$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa File: 7f94ca6f-ad93-3660-886e-eb166a876a40.roa (raw, json) Hash identifier: PpM/G4V6uDJD9pXQY8Xucc0zn7Txx9tQJxuAEU+VSEk= Subject key identifier: 6F:98:C6:05:26:33:83:CC:1F:FD:91:3A:5E:00:4D:58:A7:77:FB:43 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A560053E42315A05402682C40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 19341 IP address blocks: 209.20.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:53:e4:23:15:a0:54:02:68:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=32c5fba7-542f-42f2-8ffb-d03224a2ccb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1d:8e:70:d6:af:95:06:85:8d:a6:43:8d:d6: 95:ff:e6:2e:ad:70:19:97:f1:98:4c:05:2b:42:3f: b3:be:d4:01:06:fc:a4:a7:6d:c1:30:63:66:60:61: a2:30:2d:33:b2:fe:f7:9e:c4:d3:75:13:a3:06:f4: 45:bc:c7:8b:5a:9d:83:0f:02:29:62:69:6b:2b:a1: cd:b0:76:48:26:ae:2f:5f:bd:33:c3:73:6a:bb:80: bd:2b:92:0d:1b:d2:5a:43:55:1e:91:ea:47:88:f6: 22:38:12:b1:b5:9d:ba:d1:dd:fe:6c:49:89:4c:d3: d2:97:d1:98:48:38:d5:8a:43:86:81:2c:c4:cf:24: 34:53:a1:14:6b:32:f0:33:81:15:2c:10:47:47:a3: 31:d8:42:ce:e2:71:9d:47:8d:b3:be:bd:42:3a:79: 59:ec:15:53:2a:82:aa:b1:1e:f8:e8:5a:e1:76:3f: 7f:40:e6:ed:ce:b4:c0:a7:e1:b7:b2:3b:fe:18:56: e9:86:55:51:ec:93:0d:2d:23:52:ee:7b:72:3e:ac: ac:23:b5:46:3d:22:a0:05:d3:50:e0:6c:2c:e2:f3: 77:8e:3d:1f:2e:ff:75:dd:66:eb:b0:81:1c:1d:54: a9:de:a0:18:bc:5c:40:50:55:28:27:32:49:8d:e1: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:98:C6:05:26:33:83:CC:1F:FD:91:3A:5E:00:4D:58:A7:77:FB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f94ca6f-ad93-3660-886e-eb166a876a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.20.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:b4:6e:7d:c1:f1:ff:bf:5c:c8:9e:7b:1b:dc:ea:46:07:74: 40:84:75:ad:bc:f9:f4:b1:b8:30:d2:20:96:fe:66:36:c6:28: e0:96:42:69:5b:86:c8:11:3f:9a:95:95:28:73:cf:22:8f:87: 7b:88:cc:e3:53:3d:ee:d5:b1:8c:bd:57:19:b0:e2:4c:6c:c7: 02:da:a3:ce:43:21:52:20:78:cf:10:e0:7e:48:cc:e7:ce:7d: c3:77:90:8d:b2:b3:ad:00:7c:f2:53:7c:64:ae:7b:29:ef:15: 67:eb:69:e4:83:ab:82:0b:d5:30:14:da:1b:33:3b:b3:28:e9: 75:ce:ae:54:6f:6c:26:32:82:8b:91:eb:36:c5:90:5c:4f:ed: cd:45:40:18:8f:7e:f7:d4:ca:68:ad:5a:cb:6a:8a:89:14:87: 23:ec:de:43:22:90:c3:d0:c2:8a:f1:85:30:ca:fc:dc:71:8a: 11:dc:0e:ef:89:4f:23:0b:5d:ff:36:54:56:49:e7:44:12:9a: cd:c9:ac:6c:f2:31:4e:9c:de:ae:f9:59:01:f8:a1:1f:f7:1d: 4a:b0:a4:b6:02:46:dc:6b:7c:f6:7a:03:f6:79:d5:46:04:3d: 58:3e:f3:f6:70:8b:04:6e:88:e4:4f:f1:67:05:71:89:2b:03: c4:bd:f8:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAFPkIxWgVAJoLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk MzJjNWZiYTctNTQyZi00MmYyLThmZmItZDAzMjI0YTJjY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh2OcNavlQaFjaZDjdaV/+YurXAZl/GYTAUr Qj+zvtQBBvykp23BMGNmYGGiMC0zsv73nsTTdROjBvRFvMeLWp2DDwIpYmlrK6HN sHZIJq4vX70zw3Nqu4C9K5ING9JaQ1UekepHiPYiOBKxtZ260d3+bEmJTNPSl9GY SDjVikOGgSzEzyQ0U6EUazLwM4EVLBBHR6Mx2ELO4nGdR42zvr1COnlZ7BVTKoKq sR746Frhdj9/QObtzrTAp+G3sjv+GFbphlVR7JMNLSNS7ntyPqysI7VGPSKgBdNQ 4Gws4vN3jj0fLv913WbrsIEcHVSp3qAYvFxAUFUoJzJJjeHv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+YxgUmM4PMH/2ROl4ATVind/tDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2Y5NGNhNmYtYWQ5My0z NjYwLTg4NmUtZWIxNjZhODc2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOO0bn3B8f+/XMieexvc6kYHdECEda28+fSxuDDSIJb+ZjbGKOCWQmlb hsgRP5qVlShzzyKPh3uIzONTPe7VsYy9Vxmw4kxsxwLao85DIVIgeM8Q4H5IzOfO fcN3kI2ys60AfPJTfGSueynvFWfraeSDq4IL1TAU2hszO7Mo6XXOrlRvbCYygouR 6zbFkFxP7c1FQBiPfvfUymitWstqiokUhyPs3kMikMPQworxhTDK/NxxihHcDu+J TyMLXf82VFZJ50QSms3JrGzyMU6c3q75WQH4oR/3HUqwpLYCRtxrfPZ6A/Z51UYE PVg+8/ZwiwRuiORP8WcFcYkrA8S9+I4= -----END CERTIFICATE-----Generated at Fri Jul 4 21:27:56 2025 by rpki-client