$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa File: d209c303-6dbd-372b-83e5-c34af14d89c8.roa (raw, json) Hash identifier: OhukB9XyRmfVyGW6ct7DT4AuJdky0ZttO0luJwEXXyY= Subject key identifier: B7:70:A9:C8:27:45:2C:82:F7:4D:0F:03:4E:57:5A:81:A0:76:0C:40 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3C3B3B3DAD6C4B8C9660 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 209.104.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:3c:3b:3b:3d:ad:6c:4b:8c:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=c49d6045-788e-4fc9-bc7f-030d4cbf0603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:1d:4d:98:94:ae:f1:af:ac:a7:5e:47:94: fd:05:d7:d1:e4:df:5e:3e:68:37:f9:b8:c0:d7:42: 61:71:3c:43:eb:a6:13:16:a1:00:c2:49:06:93:fb: 97:26:55:98:61:33:07:82:a2:9b:1b:e7:c5:28:62: a1:e2:96:9a:ca:9b:76:54:15:20:1e:6f:99:e1:ef: 06:f9:16:44:d8:13:fa:01:37:28:18:73:3a:1f:77: f8:ee:54:76:88:56:0d:99:9e:ac:0c:ed:93:37:2c: da:4b:e2:2e:58:d6:29:9e:14:1c:13:cb:2e:75:53: ce:fe:72:79:49:0f:d5:2c:28:a0:90:44:29:9a:aa: 7b:b3:6c:36:0b:69:2c:6f:cb:d0:a2:2a:24:b8:fc: d0:61:a6:f7:b6:46:6b:fa:16:0e:5e:9c:92:d8:b2: 0c:84:25:f9:ed:e9:60:e8:5c:59:f3:13:b1:ec:f1: 68:1c:fa:f6:6a:91:93:4b:f4:7c:c0:63:5b:e7:78: d7:0f:6f:03:43:10:4f:a5:8f:b8:4b:41:45:61:9e: 8f:7b:54:33:96:ab:34:a3:85:61:f4:33:b5:95:1f: 27:b2:5c:d6:82:4b:81:8f:47:44:76:2f:91:bb:32: ba:6f:d0:ae:f2:04:c7:cc:d6:74:20:cf:37:3c:7e: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:70:A9:C8:27:45:2C:82:F7:4D:0F:03:4E:57:5A:81:A0:76:0C:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d209c303-6dbd-372b-83e5-c34af14d89c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.104.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:54:c0:5d:c7:2d:11:f4:c6:c7:88:10:64:2f:de:75:2b:6d: 81:33:b7:1a:cd:fe:bf:b9:85:0f:17:49:aa:89:c3:7f:3b:47: 7f:5e:e4:43:6d:99:ea:55:cb:30:0e:cb:aa:83:66:32:a5:81: b6:08:b1:c0:b7:ca:f3:f2:6e:b9:7a:8f:c6:ed:6f:ef:2f:7c: 69:58:f2:5d:2d:eb:4c:9e:21:12:95:19:ae:30:e4:07:a9:bf: a8:44:89:eb:4d:56:10:1d:6e:cd:7a:3e:0b:dc:55:11:f6:8a: 04:c7:b0:37:ba:09:22:53:e0:8b:e0:12:b6:7f:43:c0:d9:44: 12:18:61:03:78:c9:ab:da:29:bb:50:e2:9c:fb:76:6c:f5:6e: a8:a8:bb:c3:fd:28:b4:bc:0c:fd:f3:55:87:71:7d:db:ee:95: ef:cb:7f:c2:66:ba:b3:e8:1d:38:75:52:ae:2e:71:b6:83:fd: 65:16:18:b2:e7:fe:68:39:81:68:84:ae:5b:0e:04:04:0d:40: 87:4d:40:15:f3:cf:cf:15:08:3a:49:cf:30:a3:4c:5f:10:d5: 77:c1:bb:52:11:7b:fa:0a:6d:4c:8b:a8:52:13:fe:de:4c:83: fa:63:89:44:94:09:d6:fd:ce:88:b5:09:ef:e0:04:0c:6f:e7: 5e:3b:65:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6Szw7Oz2tbEuMlmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YzQ5ZDYwNDUtNzg4ZS00ZmM5LWJjN2YtMDMwZDRjYmYwNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GkdTZiUrvGvrKdeR5T9BdfR5N9ePmg3+bjA 10JhcTxD66YTFqEAwkkGk/uXJlWYYTMHgqKbG+fFKGKh4paaypt2VBUgHm+Z4e8G +RZE2BP6ATcoGHM6H3f47lR2iFYNmZ6sDO2TNyzaS+IuWNYpnhQcE8sudVPO/nJ5 SQ/VLCigkEQpmqp7s2w2C2ksb8vQoiokuPzQYab3tkZr+hYOXpyS2LIMhCX57elg 6FxZ8xOx7PFoHPr2apGTS/R8wGNb53jXD28DQxBPpY+4S0FFYZ6Pe1Qzlqs0o4Vh 9DO1lR8nslzWgkuBj0dEdi+RuzK6b9Cu8gTHzNZ0IM83PH69MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdwqcgnRSyC900PA05XWoGgdgxAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDIwOWMzMDMtNmRiZC0z NzJiLTgzZTUtYzM0YWYxNGQ4OWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0WhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5UwF3HLRH0xseIEGQv3nUrbYEztxrN/r+5hQ8XSaqJw387R39e5ENt mepVyzAOy6qDZjKlgbYIscC3yvPybrl6j8btb+8vfGlY8l0t60yeIRKVGa4w5Aep v6hEietNVhAdbs16PgvcVRH2igTHsDe6CSJT4IvgErZ/Q8DZRBIYYQN4yavaKbtQ 4pz7dmz1bqiou8P9KLS8DP3zVYdxfdvule/Lf8JmurPoHTh1Uq4ucbaD/WUWGLLn /mg5gWiErlsOBAQNQIdNQBXzz88VCDpJzzCjTF8Q1XfBu1IRe/oKbUyLqFIT/t5M g/pjiUSUCdb9zoi1Ce/gBAxv5147ZQs= -----END CERTIFICATE-----Generated at Fri Jul 25 19:26:09 2025 by rpki-client