$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa File: da228069-1e57-30ee-abed-61d9283ae7e4.roa (raw, json) Hash identifier: SNH4cnFkDnQCBkm7pZRh7apfbC9DEYhQS36xClhaPbs= Subject key identifier: CB:E1:76:36:EE:E2:B0:67:C9:F1:C5:77:CC:36:5D:0C:5B:64:4E:5A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55C99AEEE24841BC2E85AE Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 21723 IP address blocks: 216.123.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:c9:9a:ee:e2:48:41:bc:2e:85:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=8ff96b9b-a3f3-4bd3-9cbe-21ba40451490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ef:19:82:2c:4f:a3:a3:e2:ce:43:ef:46:8c: 21:1c:45:e4:a9:4d:89:b9:b0:53:e4:6d:8d:f2:13: 3e:9d:9e:be:af:c7:32:9b:79:71:d3:58:3a:93:6c: 56:ba:f5:0f:33:f7:e1:55:ec:c3:3d:fb:d1:38:8a: 36:f1:8c:dc:3c:50:63:11:39:29:1a:4e:16:cc:d4: 1e:4e:37:a2:c4:6c:80:65:2f:50:0d:0e:91:d1:50: e8:05:d2:50:f5:41:f2:f6:d7:9c:4d:f5:3a:87:b5: 2d:12:a0:45:96:b4:bc:14:7f:12:4d:39:02:c7:62: 8d:c7:b2:14:96:7a:2a:2b:b2:75:ce:2e:cc:40:5a: c8:0f:60:ac:f2:e2:23:68:2e:43:e3:56:3b:b5:a9: 6d:94:49:e4:b4:2c:41:c0:7f:a5:c4:00:4f:e5:9b: 91:4a:bc:ad:f7:dd:0c:25:fb:e0:fd:0b:43:e6:8a: c6:4c:d7:cd:73:f0:87:15:63:39:74:19:7e:b9:bc: 98:3e:7a:e4:a1:f3:3f:0d:3c:b9:fe:66:02:9e:68: 68:fa:dd:76:ee:e5:7c:68:5b:83:f4:12:f7:7d:88: 97:ca:55:16:a6:8b:e3:d3:ca:3b:d4:f3:66:6b:13: 4d:55:74:65:82:c8:d3:1c:26:60:c2:13:d1:33:bc: 6f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E1:76:36:EE:E2:B0:67:C9:F1:C5:77:CC:36:5D:0C:5B:64:4E:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 216.123.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b6:94:03:95:f9:88:b9:4f:34:00:90:14:81:6d:93:e1:cd: cc:b3:a6:bc:9a:fc:3a:cd:85:6b:78:7a:7d:b7:6d:77:99:bd: 80:f4:b8:e9:c8:3d:6c:13:cc:40:a0:f9:db:60:53:9a:a2:c4: 42:d0:be:2e:a5:99:0b:73:cc:21:7b:b6:64:73:e7:bb:f6:f8: 3b:dc:75:54:d5:f6:0d:0a:cc:41:bb:bd:00:99:89:2b:c3:54: 23:81:46:b7:37:24:13:80:f0:72:dc:4e:74:5c:d5:44:b1:e9: c9:c7:a0:03:db:e1:6e:98:90:b7:88:56:31:9c:1a:3d:8e:5d: c3:9a:f5:ba:e0:da:af:d0:4b:26:36:ac:63:ff:e0:ae:a8:3f: e6:7c:15:4f:73:3c:64:35:66:19:eb:c5:fe:8b:79:0d:a7:8c: c8:5b:26:64:71:16:fa:64:bd:49:ef:8f:ee:10:f1:c8:22:74: f4:6f:85:08:ee:32:1f:c8:42:11:6b:ea:4e:1d:c1:f7:79:5a: af:05:0d:17:a7:5a:c4:6b:c8:5d:b3:8e:e4:3b:e2:a1:2a:51: 24:c8:27:57:75:93:e9:01:4b:4e:4c:e3:34:49:db:dc:3e:9e: b9:c1:62:19:b7:73:c9:51:a1:53:13:e7:8d:28:ff:bc:3f:ae: d0:7c:57:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcma7uJIQbwuha4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OGZmOTZiOWItYTNmMy00YmQzLTljYmUtMjFiYTQwNDUxNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e8ZgixPo6PizkPvRowhHEXkqU2JubBT5G2N 8hM+nZ6+r8cym3lx01g6k2xWuvUPM/fhVezDPfvROIo28YzcPFBjETkpGk4WzNQe TjeixGyAZS9QDQ6R0VDoBdJQ9UHy9tecTfU6h7UtEqBFlrS8FH8STTkCx2KNx7IU lnoqK7J1zi7MQFrID2Cs8uIjaC5D41Y7taltlEnktCxBwH+lxABP5ZuRSryt990M Jfvg/QtD5orGTNfNc/CHFWM5dBl+ubyYPnrkofM/DTy5/mYCnmho+t127uV8aFuD 9BL3fYiXylUWpovj08o71PNmaxNNVXRlgsjTHCZgwhPRM7xvYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvhdjbu4rBnyfHFd8w2XQxbZE5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGEyMjgwNjktMWU1Ny0z MGVlLWFiZWQtNjFkOTI4M2FlN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu2lAOV+Yi5TzQAkBSBbZPhzcyzprya/DrNhWt4en23bXeZvYD0uOnI PWwTzECg+dtgU5qixELQvi6lmQtzzCF7tmRz57v2+DvcdVTV9g0KzEG7vQCZiSvD VCOBRrc3JBOA8HLcTnRc1USx6cnHoAPb4W6YkLeIVjGcGj2OXcOa9brg2q/QSyY2 rGP/4K6oP+Z8FU9zPGQ1Zhnrxf6LeQ2njMhbJmRxFvpkvUnvj+4Q8cgidPRvhQju Mh/IQhFr6k4dwfd5Wq8FDRenWsRryF2zjuQ74qEqUSTIJ1d1k+kBS05M4zRJ29w+ nrnBYhm3c8lRoVMT540o/7w/rtB8V9U= -----END CERTIFICATE-----Generated at Fri Jul 25 19:41:40 2025 by rpki-client