:55:15:2b:2c:cc:0a:3e:9d:cf:4c:6e:45:7c:de: 54:ca:95:ec:ab:07:31:ab:c8:c8:86:82:0c:ed:6f: 35:44:28:a3:d5:f7:d7:27:af:8a:f4:57:be:68:6e: e3:4d:e3:5e:cd:bc:b2:cf:5c:8d:54:c1:b0:9c:b8: 1b:be:e5:a4:32:82:1f:fd:7d:f2:57:25:2c:63:de: d4:68:6b:48:73:15:b5:52:a9:5e:e5:4e:9b:30:fe: 10:3c:a4:11:d3:dc:4f:41:b7:25:e6:ef:30:49:81: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:74:1F:E7:DB:A3:CC:03:98:37:B0:D3:1A:25:38:41:19:34:44:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f5:75:14:c6:8e:b9:68:c3:62:3f:e0:66:bc:88:8f:2d:fd:09: ad:ee:59:73:9f:a3:1a:98:04:92:c2:d9:b9:de:33:8e:7e:89: eb:ed:f1:86:63:3e:be:51:ad:63:da:13:2b:3e:03:7b:ea:71: 04:f5:42:ea:08:0d:8a:c6:c7:15:06:d5:86:43:8b:bf:2b:02: 38:60:23:89:96:1e:54:15:b0:71:3a:fa:b0:a7:c1:43:86:d0: d2:20:b0:e7:eb:0d:da:6e:8a:a1:e4:29:bb:07:19:0b:ab:de: 67:d6:ae:10:e8:d9:dc:0c:96:4a:b5:a0:3b:5e:17:7e:e3:e0: 70:41:f3:68:94:f4:34:ef:96:b5:98:7e:84:d7:a4:21:c5:cb: e3:38:42:88:67:e9:6e:a5:d7:53:71:d5:84:f1:6c:91:f6:03: 75:26:ba:63:24:62:cf:30:07:37:11:52:e2:81:0e:2c:07:c7: 20:d5:9b:9c:97:46:37:e0:f2:0c:00:57:3e:15:ab:94:36:e6: 3c:7e:4d:ee:79:8d:5e:3a:ec:6b:83:5e:0f:f7:02:68:8d:76: 72:a4:9a:19:ce:da:34:51:58:33:5f:85:ff:27:3f:c2:6b:0b: 92:f0:b9:eb:6c:4b:01:e3:33:57:ff:3e:ba:6b:2d:2e:4f:c0: a5:42:00:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FfJ3oHXFo5YnCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZjlmYTJiNWYtZGUzMy00MWU5LWFhMzUtNmU1MTU1YWMxZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0ZbTOCHGlmMDfXxJlVZjGfA/lXhaDazxWIf gvKd3qk7tsLdmRsLBCZ7nN1FLi7ChShNHSc5TAis7NYdXA76XcfxYtUNamLV/tJn r5z3RZbxInevsimL4VUuKtPSENDHlwxuNoab32281DXHybQQ0DLxLXtQsuHyv43b 07hGKeiajjFGjnXJdkh2JJU6dREKjuLpCKJYVRUrLMwKPp3PTG5FfN5UypXsqwcx q8jIhoIM7W81RCij1ffXJ6+K9Fe+aG7jTeNezbyyz1yNVMGwnLgbvuWkMoIf/X3y VyUsY97UaGtIcxW1Uqle5U6bMP4QPKQR09xPQbcl5u8wSYHL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC50H+fbo8wDmDew0xolOEEZNES7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDE4ZmYyMTEtMGVlMi0z MDIyLThjNDUtNjcxMWI0MTIzNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAPV1FMaOuWjDYj/gZryIjy39Ca3uWXOfoxqYBJLC2bneM45+ievt8YZj Pr5RrWPaEys+A3vqcQT1QuoIDYrGxxUG1YZDi78rAjhgI4mWHlQVsHE6+rCnwUOG 0NIgsOfrDdpuiqHkKbsHGQur3mfWrhDo2dwMlkq1oDteF37j4HBB82iU9DTvlrWY foTXpCHFy+M4Qohn6W6l11Nx1YTxbJH2A3UmumMkYs8wBzcRUuKBDiwHxyDVm5yX Rjfg8gwAVz4Vq5Q25jx+Te55jV467GuDXg/3AmiNdnKkmhnO2jRRWDNfhf8nP8Jr C5LwuetsSwHjM1f/PrprLS5PwKVCAN8= -----END CERTIFICATE-----Generated at Fri Jul 25 19:36:22 2025 by rpki-client