$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa File: edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa (raw, json) Hash identifier: P5xJrrI62Odvis2XJHPe5uHjsY3E+cqdIUPm/7QRIGQ= Subject key identifier: 80:05:EE:48:52:D5:DF:89:5D:A6:2A:0F:26:35:8F:D1:EF:34:71:8B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55D0F26E104482256C0A80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 15247 IP address blocks: 209.53.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:d0:f2:6e:10:44:82:25:6c:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=79657bca-096f-442a-b491-ff596ca23584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:0b:df:56:41:0d:cd:7e:29:2d:16:fa:f1: 6f:77:76:e4:27:de:f8:da:74:54:e1:12:f4:f9:46: 79:66:84:d9:26:b5:5b:5a:b5:3f:53:f9:af:24:e8: 9e:32:23:df:14:91:cd:de:bf:44:5b:98:93:6d:04: 33:50:7d:19:96:d1:ad:19:f4:8a:e9:b3:5a:9b:3e: de:b5:11:41:8e:21:0c:85:4d:c3:cc:92:77:53:48: c1:e4:ba:8b:71:92:ef:6e:ee:3e:ea:c5:ec:12:f9: 37:d6:04:6c:5a:cc:4d:bd:13:9a:79:4e:94:22:38: 6c:b3:e4:6c:c4:da:7a:2d:11:fb:14:67:0e:e7:3a: 85:62:4c:33:0a:0c:f1:d1:60:af:f9:a6:c3:2d:6b: bf:ba:45:fa:aa:4c:71:1e:24:57:74:dc:c2:f5:b8: 5a:50:4f:2c:55:f8:3b:41:7c:1a:00:9f:c5:58:a7: 0f:74:70:e9:36:d4:2c:96:5d:2c:2d:8c:30:85:bd: a4:59:6c:ca:fd:f2:78:19:31:8a:53:c3:5c:8f:df: c3:f6:ea:6a:dc:b0:b9:e1:83:f3:ff:0f:1f:82:77: 32:5c:71:30:4c:6e:52:b6:97:aa:21:12:77:32:22: eb:03:5e:59:95:6d:12:fb:5f:c0:a9:0f:cb:8f:74: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:05:EE:48:52:D5:DF:89:5D:A6:2A:0F:26:35:8F:D1:EF:34:71:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/edd4aceb-46aa-3f4d-ad78-a2abaf603c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:46:5d:51:48:fc:0a:d3:ea:96:30:db:d4:bb:a4:1d:2c:9e: 70:5a:3e:27:1f:8d:e1:c6:56:16:a8:3d:46:dd:17:18:c9:2e: b8:d5:08:a4:38:bf:12:10:38:d5:1c:d8:6a:75:d9:33:b7:94: 20:cc:77:b1:8d:69:36:3a:20:19:31:c1:3e:1a:62:7e:04:a7: 54:dd:2f:22:97:5d:94:24:a5:84:c7:04:54:82:01:e4:05:9e: c6:cc:fb:3b:63:e9:17:8d:59:32:66:15:a5:bb:17:ae:00:73: a3:d6:e2:b6:2b:5b:ea:b3:29:f2:95:b6:29:bb:3d:a7:21:36: 85:95:5b:fa:fa:ec:87:c7:32:d9:15:2b:31:83:d8:be:c7:63: 26:8e:e2:05:bd:f1:38:05:8d:a5:2e:26:59:4b:14:af:75:4d: 9a:06:ce:ee:b4:f2:6c:45:82:20:14:0e:93:b9:80:e7:d4:78: 03:12:df:3f:8d:a6:2d:35:b0:87:6e:95:d8:30:97:fc:16:ab: 23:4c:f0:a4:8b:3f:af:68:cf:64:44:42:de:57:ad:3e:62:54: e4:87:ce:07:ff:fd:d3:e2:95:84:90:0f:fb:97:aa:f3:e9:e2: 07:f2:67:ec:db:e1:f5:8b:80:32:8a:88:8b:e0:34:e0:d4:e8: 99:45:4f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdDybhBEgiVsCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk Nzk2NTdiY2EtMDk2Zi00NDJhLWI0OTEtZmY1OTZjYTIzNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7sL31ZBDc1+KS0W+vFvd3bkJ9742nRU4RL0 +UZ5ZoTZJrVbWrU/U/mvJOieMiPfFJHN3r9EW5iTbQQzUH0ZltGtGfSK6bNamz7e tRFBjiEMhU3DzJJ3U0jB5LqLcZLvbu4+6sXsEvk31gRsWsxNvROaeU6UIjhss+Rs xNp6LRH7FGcO5zqFYkwzCgzx0WCv+abDLWu/ukX6qkxxHiRXdNzC9bhaUE8sVfg7 QXwaAJ/FWKcPdHDpNtQsll0sLYwwhb2kWWzK/fJ4GTGKU8Ncj9/D9upq3LC54YPz /w8fgncyXHEwTG5StpeqIRJ3MiLrA15ZlW0S+1/AqQ/Lj3TkSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAF7khS1d+JXaYqDyY1j9HvNHGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZWRkNGFjZWItNDZhYS0z ZjRkLWFkNzgtYTJhYmFmNjAzYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpGXVFI/ArT6pYw29S7pB0snnBaPicfjeHGVhaoPUbdFxjJLrjVCKQ4 vxIQONUc2Gp12TO3lCDMd7GNaTY6IBkxwT4aYn4Ep1TdLyKXXZQkpYTHBFSCAeQF nsbM+ztj6ReNWTJmFaW7F64Ac6PW4rYrW+qzKfKVtim7PachNoWVW/r67IfHMtkV KzGD2L7HYyaO4gW98TgFjaUuJllLFK91TZoGzu608mxFgiAUDpO5gOfUeAMS3z+N pi01sIduldgwl/wWqyNM8KSLP69oz2REQt5XrT5iVOSHzgf//dPilYSQD/uXqvPp 4gfyZ+zb4fWLgDKKiIvgNODU6JlFTyQ= -----END CERTIFICATE-----Generated at Sat Jul 26 19:43:29 2025 by rpki-client