$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d32a6dc1-daa5-31bf-b324-f352fbf89f31.roa File: d32a6dc1-daa5-31bf-b324-f352fbf89f31.roa (raw, json) Hash identifier: /R+QAuAlKbmA7IdD3I8AQyH6bEzOc8HgKnwwL1cd7XM= Subject key identifier: 91:40:79:F4:18:1C:5C:67:C3:E0:E0:44:9E:BA:B1:8D:7E:58:B4:34 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55C9620A81E665D0A04EC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d32a6dc1-daa5-31bf-b324-f352fbf89f31.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 21723 IP address blocks: 209.53.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:c9:62:0a:81:e6:65:d0:a0:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=138c0fac-21ff-4bb1-9254-df76b150ea9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:44:9f:44:5d:7b:67:0e:fc:ec:28:3f:09: ff:d8:e4:a8:4f:2d:9c:f0:74:f4:c7:10:df:26:40: 95:5a:2e:d5:e1:5a:80:9f:d2:b6:3c:d9:7b:20:69: 10:c5:35:64:67:0a:ab:c3:e8:d2:74:b7:c0:ee:1c: a6:99:2b:3c:eb:32:f4:a5:b0:52:c5:cc:32:34:89: 2f:65:99:18:f0:d5:b9:23:42:b3:f1:71:e7:77:e7: d1:d5:a5:02:cf:5c:44:7e:6b:97:1e:da:a9:ea:1b: 79:dd:b2:51:3f:17:77:37:32:31:31:f6:ed:ac:f2: c8:6b:ca:9c:6f:bb:19:bc:70:88:fd:54:dd:1e:d6: dc:90:0d:d7:6f:4e:92:b9:84:78:4c:96:f9:b5:9e: b5:40:72:69:c9:5c:a0:b5:f8:82:3f:84:17:0b:db: 26:b3:2e:95:45:2a:29:9e:7b:97:5d:73:7b:98:df: ca:17:75:26:0b:ad:4a:7b:23:98:83:ea:38:4b:3c: 72:98:21:ef:7e:ae:c3:0f:ed:96:fd:b1:75:30:2f: 15:78:af:97:97:45:38:e8:82:8a:78:06:a1:ff:ae: 02:4c:24:84:b7:72:83:01:11:ee:0f:72:aa:e1:50: e6:b7:de:77:95:05:27:0e:11:97:ab:c6:84:69:c6: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:40:79:F4:18:1C:5C:67:C3:E0:E0:44:9E:BA:B1:8D:7E:58:B4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d32a6dc1-daa5-31bf-b324-f352fbf89f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:56:fa:29:4c:22:53:50:46:4a:82:05:4d:3f:ea:36:67:46: 7a:ce:0a:77:b4:d9:fd:8d:48:cc:cd:e3:a3:6e:d1:6b:73:4f: 3e:e5:4a:31:bf:82:85:d4:d1:0a:8e:a1:00:25:72:f8:45:c2: 68:0c:a4:c2:4b:cf:43:53:4a:dc:fa:c3:5e:19:0d:70:c2:6d: ad:c5:2b:39:b1:80:67:4e:f1:4a:51:68:61:17:78:a5:b7:e8: 6f:bb:fe:2d:de:7b:3b:fa:60:a6:55:81:a9:b4:e7:77:00:a2: d5:03:a9:cd:03:26:43:92:89:7f:9b:92:8e:16:e9:94:46:a3: 7f:8c:5b:ef:f2:3e:63:90:b4:38:6c:99:7c:1a:9e:36:df:b6: 24:ee:c1:5a:a9:af:a1:2b:ca:5d:c0:45:8b:2c:d6:09:e1:dd: d2:fc:06:bd:0c:14:b3:46:ea:38:3a:b9:4b:fd:48:57:88:be: 40:ab:92:b7:01:9b:7c:a0:16:29:44:f0:c5:8e:fd:45:e3:ab: ee:01:c0:17:4b:88:bc:01:c9:c2:ac:46:bc:49:8e:f2:fb:a9: 09:62:11:b2:2e:a3:50:d8:e3:f9:ec:63:e5:37:fe:e1:39:8d: c4:cd:7f:ee:cf:3a:f1:ff:5a:46:b8:80:78:d9:23:8e:7e:16: b4:ce:9c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcliCoHmZdCgTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk MTM4YzBmYWMtMjFmZi00YmIxLTkyNTQtZGY3NmIxNTBlYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUlEn0Rde2cO/OwoPwn/2OSoTy2c8HT0xxDf JkCVWi7V4VqAn9K2PNl7IGkQxTVkZwqrw+jSdLfA7hymmSs86zL0pbBSxcwyNIkv ZZkY8NW5I0Kz8XHnd+fR1aUCz1xEfmuXHtqp6ht53bJRPxd3NzIxMfbtrPLIa8qc b7sZvHCI/VTdHtbckA3Xb06SuYR4TJb5tZ61QHJpyVygtfiCP4QXC9smsy6VRSop nnuXXXN7mN/KF3UmC61KeyOYg+o4SzxymCHvfq7DD+2W/bF1MC8VeK+Xl0U46IKK eAah/64CTCSEt3KDARHuD3Kq4VDmt953lQUnDhGXq8aEaca88QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFAefQYHFxnw+DgRJ66sY1+WLQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDMyYTZkYzEtZGFhNS0z MWJmLWIzMjQtZjM1MmZiZjg5ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1W+ilMIlNQRkqCBU0/6jZnRnrOCne02f2NSMzN46Nu0WtzTz7lSjG/ goXU0QqOoQAlcvhFwmgMpMJLz0NTStz6w14ZDXDCba3FKzmxgGdO8UpRaGEXeKW3 6G+7/i3eezv6YKZVgam053cAotUDqc0DJkOSiX+bko4W6ZRGo3+MW+/yPmOQtDhs mXwanjbftiTuwVqpr6Eryl3ARYss1gnh3dL8Br0MFLNG6jg6uUv9SFeIvkCrkrcB m3ygFilE8MWO/UXjq+4BwBdLiLwBycKsRrxJjvL7qQliEbIuo1DY4/nsY+U3/uE5 jcTNf+7POvH/Wka4gHjZI45+FrTOnLc= -----END CERTIFICATE-----Generated at Fri Jul 25 19:33:25 2025 by rpki-client