$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa File: 1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa (raw, json) Hash identifier: Sbc0CpTmapYN4zlwnhE16RKbS7mzH0hmT0N/ja2PsCI= Subject key identifier: DB:A1:59:5A:24:E2:51:26:55:BA:FB:B2:25:27:9F:AE:44:02:6A:E7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584AF0F141CA880F8EDBAE2CFA00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 7861 IP address blocks: 209.29.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:41:ca:88:0f:8e:db:ae:2c:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e76ec153-3083-4fdf-8ee3-aa9150b35260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:52:3d:3f:86:47:d9:8a:43:cc:21:5d:de:17: c7:47:3f:8e:00:0d:af:71:f6:95:37:60:5d:23:fc: 97:43:6e:89:43:42:90:ec:fd:27:9e:a9:a8:7c:7c: 8e:65:f7:07:9f:bb:ab:c0:4b:e7:82:78:fd:ad:bd: 9a:9b:f5:d6:80:43:57:bf:91:3d:84:f7:f9:9b:40: ea:e4:5b:65:8b:e1:eb:bd:6c:09:1a:a4:71:1a:d6: 9a:c9:f4:de:f9:dc:90:06:50:86:70:da:31:e9:0c: e7:57:e4:21:fe:fc:0a:96:d9:5a:12:33:7d:c3:f6: eb:b7:38:a3:08:9a:b0:a2:11:d7:e1:ef:49:dc:22: 01:95:c8:bd:49:78:a6:fa:b4:bf:26:c9:c2:7e:1d: 89:d5:16:99:c2:b2:48:6a:3b:7d:a9:eb:24:bd:79: 92:19:d6:5b:79:08:d4:13:c1:d2:b0:e6:39:82:c7: 44:9a:dc:d4:5f:aa:fd:49:df:a0:ec:13:8c:46:96: 2b:ca:b5:cc:e2:4f:5c:78:0b:4f:76:44:da:78:cb: 96:1a:a6:cf:50:bd:1f:8b:94:69:95:1c:6f:6f:24: 08:b7:ab:ef:2a:66:6b:74:30:3d:7b:88:f4:2b:2b: 55:ba:72:66:fe:be:ab:0d:ce:bc:ac:92:ae:e6:05: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A1:59:5A:24:E2:51:26:55:BA:FB:B2:25:27:9F:AE:44:02:6A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1bb85a3f-0989-370d-a1bd-9f8cf8eb710c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d4:e0:e5:26:94:8e:c9:21:a8:8b:06:6a:77:60:46:6f:1c: b2:0b:4b:39:c8:83:73:ad:40:7e:3f:fb:b9:06:3f:76:c3:19: 5f:39:4f:1b:c5:16:9d:fc:b4:30:f6:c7:94:69:4f:db:be:d5: de:ac:53:5b:22:79:3c:6b:9c:74:c3:e5:b1:93:b8:f5:8e:49: 05:49:5f:08:fb:5d:83:37:64:f6:1b:15:da:16:dc:86:c2:cc: d4:25:91:17:01:33:29:40:3d:e8:74:64:a6:dd:6e:e2:55:66: 83:68:b3:11:26:8e:e2:3d:41:26:60:ed:33:83:6b:9a:e6:6d: af:a4:9c:5b:1b:1e:47:46:92:18:6d:e5:ce:1b:65:bd:0c:67: 6e:d6:cd:05:9c:8f:9f:5f:1d:9a:f4:c7:5e:4d:3d:cf:c3:00: 07:a9:5c:45:1b:6b:5f:4a:48:fd:f2:49:1d:47:58:39:79:d7: 17:c8:b0:ab:c3:8e:71:ea:98:90:56:19:0c:e3:e9:30:05:b4: 2d:ad:7a:8e:4f:8f:c3:af:f2:a6:e5:e9:3c:1e:14:de:1f:12: cf:06:98:77:c2:46:4b:21:b1:fd:1b:56:97:01:9e:f8:7f:45: f7:e3:19:d1:ef:84:c2:95:4e:14:3a:fe:c2:b0:2e:95:8b:94: cb:a6:ac:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UHKiA+O264s+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTc2ZWMxNTMtMzA4My00ZmRmLThlZTMtYWE5MTUwYjM1MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFI9P4ZH2YpDzCFd3hfHRz+OAA2vcfaVN2Bd I/yXQ26JQ0KQ7P0nnqmofHyOZfcHn7urwEvngnj9rb2am/XWgENXv5E9hPf5m0Dq 5Ftli+HrvWwJGqRxGtaayfTe+dyQBlCGcNox6QznV+Qh/vwKltlaEjN9w/brtzij CJqwohHX4e9J3CIBlci9SXim+rS/JsnCfh2J1RaZwrJIajt9qeskvXmSGdZbeQjU E8HSsOY5gsdEmtzUX6r9Sd+g7BOMRpYryrXM4k9ceAtPdkTaeMuWGqbPUL0fi5Rp lRxvbyQIt6vvKmZrdDA9e4j0KytVunJm/r6rDc68rJKu5gWEUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuhWVok4lEmVbr7siUnn65EAmrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWJiODVhM2YtMDk4OS0z NzBkLWExYmQtOWY4Y2Y4ZWI3MTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R2hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvU4OUmlI7JIaiLBmp3YEZvHLILSznIg3OtQH4/+7kGP3bDGV85TxvF Fp38tDD2x5RpT9u+1d6sU1sieTxrnHTD5bGTuPWOSQVJXwj7XYM3ZPYbFdoW3IbC zNQlkRcBMylAPeh0ZKbdbuJVZoNosxEmjuI9QSZg7TODa5rmba+knFsbHkdGkhht 5c4bZb0MZ27WzQWcj59fHZr0x15NPc/DAAepXEUba19KSP3ySR1HWDl51xfIsKvD jnHqmJBWGQzj6TAFtC2teo5Pj8Ov8qbl6TweFN4fEs8GmHfCRkshsf0bVpcBnvh/ RffjGdHvhMKVThQ6/sKwLpWLlMumrHM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:40 2025 by rpki-client