$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dad1883b-8b3a-32b3-ad15-0e8d08214150.roa File: dad1883b-8b3a-32b3-ad15-0e8d08214150.roa (raw, json) Hash identifier: lzxFqG8uBwt63mELgEqhiRzOu2dFGrHBTuQKfrp4l9s= Subject key identifier: 67:96:16:14:64:36:E6:DF:D0:24:9D:45:57:F6:02:72:40:11:16:E8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3C976C6A5ACB472F0380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dad1883b-8b3a-32b3-ad15-0e8d08214150.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 173.183.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:3c:97:6c:6a:5a:cb:47:2f:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=4bedb30f-aab6-4060-8167-58fd6f8c4eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:bc:ef:92:4b:2f:45:78:81:88:be:38:af: f6:4f:3b:35:cf:0b:db:4c:1e:41:d3:f5:d4:80:6b: 0b:43:29:97:09:69:24:36:11:26:bd:90:ba:d3:7f: a6:dc:70:1b:39:11:ce:1b:97:45:71:01:25:0f:9c: e9:97:54:fd:61:17:72:f6:3e:f7:fa:b1:42:97:d1: 0a:8d:86:b0:6e:b3:62:38:15:9a:79:1f:e5:9c:db: 95:bc:cf:af:d7:d2:a8:a2:22:7c:b1:e7:ec:1e:2d: 46:15:40:ed:34:96:a7:c2:58:ed:0f:ff:62:bb:17: b0:7a:2f:47:f7:31:09:d2:f0:6f:f8:2c:5d:52:e8: c7:f2:4f:0d:9d:9e:8e:17:4b:dc:7a:9f:e0:37:a5: 29:81:0b:de:63:94:94:b1:7b:0a:e4:ed:b2:e7:79: 31:56:e4:26:8d:90:41:e9:13:80:bb:e4:a5:25:dd: b7:7d:2a:be:1c:56:6b:23:33:d7:54:70:e9:22:15: c8:5a:f3:74:7f:ef:8b:48:4f:91:22:83:3a:f8:56: fc:c2:7f:38:61:7a:e8:3a:a2:1f:50:0f:bb:a0:1a: 5f:70:c6:b7:89:e7:95:65:3c:39:ef:9d:25:66:04: 4d:0a:1b:ca:c3:ad:15:72:0a:4f:f4:42:3f:e0:96: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:96:16:14:64:36:E6:DF:D0:24:9D:45:57:F6:02:72:40:11:16:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dad1883b-8b3a-32b3-ad15-0e8d08214150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.183.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:ad:5a:69:81:54:81:f8:08:58:f5:b7:b2:4f:e9:dd:35:85: 3e:05:f4:82:ed:71:c1:6f:15:f8:c9:c0:8d:42:ae:f2:68:40: 4a:da:f3:51:28:e1:b3:c1:4b:1a:f5:e5:5e:f4:49:1c:f4:3f: b3:af:bb:fb:ea:01:cf:2f:62:d8:54:68:c0:fb:d0:63:c8:9e: a6:7a:aa:6e:d4:76:8a:bb:c6:6a:5a:55:b2:2f:f9:d3:90:5c: 5b:51:d2:f9:39:11:5a:d5:a7:38:60:d8:6c:8d:be:a7:43:43: 46:a3:43:5b:a7:40:39:71:6c:78:f4:c2:8a:de:ec:c6:32:ef: b8:95:08:fa:c3:a5:e9:ed:da:24:0a:b4:4c:f6:7b:7b:bc:50: 68:34:78:8a:52:1e:14:4b:e7:81:c3:70:d0:5b:0b:75:a0:71: d4:2a:39:8f:da:e3:04:bd:24:43:cd:b3:57:3c:71:6c:84:e5: 6c:34:28:c8:1b:af:8d:8d:44:c9:50:40:fc:00:7b:56:76:bc: 8d:72:b4:a2:c8:14:1f:4e:14:62:6a:e8:86:1e:cd:1a:5f:71: 46:05:f8:4a:d4:76:02:91:6a:72:1f:2f:96:98:55:9c:4c:a5: a1:46:ad:72:de:a6:a1:e1:1b:b1:9b:94:57:27:96:4b:d6:95: 5b:a1:32:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzyXbGpay0cvA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk NGJlZGIzMGYtYWFiNi00MDYwLTgxNjctNThmZDZmOGM0ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCy875JLL0V4gYi+OK/2Tzs1zwvbTB5B0/XU gGsLQymXCWkkNhEmvZC603+m3HAbORHOG5dFcQElD5zpl1T9YRdy9j73+rFCl9EK jYawbrNiOBWaeR/lnNuVvM+v19KooiJ8sefsHi1GFUDtNJanwljtD/9iuxewei9H 9zEJ0vBv+CxdUujH8k8NnZ6OF0vcep/gN6UpgQveY5SUsXsK5O2y53kxVuQmjZBB 6ROAu+SlJd23fSq+HFZrIzPXVHDpIhXIWvN0f++LSE+RIoM6+Fb8wn84YXroOqIf UA+7oBpfcMa3ieeVZTw5750lZgRNChvKw60VcgpP9EI/4JaGSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeWFhRkNubf0CSdRVf2AnJAERboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGFkMTg4M2ItOGIzYS0z MmIzLWFkMTUtMGU4ZDA4MjE0MTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrbcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+tWmmBVIH4CFj1t7JP6d01hT4F9ILtccFvFfjJwI1CrvJoQEra81Eo 4bPBSxr15V70SRz0P7Ovu/vqAc8vYthUaMD70GPInqZ6qm7Udoq7xmpaVbIv+dOQ XFtR0vk5EVrVpzhg2GyNvqdDQ0ajQ1unQDlxbHj0wore7MYy77iVCPrDpent2iQK tEz2e3u8UGg0eIpSHhRL54HDcNBbC3WgcdQqOY/a4wS9JEPNs1c8cWyE5Ww0KMgb r42NRMlQQPwAe1Z2vI1ytKLIFB9OFGJq6IYezRpfcUYF+ErUdgKRanIfL5aYVZxM paFGrXLepqHhG7GblFcnlkvWlVuhMjQ= -----END CERTIFICATE-----Generated at Fri Jul 25 19:25:00 2025 by rpki-client