$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa File: e74295e1-3fea-318a-91c9-1152af362bcd.roa (raw, json) Hash identifier: GH6vhR2uvdeMecKq3bFXf2Dcgc6UmANCan0IZLgpsHU= Subject key identifier: 4B:59:10:00:D0:78:7A:20:C8:8E:9E:22:52:FA:0D:D7:98:A8:A8:3A Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A814648859ABADA26F5AE6200 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 10397 IP address blocks: 209.209.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:48:85:9a:ba:da:26:f5:ae:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=bb589879-1fec-41ea-9e17-53a8c4891f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:ee:79:3a:a2:7f:0b:31:de:d4:06:ea:98: f9:15:ea:61:87:f6:b7:ca:58:af:5c:47:71:c4:49: 92:56:2b:19:59:03:97:ae:9d:e3:de:36:91:f7:eb: b7:64:bc:76:06:bf:e6:c6:33:b9:04:86:8e:16:be: fe:52:27:18:13:e2:63:14:b7:f8:1f:fd:be:06:b4: 41:ca:66:0c:18:17:17:24:b6:43:af:04:4f:9f:3f: b1:a7:75:2d:c8:ee:47:96:e2:5d:ba:ef:c9:42:04: 89:d7:7d:65:53:93:d8:67:4b:8d:d1:5c:d1:23:2c: b8:54:dd:5c:95:1b:ae:d0:67:ea:3b:69:3c:3a:23: a5:d6:4a:19:ee:6b:e7:7d:c6:aa:72:86:4b:65:6d: 80:6a:c4:a9:58:90:a6:24:f7:ce:90:6a:cf:5e:c4: b4:3b:ed:9f:96:0f:af:cd:49:d9:61:61:2c:9a:22: f4:ad:ca:ef:be:cf:f5:bc:92:76:a1:f6:21:a9:9f: 90:2d:5b:89:c9:3a:3c:24:b1:4e:22:75:ee:85:a5: 2f:07:d9:b1:fd:db:41:1e:82:8f:79:34:52:ae:6e: 9c:3a:41:e8:4a:9a:5b:9b:8b:c8:16:ab:95:fb:8a: 39:24:7c:48:e8:6b:ff:6d:56:f4:9d:c6:06:fa:3c: 0c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:10:00:D0:78:7A:20:C8:8E:9E:22:52:FA:0D:D7:98:A8:A8:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/e74295e1-3fea-318a-91c9-1152af362bcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:11:c0:9b:91:91:f9:25:1c:11:0e:ed:44:e1:cd:b9:7f:4d: e5:ea:a8:c5:38:9a:b0:a7:81:eb:3f:18:9c:01:f0:fb:08:92: a6:9c:4b:7a:5b:9e:49:a8:34:f9:60:2b:09:4c:38:42:1b:db: 7c:59:d9:a3:0d:23:a8:71:90:40:e3:ab:9f:23:9d:39:af:c9: 10:59:25:b4:03:4c:b9:51:f5:34:96:3e:28:96:00:76:e0:29: 01:84:3f:07:3e:0a:ac:2d:7d:15:e0:4a:ae:60:bd:65:c3:cc: 1b:62:cf:1d:5c:dd:1f:e5:27:71:3c:fe:78:86:0f:7f:b5:3c: 9c:e7:c0:c7:86:d2:ca:d6:ea:f3:e7:d0:61:79:71:b7:a9:44: 2c:f6:29:39:0d:72:bd:af:fa:8d:8f:bb:8c:31:6d:a3:ee:d9: 0a:9d:af:ed:ef:1d:e8:94:e2:69:ed:69:f1:62:1e:7c:09:90: 5d:f4:dd:91:e3:b5:53:67:2d:99:09:d6:52:a6:1f:45:d3:25: 8b:1d:12:89:f2:0b:9e:54:a4:cc:a2:66:6b:62:26:69:ac:e4: 3d:94:14:98:3d:30:6f:98:ec:c0:6f:3d:6e:ce:c7:71:54:6c: fc:64:dc:e3:5e:f9:ad:8a:bc:73:af:b6:53:fd:3f:b4:e1:f3: 8a:ad:74:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkiFmrraJvWuYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YmI1ODk4NzktMWZlYy00MWVhLTllMTctNTNhOGM0ODkxZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY3ueTqifwsx3tQG6pj5Fephh/a3ylivXEdx xEmSVisZWQOXrp3j3jaR9+u3ZLx2Br/mxjO5BIaOFr7+UicYE+JjFLf4H/2+BrRB ymYMGBcXJLZDrwRPnz+xp3UtyO5HluJduu/JQgSJ131lU5PYZ0uN0VzRIyy4VN1c lRuu0GfqO2k8OiOl1koZ7mvnfcaqcoZLZW2AasSpWJCmJPfOkGrPXsS0O+2flg+v zUnZYWEsmiL0rcrvvs/1vJJ2ofYhqZ+QLVuJyTo8JLFOInXuhaUvB9mx/dtBHoKP eTRSrm6cOkHoSppbm4vIFquV+4o5JHxI6Gv/bVb0ncYG+jwM2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtZEADQeHogyI6eIlL6DdeYqKg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZTc0Mjk1ZTEtM2ZlYS0z MThhLTkxYzktMTE1MmFmMzYyYmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwRwJuRkfklHBEO7UThzbl/TeXqqMU4mrCnges/GJwB8PsIkqacS3pb nkmoNPlgKwlMOEIb23xZ2aMNI6hxkEDjq58jnTmvyRBZJbQDTLlR9TSWPiiWAHbg KQGEPwc+CqwtfRXgSq5gvWXDzBtizx1c3R/lJ3E8/niGD3+1PJznwMeG0srW6vPn 0GF5cbepRCz2KTkNcr2v+o2Pu4wxbaPu2Qqdr+3vHeiU4mntafFiHnwJkF303ZHj tVNnLZkJ1lKmH0XTJYsdEonyC55UpMyiZmtiJmms5D2UFJg9MG+Y7MBvPW7Ox3FU bPxk3ONe+a2KvHOvtlP9P7Th84qtdFo= -----END CERTIFICATE-----Generated at Sat Aug 2 14:00:10 2025 by rpki-client