$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa File: f18747e6-7bea-32fa-877d-0db804fae88a.roa (raw, json) Hash identifier: ST+UtE2J+zM2tJ6cOAIj9vJ6LtGV7pvGLH6Do5zQP0g= Subject key identifier: 51:52:3C:0C:C5:5C:03:3C:C5:25:89:CC:28:AE:1E:B1:C9:99:24:8D Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A6DBB3E636963635E57763300 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 10397 IP address blocks: 209.209.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:3e:63:69:63:63:5e:57:76:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=41a01450-1e69-448a-b177-49d9229a37f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:10:b2:82:30:71:df:f9:dc:3c:0f:df:8d: 3c:99:8a:f6:fe:29:dd:ed:fd:c8:b6:1f:a2:3c:78: 39:e5:50:61:ca:e7:17:14:b6:07:af:91:c9:c8:59: d1:db:d4:9e:ca:48:e1:56:7c:0a:c6:c8:0d:b2:6f: c0:9a:2a:2c:07:2e:2d:16:b8:36:73:3b:fb:16:19: 46:0a:c5:b7:0a:e7:9d:52:fe:2e:c1:12:fd:a5:9a: ab:33:a2:4c:3b:32:64:8f:61:d3:fd:c2:87:6c:52: c1:0f:31:7d:f3:91:bf:e2:16:f9:96:17:88:8b:e4: 1e:09:9e:97:02:69:a5:5d:5a:62:d2:0a:52:35:e5: 35:bc:19:d2:17:59:00:41:f9:f7:a6:aa:3d:eb:fc: 48:c4:77:5f:cb:59:78:22:4e:c8:66:87:13:36:77: 6f:14:14:e2:88:5c:37:bf:63:f3:df:9c:57:b1:38: 95:00:ef:22:bb:41:7e:06:1d:ce:69:34:c9:15:25: a0:a6:01:42:2d:38:bb:af:26:d9:7e:27:0d:0d:00: 70:94:11:4d:7c:b5:5c:4d:50:00:5f:e2:e1:76:6e: 2d:a5:12:c5:e8:58:3e:cd:38:36:f1:5a:49:c7:13: 60:26:6c:6a:a0:85:40:e2:59:75:63:0b:bd:0e:ad: 18:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:52:3C:0C:C5:5C:03:3C:C5:25:89:CC:28:AE:1E:B1:C9:99:24:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f18747e6-7bea-32fa-877d-0db804fae88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6e:0a:39:87:cb:da:e0:44:ae:59:b3:ea:41:be:82:38:6c: d0:97:67:16:ac:cd:c0:55:10:c2:4b:a9:93:d4:bf:bf:40:2e: a2:07:64:fa:37:a1:f1:e2:da:f6:e0:7e:19:cc:82:d7:5c:aa: 39:ce:f0:06:4c:e5:c4:f6:b1:98:48:cf:51:42:3a:85:ef:01: c1:48:04:cb:c9:6a:40:29:57:b1:a8:0e:2c:be:1f:4b:73:aa: 84:99:c3:ad:e9:ed:80:dd:f2:02:98:45:07:4b:f0:61:82:4e: d0:70:86:56:cd:9d:65:61:6c:b9:58:9d:cd:05:0e:6a:c3:56: 7d:ec:d7:82:c7:bd:76:2b:b7:6a:16:38:51:1a:1a:4a:90:08: 8f:e0:d5:93:a3:13:de:0e:df:24:ba:5e:e3:cb:54:78:6b:25: fb:b5:f3:1a:df:68:28:dd:5e:53:88:3c:68:80:7b:a2:d2:3b: 50:8c:ff:31:af:c5:b3:ac:41:b2:a6:3a:96:0b:fd:18:4d:4e: 53:1a:e3:60:7e:6e:93:64:19:29:3d:4a:4e:12:f6:8c:50:e7: b1:d5:f1:88:f1:0f:2c:31:00:c8:8e:cb:cd:7c:ea:54:6c:f3: 4c:d8:97:8d:c4:a4:61:23:c2:c0:10:6f:c3:56:b3:f6:f0:f9: 37:dc:f2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptuz5jaWNjXld2MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NDFhMDE0NTAtMWU2OS00NDhhLWIxNzctNDlkOTIyOWEzN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJEQsoIwcd/53DwP3408mYr2/ind7f3Ith+i PHg55VBhyucXFLYHr5HJyFnR29SeykjhVnwKxsgNsm/AmiosBy4tFrg2czv7FhlG CsW3CuedUv4uwRL9pZqrM6JMOzJkj2HT/cKHbFLBDzF985G/4hb5lheIi+QeCZ6X AmmlXVpi0gpSNeU1vBnSF1kAQfn3pqo96/xIxHdfy1l4Ik7IZocTNndvFBTiiFw3 v2Pz35xXsTiVAO8iu0F+Bh3OaTTJFSWgpgFCLTi7rybZficNDQBwlBFNfLVcTVAA X+Lhdm4tpRLF6Fg+zTg28VpJxxNgJmxqoIVA4ll1Ywu9Dq0YBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFSPAzFXAM8xSWJzCiuHrHJmSSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjE4NzQ3ZTYtN2JlYS0z MmZhLTg3N2QtMGRiODA0ZmFlODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJuCjmHy9rgRK5Zs+pBvoI4bNCXZxaszcBVEMJLqZPUv79ALqIHZPo3 ofHi2vbgfhnMgtdcqjnO8AZM5cT2sZhIz1FCOoXvAcFIBMvJakApV7GoDiy+H0tz qoSZw63p7YDd8gKYRQdL8GGCTtBwhlbNnWVhbLlYnc0FDmrDVn3s14LHvXYrt2oW OFEaGkqQCI/g1ZOjE94O3yS6XuPLVHhrJfu18xrfaCjdXlOIPGiAe6LSO1CM/zGv xbOsQbKmOpYL/RhNTlMa42B+bpNkGSk9Sk4S9oxQ57HV8YjxDywxAMiOy8186lRs 80zYl43EpGEjwsAQb8NWs/bw+Tfc8sA= -----END CERTIFICATE-----Generated at Sat Aug 2 14:15:27 2025 by rpki-client