$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02df042a-7837-3206-aaed-265dbd7ad140.roa File: 02df042a-7837-3206-aaed-265dbd7ad140.roa (raw, json) Hash identifier: dUeYlkrtxFU5PvcWjQHDpNGHXiLIFKHXw8jeUuWucUg= Subject key identifier: 9D:95:4E:F3:14:E2:5F:F2:25:59:1B:7E:CD:20:25:2E:18:D1:3B:0F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A225AC6A949EA51D1FAB570D8 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02df042a-7837-3206-aaed-265dbd7ad140.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 852 IP address blocks: 173.181.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c6:a9:49:ea:51:d1:fa:b5:70:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=50563f0e-997b-4d2c-b4a7-1f9b3350dd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:df:92:44:b4:08:f2:0a:8e:ef:c6:54:f4: 11:fd:f0:a7:79:79:71:5e:d1:fe:9e:23:06:80:c2: b7:1b:91:e8:24:1b:be:e5:a8:71:b1:62:01:a0:4e: f4:41:a9:2c:3f:c2:2d:dc:80:ec:1a:d2:b4:b4:c5: 1a:c4:e2:8f:f2:79:ad:f0:02:ec:50:3e:bf:cd:00: 45:6c:1c:6e:68:57:7b:ef:72:33:3a:7f:0c:df:17: d8:82:4b:ad:24:f0:4d:ac:e0:ed:21:cc:ff:19:d8: df:02:de:22:27:e5:72:7f:90:a0:bb:23:1e:38:e9: 6b:70:7e:79:b9:22:e0:8b:a7:a2:f9:95:5f:09:36: ab:a0:91:2d:bb:f7:88:8d:ea:5d:d3:f2:58:43:60: d8:b7:e4:d3:b2:81:e0:23:29:d1:e5:c0:ee:d6:3a: 4c:49:7d:ee:ec:1c:29:6e:0d:1a:d5:7b:66:74:79: db:85:ff:fe:40:9e:30:de:d2:9a:66:43:e4:29:29: 6f:d1:74:25:45:29:f9:b6:d1:1a:49:56:e0:c3:80: 76:50:15:36:3b:10:8a:82:d8:ff:2f:10:bf:30:ce: 77:96:57:f2:38:0a:52:eb:74:5d:6c:96:97:c8:ed: 13:79:09:06:82:7b:86:a3:07:a1:60:57:d3:b2:c6: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:4E:F3:14:E2:5F:F2:25:59:1B:7E:CD:20:25:2E:18:D1:3B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/02df042a-7837-3206-aaed-265dbd7ad140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.181.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cb:7f:fe:42:fb:e8:64:96:54:5a:34:1d:3a:0c:c6:ce:2d: fe:e2:5b:9a:d5:61:55:d4:7a:a7:4e:bf:f9:75:ab:a5:d9:e3: 95:e8:81:3e:0b:10:57:b4:14:93:5d:7f:36:6e:13:2e:fe:0f: da:34:2e:df:84:d7:a1:2c:66:23:04:8c:8d:f3:3b:1a:ee:79: a3:5e:fe:da:0d:7e:94:75:c6:6a:aa:f7:3e:dc:f7:de:c0:46: d6:4e:e8:8e:8e:b2:a9:dd:1a:a0:a4:c0:7b:9d:1f:8a:bd:96: 41:9b:1f:64:25:a2:d9:c6:8b:8a:74:26:18:ef:04:da:a9:c4: 5f:b3:1a:8b:0a:c4:45:bb:93:fc:76:37:ef:88:55:b7:d1:30: 77:7d:1b:12:14:59:2b:55:c5:f1:c4:4c:21:1b:b7:e5:0d:90: 85:23:82:da:be:32:5d:64:15:08:c3:88:3e:63:7c:62:4d:f7: a2:bb:d8:61:fd:bd:52:63:d9:7c:0f:60:4c:55:ca:45:25:0d: 00:98:e8:5d:87:f7:4c:e1:62:4a:f6:1b:1d:75:aa:4b:35:c6: b9:5c:69:95:4c:3f:ea:43:85:cf:b4:08:8b:e5:be:58:28:07: 9c:37:3d:df:95:2e:ba:c5:a8:ba:7f:3c:a8:84:b6:c3:81:90: 1c:62:84:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWsapSepR0fq1cNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk NTA1NjNmMGUtOTk3Yi00ZDJjLWI0YTctMWY5YjMzNTBkZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipvfkkS0CPIKju/GVPQR/fCneXlxXtH+niMG gMK3G5HoJBu+5ahxsWIBoE70QaksP8It3IDsGtK0tMUaxOKP8nmt8ALsUD6/zQBF bBxuaFd773IzOn8M3xfYgkutJPBNrODtIcz/GdjfAt4iJ+Vyf5CguyMeOOlrcH55 uSLgi6ei+ZVfCTaroJEtu/eIjepd0/JYQ2DYt+TTsoHgIynR5cDu1jpMSX3u7Bwp bg0a1XtmdHnbhf/+QJ4w3tKaZkPkKSlv0XQlRSn5ttEaSVbgw4B2UBU2OxCKgtj/ LxC/MM53llfyOApS63RdbJaXyO0TeQkGgnuGowehYFfTssbkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2VTvMU4l/yJVkbfs0gJS4Y0TsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDJkZjA0MmEtNzgzNy0z MjA2LWFhZWQtMjY1ZGJkN2FkMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELLf/5C++hkllRaNB06DMbOLf7iW5rVYVXUeqdOv/l1q6XZ45XogT4L EFe0FJNdfzZuEy7+D9o0Lt+E16EsZiMEjI3zOxrueaNe/toNfpR1xmqq9z7c997A RtZO6I6OsqndGqCkwHudH4q9lkGbH2QlotnGi4p0JhjvBNqpxF+zGosKxEW7k/x2 N++IVbfRMHd9GxIUWStVxfHETCEbt+UNkIUjgtq+Ml1kFQjDiD5jfGJN96K72GH9 vVJj2XwPYExVykUlDQCY6F2H90zhYkr2Gx11qks1xrlcaZVMP+pDhc+0CIvlvlgo B5w3Pd+VLrrFqLp/PKiEtsOBkBxihKU= -----END CERTIFICATE-----Generated at Mon Jun 16 10:32:39 2025 by rpki-client