$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa File: 35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa (raw, json) Hash identifier: zXbInDYLaSjHF6CZvPjRjMo3BhvQeDm0E1AwbEZN5m4= Subject key identifier: 28:E0:E4:6F:B0:41:E1:7C:BD:7B:D4:2C:09:C4:7B:03:6B:44:4F:A3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7085EF4B5EFFA548BB123280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 7861 IP address blocks: 209.20.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:ef:4b:5e:ff:a5:48:bb:12:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=c301c3f6-d35c-4402-867b-d1080340b206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:39:40:c1:31:18:1f:b9:0b:34:24:f1:79: 1c:a4:7a:8b:93:82:86:1d:2a:8f:36:de:21:08:88: cb:ad:28:c4:6c:9b:0e:36:6d:c8:e7:4d:b1:b7:da: ab:e4:b3:a3:a2:5f:98:09:3e:c5:e0:fa:a1:46:0d: 07:4f:bb:69:5f:07:a8:69:5e:cc:68:9b:c6:7b:c0: 0a:d7:72:a4:57:b8:6f:f2:28:5b:ea:c4:6f:8d:68: 0a:03:1f:80:62:ca:ea:0e:39:73:3c:c1:db:19:4d: 03:9e:6c:c8:49:a4:eb:a1:f4:4f:4c:4b:22:e2:08: c6:56:ca:a9:86:3e:db:8f:6e:7c:8f:b8:06:46:c7: 60:f2:0b:f8:df:47:c8:44:dc:dd:9c:6d:93:62:15: b3:c5:77:62:b5:27:65:35:2f:dd:53:1b:4c:44:92: 0e:ff:67:20:cd:3a:b9:fa:c2:4e:2c:a8:b3:bd:22: 82:9a:39:5a:4a:87:72:c8:26:26:61:9a:9c:c9:33: 9d:ad:f6:3b:53:5f:8f:e9:b4:55:00:02:8d:3f:61: 24:b7:59:ae:04:e9:3d:92:04:e7:13:9f:1c:f7:18: f6:3a:bd:0c:e1:5a:a1:98:33:b3:1b:c1:e9:c4:06: 83:7b:27:61:16:c4:7a:a3:7d:41:76:4b:29:2c:ca: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E0:E4:6F:B0:41:E1:7C:BD:7B:D4:2C:09:C4:7B:03:6B:44:4F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/35a49db3-a778-3bfc-877a-c9cea9e5abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:29:7f:f4:8c:35:31:0f:23:56:a9:6a:31:2b:ba:ca:28:a1: 88:fc:86:2d:85:b1:6f:bb:24:09:41:9a:7c:92:6b:0d:74:9e: 30:28:11:9b:3b:d2:99:b0:32:06:43:e8:19:bd:20:28:72:bf: 1e:b9:5c:ff:9e:ad:e4:d5:48:36:bb:28:3d:a2:91:a2:5a:77: 96:ba:0f:78:be:19:c3:47:5d:fa:7e:03:03:67:e0:b3:99:2a: ca:c3:e7:f1:25:ae:1a:13:86:11:d1:1b:7d:41:0b:92:dc:cd: 1c:1d:13:3d:fa:0c:b9:e0:ac:b8:44:11:6f:86:9f:65:38:07: f0:e9:c7:77:ab:71:7d:d4:83:19:64:0a:06:aa:65:c2:78:9c: f7:80:96:9f:6b:ad:45:4a:3d:77:66:2f:f0:a0:02:f8:e8:47: 37:9a:a1:7f:4e:f1:7f:9c:db:9f:62:82:ab:04:af:6a:e2:15: 13:44:97:35:9a:ac:5b:54:30:51:94:af:91:6a:8c:80:d5:72: be:73:2f:a5:59:47:9d:99:a7:28:e4:25:82:71:72:78:6b:1d: 9e:32:8f:2d:2e:08:6e:58:79:ac:b6:4e:6f:85:25:a9:ec:7d: 8b:53:5f:40:ad:7a:37:46:71:94:48:8d:9a:5a:8a:76:72:fa: 74:1f:8f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhe9LXv+lSLsSMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk YzMwMWMzZjYtZDM1Yy00NDAyLTg2N2ItZDEwODAzNDBiMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/A5QMExGB+5CzQk8XkcpHqLk4KGHSqPNt4h CIjLrSjEbJsONm3I502xt9qr5LOjol+YCT7F4PqhRg0HT7tpXweoaV7MaJvGe8AK 13KkV7hv8ihb6sRvjWgKAx+AYsrqDjlzPMHbGU0DnmzISaTrofRPTEsi4gjGVsqp hj7bj258j7gGRsdg8gv430fIRNzdnG2TYhWzxXditSdlNS/dUxtMRJIO/2cgzTq5 +sJOLKizvSKCmjlaSodyyCYmYZqcyTOdrfY7U1+P6bRVAAKNP2Ekt1muBOk9kgTn E58c9xj2Or0M4VqhmDOzG8HpxAaDeydhFsR6o31BdkspLMqeOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjg5G+wQeF8vXvULAnEewNrRE+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzVhNDlkYjMtYTc3OC0z YmZjLTg3N2EtYzljZWE5ZTVhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIpf/SMNTEPI1apajErusoooYj8hi2FsW+7JAlBmnySaw10njAoEZs7 0pmwMgZD6Bm9IChyvx65XP+ereTVSDa7KD2ikaJad5a6D3i+GcNHXfp+AwNn4LOZ KsrD5/ElrhoThhHRG31BC5LczRwdEz36DLngrLhEEW+Gn2U4B/Dpx3ercX3Ugxlk CgaqZcJ4nPeAlp9rrUVKPXdmL/CgAvjoRzeaoX9O8X+c259igqsEr2riFRNElzWa rFtUMFGUr5FqjIDVcr5zL6VZR52ZpyjkJYJxcnhrHZ4yjy0uCG5Yeay2Tm+FJans fYtTX0CtejdGcZRIjZpainZy+nQfj4E= -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:25 2025 by rpki-client