$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa File: 626acb6f-a9f2-3ded-95e5-811dd7647975.roa (raw, json) Hash identifier: giCVjUb1LKr4GAM0dv02c8YYoqVay5u1VJx6J0BAVxQ= Subject key identifier: 82:90:4E:18:AB:19:FD:B5:F0:34:10:6B:58:DB:DD:6D:94:F9:27:27 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584AA6F62AB5872A98195705BD00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 54359 IP address blocks: 209.52.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2a:b5:87:2a:98:19:57:05:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=af0479ff-2f67-4921-9174-434fdc809a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:ea:83:c4:4e:08:0c:75:cb:c1:19:91:67: 09:7b:b3:c7:40:64:0e:d7:b2:01:67:08:de:8d:81: 06:88:07:ac:63:03:e0:d7:37:a5:82:39:20:69:4a: 36:bd:d9:19:1e:19:9d:22:63:fd:fa:7b:8b:59:e2: d3:66:01:98:8e:b3:01:07:80:5d:11:32:b9:24:3f: a5:bd:15:3c:6e:5e:94:66:65:af:bf:7a:c4:32:c1: fc:33:c5:23:39:e6:f6:76:67:a7:c5:28:dd:8b:9f: 23:d4:92:27:fb:45:e4:c5:da:d7:c8:a1:2d:9e:83: 98:df:20:2f:67:37:b8:09:a2:37:ca:1f:66:a7:3f: 83:74:03:6d:5c:1c:36:53:bf:cd:8f:d7:f5:a8:d0: 0a:d8:e5:61:9d:ba:1d:fc:10:9c:5a:ca:93:15:de: 52:4e:ed:6d:ab:b7:f0:13:89:0d:be:b2:69:70:1f: d3:84:64:fc:2e:3a:ab:c1:12:6b:ef:a5:c4:08:ad: 48:ca:ed:c6:5d:d6:73:5c:af:81:69:f4:b9:e2:73: 5a:72:f6:5f:3f:56:e9:10:76:6e:bb:90:06:4b:0f: 57:16:24:96:c5:f1:0f:73:3a:55:3b:98:38:76:f3: 85:83:32:ae:89:09:27:94:23:aa:fc:48:7b:37:09: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:90:4E:18:AB:19:FD:B5:F0:34:10:6B:58:DB:DD:6D:94:F9:27:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4d:b4:c5:b0:ee:e8:c6:8d:8f:78:c0:99:68:d4:78:61:62: 50:67:b2:39:8d:60:a0:32:53:d8:19:e8:d2:a9:c0:ca:31:44: 5b:a8:0d:09:12:43:f0:07:5d:42:43:76:f3:af:16:3c:c5:ec: 4e:cd:76:a3:e2:6a:b4:c5:28:fb:b3:10:37:bf:80:1f:a2:a3: 6f:51:72:80:e4:0a:28:12:92:7e:99:e6:31:7e:18:ac:7b:42: e8:54:b9:e0:ed:cc:8e:92:11:f3:e4:00:fd:68:fa:67:c1:ac: 41:b6:fd:1b:0b:6b:e5:34:e4:c9:0c:fa:2a:cb:30:8b:20:f0: 41:b4:52:b9:76:14:4a:c8:81:56:82:d0:ae:2b:54:3b:99:28: 05:c4:09:43:db:3c:68:51:d9:45:7d:95:3e:67:73:09:b4:ab: bc:6a:59:b5:8b:48:12:05:93:e0:84:7f:99:0a:0a:68:a4:17: 5a:e8:92:fd:be:88:1d:72:da:6f:f7:6d:b8:cb:9d:5f:6d:8d: 10:72:70:3b:e0:86:01:4b:55:42:bf:6f:3e:54:6b:54:c8:f1: 0f:a7:12:8a:87:9f:93:b8:53:de:d7:2e:6a:a0:ca:79:0c:67: 0e:1b:0f:23:92:bd:90:6f:d9:c9:f3:84:23:ca:e3:9d:48:09: 87:54:d4:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9iq1hyqYGVcFvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YWYwNDc5ZmYtMmY2Ny00OTIxLTkxNzQtNDM0ZmRjODA5YTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Lqg8ROCAx1y8EZkWcJe7PHQGQO17IBZwje jYEGiAesYwPg1zelgjkgaUo2vdkZHhmdImP9+nuLWeLTZgGYjrMBB4BdETK5JD+l vRU8bl6UZmWvv3rEMsH8M8UjOeb2dmenxSjdi58j1JIn+0XkxdrXyKEtnoOY3yAv Zze4CaI3yh9mpz+DdANtXBw2U7/Nj9f1qNAK2OVhnbod/BCcWsqTFd5STu1tq7fw E4kNvrJpcB/ThGT8LjqrwRJr76XECK1Iyu3GXdZzXK+BafS54nNacvZfP1bpEHZu u5AGSw9XFiSWxfEPczpVO5g4dvOFgzKuiQknlCOq/Eh7NwnBxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKQThirGf218DQQa1jb3W2U+ScnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjI2YWNiNmYtYTlmMi0z ZGVkLTk1ZTUtODExZGQ3NjQ3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxNtMWw7ujGjY94wJlo1HhhYlBnsjmNYKAyU9gZ6NKpwMoxRFuoDQkS Q/AHXUJDdvOvFjzF7E7NdqPiarTFKPuzEDe/gB+io29RcoDkCigSkn6Z5jF+GKx7 QuhUueDtzI6SEfPkAP1o+mfBrEG2/RsLa+U05MkM+irLMIsg8EG0Url2FErIgVaC 0K4rVDuZKAXECUPbPGhR2UV9lT5ncwm0q7xqWbWLSBIFk+CEf5kKCmikF1rokv2+ iB1y2m/3bbjLnV9tjRBycDvghgFLVUK/bz5Ua1TI8Q+nEoqHn5O4U97XLmqgynkM Zw4bDyOSvZBv2cnzhCPK451ICYdU1Js= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:58 2025 by rpki-client