$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa File: d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa (raw, json) Hash identifier: XCqQXW9YKA1I0C5/93NcZlu6DRhXsMzlc+gyfCzCW/E= Subject key identifier: DF:ED:9F:B9:57:2D:51:62:09:18:CB:E8:C0:A8:91:9B:2A:1D:65:3C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55CFFDF38E73D46B0D9C80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 19905 IP address blocks: 209.89.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cf:fd:f3:8e:73:d4:6b:0d:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=33a5b9f6-91ce-48ca-a276-2677feba5fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b2:0b:49:fb:ed:65:ad:ec:15:34:7b:f9:55: a7:04:d9:b0:31:65:84:2b:ef:81:4c:22:d2:fb:7d: 76:fb:07:f7:2a:35:ef:75:c0:fc:45:3b:5e:62:87: e1:1c:0e:ee:5d:13:7f:b0:3f:4a:b8:85:f9:97:72: e8:72:91:86:df:bc:b8:c9:fc:0d:46:31:a0:f1:96: 57:df:08:1e:7b:b7:18:7e:f1:30:44:4d:1a:9a:28: ae:68:16:e7:58:0a:d9:ac:54:03:7a:fc:c7:11:d3: 54:d2:00:43:b9:0f:49:77:f4:2b:b3:d7:fb:e4:ff: 1a:71:8f:24:6a:2b:09:ee:53:a6:7a:b5:d7:9e:c5: 68:bc:2d:37:b1:b8:29:9e:fe:83:ea:f7:ce:71:d1: fe:21:48:88:e4:3f:2b:9c:7c:6e:e0:8c:79:f7:cb: 92:ee:87:e3:52:33:cd:53:84:86:07:eb:49:2d:23: 50:79:30:e7:7e:2f:07:db:41:46:78:97:15:27:11: fb:93:a0:77:44:00:b3:76:cc:df:14:6a:bd:b9:c2: 6c:2d:6f:42:69:7e:9d:22:40:9d:92:ab:67:5a:a6: 62:0e:cd:08:10:20:9b:b9:bc:49:9d:6f:aa:d4:e7: c6:14:ce:80:13:15:36:77:a9:9d:36:75:6c:09:8d: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:ED:9F:B9:57:2D:51:62:09:18:CB:E8:C0:A8:91:9B:2A:1D:65:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d7a27c5d-9d0c-3a48-b526-806911d25f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a2:bf:5a:ec:68:95:d7:13:2f:90:9c:5e:fa:f7:0d:39:d2: f5:cb:90:8f:6d:0c:eb:a3:3c:08:0f:f2:b6:5f:6e:bd:1a:16: d1:1b:2c:59:57:ce:a5:37:da:aa:df:8a:20:87:79:a5:92:5b: 87:63:2b:25:97:cd:70:a0:36:ff:92:7f:2e:ce:65:06:29:a7: e8:15:cf:26:cb:ff:4c:4d:a9:83:b9:95:7b:bf:1e:45:88:9a: 4a:f2:3b:ba:48:38:12:f9:b6:4a:31:7b:47:b8:e6:3c:f8:25: d2:13:5d:70:ff:48:35:50:d6:73:c4:ec:b7:6d:e7:d3:54:f4: 30:0e:62:b0:0a:84:77:c5:21:03:c8:0c:f2:7d:f6:12:3d:4e: 3f:5d:a7:d1:eb:21:08:0c:b1:79:66:ba:4b:a6:32:39:2d:ec: fb:5b:9b:cb:9d:c9:4f:6a:46:31:7e:a6:ce:c4:49:5b:f9:27: 4e:fe:a0:86:33:b6:1c:6b:a8:a9:e3:41:67:d8:d3:50:45:71: 23:42:c2:27:88:9b:4d:91:83:3a:ed:3d:6e:27:fb:5c:ed:e2: 74:15:44:ad:17:cf:e0:86:2d:c3:6f:33:e3:8f:be:8c:2f:6f: b2:14:d7:e3:9e:d1:47:66:49:df:86:47:0b:8e:ea:40:15:2d: dd:ad:a6:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVc/9845z1GsNnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk MzNhNWI5ZjYtOTFjZS00OGNhLWEyNzYtMjY3N2ZlYmE1ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrILSfvtZa3sFTR7+VWnBNmwMWWEK++BTCLS +312+wf3KjXvdcD8RTteYofhHA7uXRN/sD9KuIX5l3LocpGG37y4yfwNRjGg8ZZX 3wgee7cYfvEwRE0amiiuaBbnWArZrFQDevzHEdNU0gBDuQ9Jd/Qrs9f75P8acY8k aisJ7lOmerXXnsVovC03sbgpnv6D6vfOcdH+IUiI5D8rnHxu4Ix598uS7ofjUjPN U4SGB+tJLSNQeTDnfi8H20FGeJcVJxH7k6B3RACzdszfFGq9ucJsLW9CaX6dIkCd kqtnWqZiDs0IECCbubxJnW+q1OfGFM6AExU2d6mdNnVsCY1uIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/tn7lXLVFiCRjL6MCokZsqHWU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDdhMjdjNWQtOWQwYy0z YTQ4LWI1MjYtODA2OTExZDI1ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOiv1rsaJXXEy+QnF769w050vXLkI9tDOujPAgP8rZfbr0aFtEbLFlX zqU32qrfiiCHeaWSW4djKyWXzXCgNv+Sfy7OZQYpp+gVzybL/0xNqYO5lXu/HkWI mkryO7pIOBL5tkoxe0e45jz4JdITXXD/SDVQ1nPE7Ldt59NU9DAOYrAKhHfFIQPI DPJ99hI9Tj9dp9HrIQgMsXlmukumMjkt7Ptbm8udyU9qRjF+ps7ESVv5J07+oIYz thxrqKnjQWfY01BFcSNCwieIm02RgzrtPW4n+1zt4nQVRK0Xz+CGLcNvM+OPvowv b7IU1+Oe0UdmSd+GRwuO6kAVLd2tpjc= -----END CERTIFICATE-----Generated at Fri Jul 25 19:19:44 2025 by rpki-client