$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa File: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (raw, json) Hash identifier: fI5YMHTaJSO1aGA0rokef+OBxkfA7F8ZiPhubQ0usBg= Subject key identifier: BA:6E:38:AD:56:CA:76:FE:89:C5:6D:D8:39:80:9D:2D:FF:DF:53:02 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584A1F901CA333B9BC4539140C80 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 30691 IP address blocks: 65.111.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:1c:a3:33:b9:bc:45:39:14:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=cad22560-d223-414f-99de-8d2e38ed47d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:37:76:44:a3:e8:bf:bc:57:fb:3e:f2:d5:6d: fc:b6:77:4f:47:80:3d:53:6c:69:c1:47:09:74:d8: 89:f2:8e:4f:3f:74:f3:0a:39:bf:52:59:e5:1d:ba: a6:37:b6:0b:cc:a5:bd:88:b4:99:e6:ec:88:09:f9: 33:c2:57:cd:82:c5:84:78:d0:40:d3:c3:8a:68:af: 8a:9f:fa:8c:7a:df:5a:dd:4a:dd:12:d3:bb:de:56: 9b:13:ea:63:ec:eb:34:c9:ea:65:e0:17:cd:ca:fe: 44:c3:ae:2b:88:25:92:23:b0:d6:5d:b0:53:bc:47: 60:28:70:90:1e:c1:10:f8:5e:61:75:99:c7:58:bb: 20:ef:6c:2d:42:cb:3c:a3:41:f3:23:07:3d:a9:72: 3c:e6:85:01:48:34:2c:b2:a2:a2:12:61:2f:06:8e: 25:98:d5:c5:b6:6e:6a:fe:26:35:8a:47:05:ee:1f: a2:41:b2:ef:57:a1:83:05:95:1a:80:cd:83:62:a2: 12:9f:c0:82:4d:44:18:d9:0b:4a:94:fd:47:67:b9: 07:da:9f:c1:23:a5:03:d9:18:2c:b8:32:38:a9:4f: e7:59:d5:41:68:0b:18:a0:f3:b6:d5:c7:a8:4f:e1: 1f:9b:92:f0:22:06:cf:ca:b5:5c:d9:3f:9d:f2:16: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6E:38:AD:56:CA:76:FE:89:C5:6D:D8:39:80:9D:2D:FF:DF:53:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: 65.111.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:11:ec:53:6b:11:95:84:a0:48:bf:f1:7a:dc:74:a4:3c:54: 11:f9:07:4c:0a:e9:68:fe:ea:c2:3e:62:b7:be:70:1b:fa:f9: 7e:e1:9e:7a:92:6e:af:a8:84:e1:3e:c3:9b:ef:6e:4f:16:5b: 08:7c:b3:63:25:1d:80:67:fb:a9:19:96:92:0c:a8:63:da:b4: cc:19:a9:b3:a0:4d:15:09:1f:15:95:c8:17:76:af:70:40:38: ac:d9:33:c0:0a:c3:cf:44:d0:f2:de:d9:af:66:45:f0:dd:67: 58:86:e2:5c:8a:bb:47:e1:5e:e5:d7:27:4c:14:90:a2:c9:d9: c9:65:ae:51:42:0b:25:a1:03:6b:03:26:cc:5c:91:41:08:27: ea:ae:f0:09:34:f7:b1:0b:c4:d4:42:bb:d2:59:e3:7b:6b:d6: 52:40:e7:47:a9:40:c3:93:c6:5f:6a:bc:19:ba:c8:8e:92:d8: 72:be:b5:c0:ec:f0:2e:d8:2e:4e:e8:b3:9b:74:61:fe:12:6c: 14:56:1b:3e:7e:07:46:d0:59:90:67:b2:5f:3c:75:f6:9f:2a: 10:eb:5b:7d:3e:8c:95:d8:50:42:f4:83:a8:f2:72:a8:bf:bb: 2d:c5:9f:f0:fc:6c:6a:53:9d:95:88:4a:4c:eb:b2:a8:d8:2a: 7f:40:24:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkByjM7m8RTkUDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk Y2FkMjI1NjAtZDIyMy00MTRmLTk5ZGUtOGQyZTM4ZWQ0N2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjd2RKPov7xX+z7y1W38tndPR4A9U2xpwUcJ dNiJ8o5PP3TzCjm/UlnlHbqmN7YLzKW9iLSZ5uyICfkzwlfNgsWEeNBA08OKaK+K n/qMet9a3UrdEtO73labE+pj7Os0yepl4BfNyv5Ew64riCWSI7DWXbBTvEdgKHCQ HsEQ+F5hdZnHWLsg72wtQss8o0HzIwc9qXI85oUBSDQssqKiEmEvBo4lmNXFtm5q /iY1ikcF7h+iQbLvV6GDBZUagM2DYqISn8CCTUQY2QtKlP1HZ7kH2p/BI6UD2Rgs uDI4qU/nWdVBaAsYoPO21ceoT+Efm5LwIgbPyrVc2T+d8hY63wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpuOK1Wynb+icVt2DmAnS3/31MCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvN2RhZTIyZjgtOTM5YS0z YTU0LWI4MWMtODg5MDIzM2JjNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQW/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgR7FNrEZWEoEi/8XrcdKQ8VBH5B0wK6Wj+6sI+Yre+cBv6+X7hnnqS bq+ohOE+w5vvbk8WWwh8s2MlHYBn+6kZlpIMqGPatMwZqbOgTRUJHxWVyBd2r3BA OKzZM8AKw89E0PLe2a9mRfDdZ1iG4lyKu0fhXuXXJ0wUkKLJ2cllrlFCCyWhA2sD JsxckUEIJ+qu8Ak097ELxNRCu9JZ43tr1lJA50epQMOTxl9qvBm6yI6S2HK+tcDs 8C7YLk7os5t0Yf4SbBRWGz5+B0bQWZBnsl88dfafKhDrW30+jJXYUEL0g6jycqi/ uy3Fn/D8bGpTnZWISkzrsqjYKn9AJPk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:03:44 2025 by rpki-client