$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa File: e02c53ca-011b-3920-8c42-11cd63c0df14.roa (raw, json) Hash identifier: BNQoayIX3/GwEFqJRSliKBz65RYKEAegMHdY2JiMu2k= Subject key identifier: 52:7F:75:7B:78:7A:BC:D2:C5:E8:49:E3:18:D3:06:C9:21:C6:5B:12 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55CBC12CB7429668B16D00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 15247 IP address blocks: 209.89.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:cb:c1:2c:b7:42:96:68:b1:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=453b95bf-8e4e-48b1-a9cc-a31de4b1c980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:59:db:d9:91:94:9c:b1:a0:48:1a:8c:4f: 8f:d4:e8:7e:87:01:75:29:74:a4:c9:81:49:8f:20: 99:4f:61:ba:53:66:c9:b2:20:52:71:40:6d:6c:a4: 81:3e:34:2e:a2:aa:eb:a1:33:20:bf:00:6c:c8:a9: 73:6b:39:b6:69:f3:8a:08:85:20:50:d8:8f:94:07: c5:2e:87:52:78:17:bd:31:97:3b:b0:da:d1:67:fc: a6:9a:b1:3a:69:2f:b8:2e:7c:28:3f:02:f7:ec:6d: 77:b4:59:c6:64:13:90:a1:5a:d1:67:0a:e9:24:e6: b7:a4:ad:c9:60:20:ea:ae:39:10:76:72:8c:32:ad: bb:d9:58:ce:6f:25:1e:be:d7:6d:34:d2:85:0d:af: 76:5c:04:35:97:24:b5:22:b0:f6:00:c6:5c:b9:ec: f3:92:e9:be:c8:bc:c7:a4:61:9e:32:af:65:62:65: c8:32:af:64:79:5a:73:00:fc:14:21:dc:60:bd:d9: 69:be:30:12:f5:6d:87:62:e2:83:57:82:20:8c:46: d1:37:2a:7e:55:a1:62:b6:66:4a:8b:27:81:2b:f4: 2d:bd:67:a0:70:e1:99:b6:ae:69:b6:d3:fc:3c:0d: e0:f5:a3:b0:85:a5:2b:4c:75:94:e8:de:57:15:79: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7F:75:7B:78:7A:BC:D2:C5:E8:49:E3:18:D3:06:C9:21:C6:5B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e02c53ca-011b-3920-8c42-11cd63c0df14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.89.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:31:11:e6:bc:17:68:7c:7e:22:5b:eb:b9:1f:9e:28:34:56: 97:7e:84:9f:04:c4:d6:c3:e3:16:e4:b1:de:29:5d:f8:c5:79: a1:fb:b6:f3:92:d9:25:5f:7d:78:e5:ad:f9:00:12:8d:42:3c: c5:e4:90:58:ae:63:63:88:21:51:38:4c:7a:4a:9e:db:46:e4: 41:e0:24:bb:5c:46:5a:f3:10:db:b0:a9:68:c9:22:df:f0:0d: 93:60:5f:4b:64:d2:e3:70:2d:e6:1e:4b:f0:dc:47:b5:1b:9d: c9:b5:e4:73:a0:e4:33:8b:ec:c4:ab:31:be:55:b0:1d:aa:42: 7f:0e:e4:11:18:db:90:45:2c:e4:fa:b0:d9:e1:70:8d:30:c7: 62:ee:59:09:92:7a:5e:85:f0:7d:b2:20:93:55:92:3b:9c:59: 7d:c2:ce:99:bd:be:42:c5:c5:aa:53:d7:06:34:ea:1c:fd:d5: 68:73:3b:04:08:e6:80:bc:a9:b0:b1:88:79:3d:3a:6c:dd:c4: 88:dc:0d:8a:3b:18:51:c4:81:58:e6:39:71:f6:31:ca:11:33: 77:db:03:db:f9:cf:16:16:b0:19:4f:8f:3a:a0:d0:0e:d1:24: 04:bd:d7:1d:36:44:5c:dd:e3:9a:2f:63:73:8a:bf:ba:7c:5e: 17:d7:40:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcvBLLdClmixbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk NDUzYjk1YmYtOGU0ZS00OGIxLWE5Y2MtYTMxZGU0YjFjOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye1Z29mRlJyxoEgajE+P1Oh+hwF1KXSkyYFJ jyCZT2G6U2bJsiBScUBtbKSBPjQuoqrroTMgvwBsyKlzazm2afOKCIUgUNiPlAfF LodSeBe9MZc7sNrRZ/ymmrE6aS+4LnwoPwL37G13tFnGZBOQoVrRZwrpJOa3pK3J YCDqrjkQdnKMMq272VjObyUevtdtNNKFDa92XAQ1lyS1IrD2AMZcuezzkum+yLzH pGGeMq9lYmXIMq9keVpzAPwUIdxgvdlpvjAS9W2HYuKDV4IgjEbRNyp+VaFitmZK iyeBK/QtvWegcOGZtq5pttP8PA3g9aOwhaUrTHWU6N5XFXkVywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ/dXt4erzSxehJ4xjTBskhxlsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTAyYzUzY2EtMDExYi0z OTIwLThjNDItMTFjZDYzYzBkZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwxEea8F2h8fiJb67kfnig0Vpd+hJ8ExNbD4xbksd4pXfjFeaH7tvOS 2SVffXjlrfkAEo1CPMXkkFiuY2OIIVE4THpKnttG5EHgJLtcRlrzENuwqWjJIt/w DZNgX0tk0uNwLeYeS/DcR7Ubncm15HOg5DOL7MSrMb5VsB2qQn8O5BEY25BFLOT6 sNnhcI0wx2LuWQmSel6F8H2yIJNVkjucWX3Czpm9vkLFxapT1wY06hz91WhzOwQI 5oC8qbCxiHk9OmzdxIjcDYo7GFHEgVjmOXH2McoRM3fbA9v5zxYWsBlPjzqg0A7R JAS91x02RFzd45ovY3OKv7p8XhfXQL8= -----END CERTIFICATE-----Generated at Sat Jul 26 19:46:23 2025 by rpki-client