$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa File: f3afbd83-49e1-3165-a905-705c78b5f80a.roa (raw, json) Hash identifier: /nEQojhjgguqfzw35HtrDFZkp+YSaskp+orx9C523z8= Subject key identifier: B6:F6:12:B1:20:74:A5:12:80:AF:87:83:AC:85:4E:74:F5:CB:C3:BF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A6C55CA6F7527562367D0C680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 19905 IP address blocks: 209.53.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:ca:6f:75:27:56:23:67:d0:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=9e66cf85-8dd2-4ae8-b660-164d2cf1ae8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:3c:01:97:20:6f:56:31:3a:bb:5a:f6:05: 57:12:c2:9a:6d:30:14:f5:63:9c:06:ed:bf:86:59: 23:ab:de:61:e4:ed:be:cf:9c:75:a7:e3:2f:30:03: d1:25:15:0f:8f:1a:7e:97:b4:5e:d2:23:2d:ae:b3: da:92:9b:ad:05:60:6b:d1:7b:c6:1e:c0:db:65:4d: 44:80:c0:f2:2e:38:f4:06:e2:3c:b1:a6:d5:99:15: 06:e8:0e:51:f3:25:e4:c4:cd:9e:43:5c:d8:93:49: 66:b9:ae:d7:f3:ee:e7:8d:6e:91:51:68:17:b3:1b: c1:8e:ad:50:bd:06:98:1c:74:30:a0:28:c8:eb:5e: 6e:97:36:71:8c:88:44:c5:be:6d:d2:09:c3:3e:eb: df:ab:76:11:17:25:18:91:39:a7:28:1a:55:af:ad: e9:70:b1:8a:04:12:77:74:1b:b1:ec:fb:15:e9:ca: 31:b3:57:f4:82:29:52:f0:27:8d:83:fe:96:35:a6: 02:3a:e8:cb:bb:e3:39:4a:12:30:88:49:22:c1:f7: 9a:35:4e:88:b9:c5:16:51:75:3c:0d:ad:18:96:ef: 98:de:9e:9f:df:0d:59:ab:1c:db:75:86:bd:48:a2: 58:4b:67:2e:9e:b3:9d:b9:e5:85:99:a7:c0:d4:ff: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F6:12:B1:20:74:A5:12:80:AF:87:83:AC:85:4E:74:F5:CB:C3:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f3afbd83-49e1-3165-a905-705c78b5f80a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d8:09:2c:21:d6:08:ea:0d:fb:a8:5c:1d:c4:44:ab:a2:dd: 17:e3:a6:ad:d7:d6:4e:e7:f7:1f:7f:09:56:cc:67:d4:f6:4f: 0e:ce:58:28:39:ef:5e:c3:88:e6:cc:05:76:e3:28:61:fd:d0: 36:2a:05:55:3b:52:c6:35:a3:ef:a3:09:c5:b5:0f:36:61:16: f3:60:bc:85:55:1e:71:49:bf:68:bf:b1:26:55:1f:70:1a:90: 7c:8a:5b:8c:d6:0b:83:61:9f:94:8d:4b:f4:0f:47:7f:b8:25: 77:f6:36:f5:c0:73:16:8d:c1:25:63:df:18:72:86:ed:cf:de: a0:51:f3:02:6f:b3:d0:e2:a4:b6:a0:78:b2:e1:4b:a1:c1:2c: cc:b8:2f:fb:94:4e:3d:24:a2:93:35:2c:de:76:1f:8b:d2:ed: 32:91:9b:e1:f2:da:16:b5:e3:bb:4e:fa:45:5b:81:51:2f:46: 88:a6:e5:c9:a3:20:14:8a:ca:87:dd:36:66:aa:f9:ae:3c:f2: 35:1b:01:3e:98:06:4b:38:fe:66:8a:a6:b3:97:0b:81:84:27: e6:cd:af:e6:3b:d7:24:1c:43:81:80:95:a9:38:3e:f2:19:d1: a6:50:54:49:cf:21:a0:21:5c:e5:af:1e:f8:d6:c5:52:81:6f: 4d:8b:84:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcpvdSdWI2fQxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OWU2NmNmODUtOGRkMi00YWU4LWI2NjAtMTY0ZDJjZjFhZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3I8AZcgb1YxOrta9gVXEsKabTAU9WOcBu2/ hlkjq95h5O2+z5x1p+MvMAPRJRUPjxp+l7Re0iMtrrPakputBWBr0XvGHsDbZU1E gMDyLjj0BuI8sabVmRUG6A5R8yXkxM2eQ1zYk0lmua7X8+7njW6RUWgXsxvBjq1Q vQaYHHQwoCjI615ulzZxjIhExb5t0gnDPuvfq3YRFyUYkTmnKBpVr63pcLGKBBJ3 dBux7PsV6coxs1f0gilS8CeNg/6WNaYCOujLu+M5ShIwiEkiwfeaNU6IucUWUXU8 Da0Ylu+Y3p6f3w1ZqxzbdYa9SKJYS2cunrOdueWFmafA1P/ciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb2ErEgdKUSgK+Hg6yFTnT1y8O/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjNhZmJkODMtNDllMS0z MTY1LWE5MDUtNzA1Yzc4YjVmODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvYCSwh1gjqDfuoXB3ERKui3Rfjpq3X1k7n9x9/CVbMZ9T2Tw7OWCg5 717DiObMBXbjKGH90DYqBVU7UsY1o++jCcW1DzZhFvNgvIVVHnFJv2i/sSZVH3Aa kHyKW4zWC4Nhn5SNS/QPR3+4JXf2NvXAcxaNwSVj3xhyhu3P3qBR8wJvs9DipLag eLLhS6HBLMy4L/uUTj0kopM1LN52H4vS7TKRm+Hy2ha147tO+kVbgVEvRoim5cmj IBSKyofdNmaq+a488jUbAT6YBks4/maKprOXC4GEJ+bNr+Y71yQcQ4GAlak4PvIZ 0aZQVEnPIaAhXOWvHvjWxVKBb02LhIA= -----END CERTIFICATE-----Generated at Fri Jul 25 19:26:10 2025 by rpki-client