$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa File: 96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa (raw, json) Hash identifier: cFNgX36xl4pQjDB3+YZewAQVKa/z31+xsZy1rrmv1HM= Subject key identifier: 48:4A:C6:5B:0B:C0:A1:7A:55:D4:70:63:85:84:F5:E2:7E:E4:F3:E4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7D16003812653FCD82E58D00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 395096 IP address blocks: 209.53.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:00:38:12:65:3f:cd:82:e5:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=1ab53609-5938-43ff-be7b-77c56b35f82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:33:5a:29:fd:d1:dd:39:10:b0:21:e4:8d: 39:e1:62:cb:63:64:6f:84:9d:4d:90:10:95:a5:64: e6:8b:17:fd:53:2b:07:6e:3a:e1:54:d7:a2:0e:0b: 4f:49:61:07:6c:74:34:8d:a6:32:ca:5a:4d:d9:52: 03:e8:51:90:66:ce:96:88:4f:c1:8b:f6:07:a5:27: 8c:7e:47:2d:9c:38:b5:4d:e1:11:92:7a:2b:7f:b6: 89:a3:8a:b8:a0:6e:4f:70:f1:64:85:83:38:3d:84: 3e:de:4c:d2:b1:68:82:be:4a:be:39:21:c5:1c:6c: a5:e9:cf:37:52:10:91:23:ab:29:f1:3b:c3:19:05: 7a:15:65:cd:20:24:44:24:19:f1:c2:c7:b3:83:aa: 51:5a:1e:2b:5f:f7:85:18:9f:cd:b5:95:b6:1b:80: 46:47:5c:41:41:80:87:f4:a5:5d:ef:2e:bd:7f:5b: fd:8b:ab:80:f5:b2:12:cd:28:e5:f1:ed:65:7a:82: 5f:30:1b:60:70:c3:61:8e:fd:27:7e:30:5b:af:e8: 96:07:91:29:0c:79:2f:3c:c0:d4:44:bc:b9:a8:10: 95:4a:3c:f2:02:7e:c4:c4:2a:d3:ac:43:cf:a3:d3: c5:f7:41:35:a7:3a:ce:cd:c3:69:2e:6d:d5:43:af: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4A:C6:5B:0B:C0:A1:7A:55:D4:70:63:85:84:F5:E2:7E:E4:F3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ed:a6:48:5b:be:4c:0f:f4:e3:5e:18:55:62:c8:42:94:f3:20: 24:2a:7b:a2:4e:af:4e:8a:cc:1b:ed:9e:6f:a6:d0:8e:0d:11: 37:54:cb:48:c9:63:ab:6f:d9:96:3b:7f:e1:a5:0d:81:cb:e5: fc:4d:f8:5e:0a:7f:f5:d2:0a:5a:e3:86:63:40:18:0f:46:99: a8:6c:f2:e3:e9:e5:cc:7c:76:22:bb:b9:ff:e0:4f:a4:e0:b7: c6:dc:4f:e8:2f:da:b8:f0:78:aa:c6:52:b4:11:e3:82:10:1d: 0c:2a:92:ec:29:74:dc:4b:de:99:70:ad:77:62:aa:69:70:3b: 2e:37:72:da:3c:08:7b:cb:cc:20:3e:2d:e6:24:6c:ca:31:9c: b3:63:a3:40:69:67:55:f4:b6:b9:4c:1c:23:1e:41:39:19:ac: e5:22:eb:5b:1b:4a:d6:bc:c0:08:f3:33:3b:49:62:c6:4f:82: c6:1e:d8:b6:93:d6:44:5c:ac:b7:fa:13:a0:d0:2e:b2:2d:c7: 8d:f5:89:46:75:bd:23:fe:8f:e2:1b:fd:fe:9d:55:87:b9:bb: 98:48:07:5a:62:cc:ce:9e:ab:3b:a0:58:20:7a:eb:f4:e5:0a: 64:8d:a2:0e:39:4d:fa:af:0d:ef:55:3b:a4:6c:34:25:36:02: 88:c6:11:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgA4EmU/zYLljQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk MWFiNTM2MDktNTkzOC00M2ZmLWJlN2ItNzdjNTZiMzVmODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0czWin90d05ELAh5I054WLLY2RvhJ1NkBCV pWTmixf9UysHbjrhVNeiDgtPSWEHbHQ0jaYyylpN2VID6FGQZs6WiE/Bi/YHpSeM fkctnDi1TeERknorf7aJo4q4oG5PcPFkhYM4PYQ+3kzSsWiCvkq+OSHFHGyl6c83 UhCRI6sp8TvDGQV6FWXNICREJBnxwsezg6pRWh4rX/eFGJ/NtZW2G4BGR1xBQYCH 9KVd7y69f1v9i6uA9bISzSjl8e1leoJfMBtgcMNhjv0nfjBbr+iWB5EpDHkvPMDU RLy5qBCVSjzyAn7ExCrTrEPPo9PF90E1pzrOzcNpLm3VQ681xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhKxlsLwKF6VdRwY4WE9eJ+5PPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTZmOWEzZDQtNWVjYy0z MTMwLWIwMzctMWFmMDRiMWUxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO2mSFu+TA/0414YVWLIQpTzICQqe6JOr06KzBvtnm+m0I4NETdUy0jJ Y6tv2ZY7f+GlDYHL5fxN+F4Kf/XSClrjhmNAGA9Gmahs8uPp5cx8diK7uf/gT6Tg t8bcT+gv2rjweKrGUrQR44IQHQwqkuwpdNxL3plwrXdiqmlwOy43cto8CHvLzCA+ LeYkbMoxnLNjo0BpZ1X0trlMHCMeQTkZrOUi61sbSta8wAjzMztJYsZPgsYe2LaT 1kRcrLf6E6DQLrItx431iUZ1vSP+j+Ib/f6dVYe5u5hIB1pizM6eqzugWCB66/Tl CmSNog45TfqvDe9VO6RsNCU2AojGEaw= -----END CERTIFICATE-----Generated at Sat Jul 12 05:14:25 2025 by rpki-client