$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/982dc959-7007-38bd-872b-7b5338a49095.roa File: 982dc959-7007-38bd-872b-7b5338a49095.roa (raw, json) Hash identifier: 8OK/gSx1AJ16BkD0TXbwpTvoC5N3ruw2uEv9UtUMuvc= Subject key identifier: 3C:81:17:8B:C5:D8:0B:41:A7:95:35:6A:EE:32:C0:67:5D:D0:59:52 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7085ECD1150870D8A3D36D80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/982dc959-7007-38bd-872b-7b5338a49095.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 7861 IP address blocks: 209.91.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:ec:d1:15:08:70:d8:a3:d3:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=84b7627a-bde5-4935-bd06-2da39082b7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:7a:2d:f9:63:dc:97:84:f0:01:b0:33:d7: 6a:56:6b:43:d6:21:35:06:99:7b:7c:b8:20:cd:8a: 34:95:97:f6:0b:db:86:8c:0b:67:9d:11:7b:fd:36: d6:3a:11:d5:12:6d:59:aa:44:7d:ab:68:3c:f8:b4: 83:c5:eb:85:c6:5b:a1:9c:03:4c:91:85:ff:83:54: 5a:80:e6:57:80:87:5c:ec:8c:bb:c2:06:9c:f1:a8: a3:ad:82:d0:35:35:6d:4e:d2:01:fe:63:38:57:57: 94:8d:fa:36:c1:fe:91:0d:5e:1a:f2:f5:05:ed:66: 64:e9:4e:ec:d3:fa:03:9f:57:9a:95:26:36:74:d6: 63:8d:7d:34:f7:37:20:9b:d8:ec:c5:31:44:d8:fa: 0f:14:0e:45:34:0f:59:cb:81:32:98:91:e4:c1:56: b1:5c:78:df:b9:67:3c:59:53:5d:34:ec:e0:e2:7e: 1a:40:f4:cf:9e:b5:c5:ab:89:e3:72:c8:de:f5:b9: 96:a7:05:3d:fa:d4:8c:85:55:b3:8b:3b:06:88:e2: 93:f8:84:16:b1:ff:45:0b:84:02:e3:c5:62:d2:01: dd:5d:07:0d:5b:85:14:f7:73:b5:82:b0:f2:77:87: 1a:fa:31:28:93:4f:ee:76:40:89:f7:c0:a0:b7:98: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:81:17:8B:C5:D8:0B:41:A7:95:35:6A:EE:32:C0:67:5D:D0:59:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/982dc959-7007-38bd-872b-7b5338a49095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.91.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d0:e1:12:a4:f0:31:80:30:30:77:aa:79:6c:cc:3c:c8:a5: 30:15:2d:33:ec:30:7c:80:ad:73:bf:ed:ca:10:8d:75:92:7f: fe:a5:de:75:9e:a8:c1:a3:6f:28:0f:5d:d6:35:83:d5:84:cb: cf:96:e4:e9:40:c5:5e:30:c7:75:17:64:53:d5:60:9b:fa:49: 54:8d:80:92:75:47:92:17:44:d6:5e:60:76:b6:b3:a2:c5:58: 02:15:6d:d8:5c:6f:7d:8f:4a:26:eb:47:f0:56:99:29:20:1c: 1d:23:f0:bb:8a:14:6d:f8:b1:da:c6:ed:72:e5:0c:8e:d9:b9: b1:1c:ba:ec:c8:fd:4c:b5:d2:c9:5b:95:67:ea:7e:1d:e6:f6: 70:e5:9a:1a:70:79:f4:1e:a9:7f:34:80:6e:81:bf:8b:82:c0: b5:90:dd:01:6f:57:d4:b1:1d:b1:9f:bd:d8:1b:a3:f1:1a:a6: 3e:2b:ef:9e:69:94:65:9c:60:5f:90:23:ee:27:76:2f:63:36: cb:06:f4:ec:84:9e:c8:76:b9:c1:73:6c:c3:be:18:9f:e7:5e: 41:58:d6:03:64:5f:12:a2:0c:ba:44:c9:ad:47:ae:11:22:48: 6e:cf:10:b2:07:43:7e:63:03:91:fc:28:82:39:d4:44:65:37: da:6a:04:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhezRFQhw2KPTbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ODRiNzYyN2EtYmRlNS00OTM1LWJkMDYtMmRhMzkwODJiN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtx6Lflj3JeE8AGwM9dqVmtD1iE1Bpl7fLgg zYo0lZf2C9uGjAtnnRF7/TbWOhHVEm1ZqkR9q2g8+LSDxeuFxluhnANMkYX/g1Ra gOZXgIdc7Iy7wgac8aijrYLQNTVtTtIB/mM4V1eUjfo2wf6RDV4a8vUF7WZk6U7s 0/oDn1ealSY2dNZjjX009zcgm9jsxTFE2PoPFA5FNA9Zy4EymJHkwVaxXHjfuWc8 WVNdNOzg4n4aQPTPnrXFq4njcsje9bmWpwU9+tSMhVWzizsGiOKT+IQWsf9FC4QC 48Vi0gHdXQcNW4UU93O1grDyd4ca+jEok0/udkCJ98Cgt5glFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyBF4vF2AtBp5U1au4ywGdd0FlSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTgyZGM5NTktNzAwNy0z OGJkLTg3MmItN2I1MzM4YTQ5MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VtfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLQ4RKk8DGAMDB3qnlszDzIpTAVLTPsMHyArXO/7coQjXWSf/6l3nWe qMGjbygPXdY1g9WEy8+W5OlAxV4wx3UXZFPVYJv6SVSNgJJ1R5IXRNZeYHa2s6LF WAIVbdhcb32PSibrR/BWmSkgHB0j8LuKFG34sdrG7XLlDI7ZubEcuuzI/Uy10slb lWfqfh3m9nDlmhpwefQeqX80gG6Bv4uCwLWQ3QFvV9SxHbGfvdgbo/Eapj4r755p lGWcYF+QI+4ndi9jNssG9OyEnsh2ucFzbMO+GJ/nXkFY1gNkXxKiDLpEya1HrhEi SG7PELIHQ35jA5H8KII51ERlN9pqBOM= -----END CERTIFICATE-----Generated at Fri Aug 8 19:21:28 2025 by rpki-client