$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa File: 1454b60f-a984-384e-8d51-13e18a917820.roa (raw, json) Hash identifier: OKsrS0wtOH8qe3JpmnUO5VQtSceI5+BmJVmGVbCUUn0= Subject key identifier: 46:F8:A8:58:57:8F:18:D3:F3:27:50:3B:78:51:EE:51:32:78:CE:5D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A560053CDE4F56B79698DF500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 19341 IP address blocks: 209.20.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:53:cd:e4:f5:6b:79:69:8d:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=d9a527e4-968c-4479-8605-504d49054390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:e2:74:6d:cb:94:33:f5:a6:0d:e6:bc:80: 7d:0b:71:24:b3:b0:43:00:93:39:fb:3d:be:50:51: 35:02:98:c2:a6:68:49:7c:5f:d6:46:5d:8b:dd:7f: b1:95:b7:64:d9:05:05:49:25:9d:fd:4e:ec:9e:4f: 00:87:10:1b:02:0f:90:93:d8:01:35:b2:de:c8:50: ae:70:cf:9f:c4:bb:9a:de:e4:d7:16:e5:0c:f5:99: 70:fd:41:45:f7:c8:d5:54:98:77:7c:d2:7d:4e:3b: bd:69:14:9f:b3:9b:63:57:7b:de:d8:65:04:3f:fe: 1f:87:50:82:d7:cc:b9:c8:47:50:ab:f0:90:86:e0: 98:c4:2e:1c:d2:9d:92:41:69:5e:76:c2:56:46:b0: 91:11:9b:04:e7:c8:a9:cb:93:ca:4e:de:5d:bd:8e: 49:a4:48:64:c8:39:13:1e:0c:b3:a0:a0:c7:51:ee: 32:00:9b:71:d7:59:57:e1:f4:b7:ab:15:23:58:6d: 24:95:2e:04:c5:48:f2:43:55:42:1b:33:ba:6e:cc: 67:7b:ac:70:d7:2d:4b:29:10:24:72:af:11:f2:20: 17:71:cc:8e:cd:cb:48:83:75:e2:9d:e8:82:db:64: 13:0d:0a:57:eb:36:6e:00:1c:6d:ff:81:15:70:35: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F8:A8:58:57:8F:18:D3:F3:27:50:3B:78:51:EE:51:32:78:CE:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1454b60f-a984-384e-8d51-13e18a917820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:05:a1:5e:44:fe:e7:fd:46:82:5b:53:79:47:26:61:e5:8a: e9:a9:32:ff:d1:a0:04:9b:9e:b2:4d:da:39:8a:cd:2d:d4:84: 3b:46:8b:c3:e0:55:30:b3:fe:54:9c:77:39:14:6b:78:90:11: 4f:a2:90:c2:e9:6f:c1:d3:fe:a7:f9:6e:48:75:60:68:cb:4e: 5f:cd:7d:22:3c:2c:0e:aa:2e:51:15:ed:c4:15:b0:bd:4f:b3: a7:17:45:53:2a:65:e0:a6:23:ef:32:6c:a7:f7:4f:54:19:4f: 59:e4:3b:55:d0:8a:08:62:e1:ce:3b:3e:78:48:5e:bb:6d:9f: cf:03:fa:2e:5f:b7:65:23:68:1a:86:0a:c0:83:46:78:8f:c0: 23:b2:ef:fc:2b:32:5e:c3:62:c6:aa:0f:7b:0d:ce:4d:c6:9c: 75:e2:cf:4a:3d:be:60:ab:13:99:dd:cb:ce:f5:46:da:1c:14: 3e:22:28:59:c2:3b:a0:7f:f7:01:2a:b6:4f:e0:0e:53:e4:94: cd:c9:1d:a7:08:fb:f1:15:5a:fb:d8:49:f8:be:cd:93:a2:0b: f9:45:3c:e9:a0:11:24:57:fc:1b:11:8f:a9:98:ca:7a:83:f6: 1e:21:89:83:e8:9a:9f:73:61:c0:9a:b7:a2:d9:52:16:7f:9b: d9:83:50:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFPN5PVreWmN9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk ZDlhNTI3ZTQtOTY4Yy00NDc5LTg2MDUtNTA0ZDQ5MDU0MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQXidG3LlDP1pg3mvIB9C3Eks7BDAJM5+z2+ UFE1ApjCpmhJfF/WRl2L3X+xlbdk2QUFSSWd/U7snk8AhxAbAg+Qk9gBNbLeyFCu cM+fxLua3uTXFuUM9Zlw/UFF98jVVJh3fNJ9Tju9aRSfs5tjV3ve2GUEP/4fh1CC 18y5yEdQq/CQhuCYxC4c0p2SQWledsJWRrCREZsE58ipy5PKTt5dvY5JpEhkyDkT HgyzoKDHUe4yAJtx11lX4fS3qxUjWG0klS4ExUjyQ1VCGzO6bsxne6xw1y1LKRAk cq8R8iAXccyOzctIg3XineiC22QTDQpX6zZuABxt/4EVcDX7sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb4qFhXjxjT8ydQO3hR7lEyeM5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTQ1NGI2MGYtYTk4NC0z ODRlLThkNTEtMTNlMThhOTE3ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYFoV5E/uf9RoJbU3lHJmHliumpMv/RoASbnrJN2jmKzS3UhDtGi8Pg VTCz/lScdzkUa3iQEU+ikMLpb8HT/qf5bkh1YGjLTl/NfSI8LA6qLlEV7cQVsL1P s6cXRVMqZeCmI+8ybKf3T1QZT1nkO1XQighi4c47PnhIXrttn88D+i5ft2UjaBqG CsCDRniPwCOy7/wrMl7DYsaqD3sNzk3GnHXiz0o9vmCrE5ndy871RtocFD4iKFnC O6B/9wEqtk/gDlPklM3JHacI+/EVWvvYSfi+zZOiC/lFPOmgESRX/BsRj6mYynqD 9h4hiYPomp9zYcCat6LZUhZ/m9mDUKc= -----END CERTIFICATE-----Generated at Fri Jul 4 21:11:57 2025 by rpki-client