$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa File: de791f6f-55b0-308e-b01a-7d78aff6921b.roa (raw, json) Hash identifier: tflRQOEyiTQ1QZmK7URIQgoVM5QKL2NvYdXWE0HCYck= Subject key identifier: 89:74:27:CC:F6:DD:20:33:62:5A:AE:F6:76:31:55:7B:94:1D:9E:4B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584AF0F142002D8DAC0C7C72B800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 7861 IP address blocks: 209.29.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:42:00:2d:8d:ac:0c:7c:72:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=1a2dfc58-bd0d-4b89-a9a2-db5b7f15561a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:74:4a:dc:fd:4a:b6:08:c6:35:ba:30:2b: e6:df:e9:85:ee:81:0a:57:39:6c:0b:e1:52:bd:3e: a4:e0:45:65:b5:37:db:2b:c8:76:2b:8a:ba:2a:49: 5d:8c:52:54:f3:95:4e:fb:59:7c:0a:ad:c0:aa:7c: 36:92:1c:8f:3b:c5:df:0a:a8:9c:97:16:d7:26:6c: 4a:08:49:38:69:3c:75:2a:4a:1b:b6:a1:30:3d:28: 3d:24:2f:07:ac:6c:83:6b:52:48:14:7c:4a:2f:1c: 01:d5:26:70:a4:3b:95:18:4a:fa:5e:1e:9a:f2:80: 75:21:df:fe:4e:c2:07:6b:c6:90:11:42:4a:70:35: ca:d5:1f:9d:18:b1:e3:c1:19:2a:81:0f:1c:a1:c0: 9d:a8:1a:df:61:39:b7:4c:cb:14:55:38:91:cd:c1: a9:fe:b7:f5:5b:ab:02:3e:85:3f:0e:0d:00:1c:31: 5c:14:8e:2f:97:d6:75:5e:51:75:6a:1d:23:4a:0a: e3:80:c4:ff:23:79:7c:c9:53:53:ea:47:b1:9e:a7: 77:0b:d8:67:a8:85:ea:64:cd:f5:2e:90:1a:79:34: 36:a3:ff:5c:5e:ea:ed:0f:60:7f:a2:f2:a5:97:64: a9:08:bb:cc:3d:92:01:c7:50:c6:94:7f:d6:87:95: 2e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:27:CC:F6:DD:20:33:62:5A:AE:F6:76:31:55:7B:94:1D:9E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:84:f9:34:12:c6:ef:c6:0d:a6:55:b9:72:4f:d7:d7:ba:2c: 9e:ef:f3:ec:14:1a:e3:55:be:b7:35:15:84:ff:01:90:7b:80: 6c:80:d3:bd:74:a9:9c:f1:7d:b9:c0:5a:c8:4c:73:90:1e:ca: 9c:8c:a1:1f:b5:41:f4:6b:26:cd:63:3e:93:ca:99:e7:b1:c8: e2:a8:bc:df:80:26:6a:83:4e:de:9c:cb:92:fd:35:14:80:ba: 57:d7:78:fd:a2:38:1b:4d:7f:3e:94:9e:d1:d6:78:22:39:97: f4:38:33:df:ec:46:63:d1:84:88:57:a7:70:d5:7a:be:aa:52: 7f:0b:98:0e:5d:68:04:e3:4d:cd:05:6e:6b:36:36:a5:fc:f3: e3:81:c8:69:d6:e6:eb:10:2c:28:e2:54:b1:02:86:c5:9b:be: 89:4d:f7:de:15:30:c8:ca:fc:73:a1:03:d7:83:2a:d1:77:c2: 4f:9c:8d:b8:7f:87:23:b0:c0:37:7e:c8:e9:80:1d:71:ac:5f: 16:ce:63:c0:4a:5a:82:94:94:7d:b3:d1:c2:a4:93:b2:e7:5b: d3:55:13:35:0d:b9:4e:c8:c4:ec:f5:a4:20:02:02:97:25:ba: fa:32:3a:10:7c:07:6f:25:b4:50:a5:ab:67:b4:8b:d5:fd:d3: a0:aa:49:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UIALY2sDHxyuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MWEyZGZjNTgtYmQwZC00Yjg5LWE5YTItZGI1YjdmMTU1NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0N0Stz9SrYIxjW6MCvm3+mF7oEKVzlsC+FS vT6k4EVltTfbK8h2K4q6KkldjFJU85VO+1l8Cq3Aqnw2khyPO8XfCqiclxbXJmxK CEk4aTx1KkobtqEwPSg9JC8HrGyDa1JIFHxKLxwB1SZwpDuVGEr6Xh6a8oB1Id/+ TsIHa8aQEUJKcDXK1R+dGLHjwRkqgQ8cocCdqBrfYTm3TMsUVTiRzcGp/rf1W6sC PoU/Dg0AHDFcFI4vl9Z1XlF1ah0jSgrjgMT/I3l8yVNT6kexnqd3C9hnqIXqZM31 LpAaeTQ2o/9cXurtD2B/ovKll2SpCLvMPZIBx1DGlH/Wh5UuaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl0J8z23SAzYlqu9nYxVXuUHZ5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGU3OTFmNmYtNTViMC0z MDhlLWIwMWEtN2Q3OGFmZjY5MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R3jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuE+TQSxu/GDaZVuXJP19e6LJ7v8+wUGuNVvrc1FYT/AZB7gGyA0710 qZzxfbnAWshMc5AeypyMoR+1QfRrJs1jPpPKmeexyOKovN+AJmqDTt6cy5L9NRSA ulfXeP2iOBtNfz6UntHWeCI5l/Q4M9/sRmPRhIhXp3DVer6qUn8LmA5daATjTc0F bms2NqX88+OByGnW5usQLCjiVLEChsWbvolN994VMMjK/HOhA9eDKtF3wk+cjbh/ hyOwwDd+yOmAHXGsXxbOY8BKWoKUlH2z0cKkk7LnW9NVEzUNuU7IxOz1pCACApcl uvoyOhB8B28ltFClq2e0i9X906CqSdg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:01 2025 by rpki-client