$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa File: 9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa (raw, json) Hash identifier: Haz3xk8q0t34NbwxUFwUk78HSzSS63nQRPRX0kgZcM4= Subject key identifier: 86:8D:4C:2F:AC:D9:15:EC:72:69:D2:DB:F3:7F:E2:27:D0:CD:8C:02 Certificate issuer: /CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Certificate serial: 010D0C9F4328584ABA80C24804BC72FF2A86E2C0 Authority key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 11062 IP address blocks: 162.252.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c2:48:04:bc:72:ff:2a:86:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=d667c3a1-f4cc-4d4c-a1dc-7225e53c04ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:b8:ca:6a:d7:8e:9e:08:56:6d:96:8a:bc: a3:6f:d0:ed:75:a4:07:e3:c9:15:ff:87:64:05:ee: 9c:48:08:6b:16:f5:5b:e9:65:da:fb:63:de:f4:28: 02:6b:30:6a:78:39:c2:de:0e:63:a9:96:73:6f:2a: 6e:e5:7a:69:13:0e:98:6e:e6:5c:21:49:2f:66:40: 6c:20:51:90:18:d4:5e:13:73:be:d8:fd:b1:18:02: 64:20:24:bd:6d:5b:d9:79:ae:e5:94:78:a3:89:80: 17:67:55:0f:fa:4f:65:53:be:dd:f1:70:84:4c:ea: 21:dd:33:0e:2b:24:09:32:a3:9f:7a:43:d3:52:49: 26:c3:0d:63:17:b0:59:e6:f2:52:23:6c:f5:94:b9: fe:7e:f3:f0:60:ae:50:7c:66:6f:25:d0:59:d1:3a: 49:2c:5f:91:f0:11:5d:c8:c2:82:d0:23:99:94:dd: 18:6a:5d:74:8e:49:b2:7c:03:bd:2a:66:bf:12:c7: f7:e1:56:8c:8a:6c:53:0c:ce:fc:ec:7a:d7:a3:f4: f1:a3:74:bf:a0:23:c1:08:fa:71:15:94:a9:c1:ef: e8:92:d9:c4:fd:5b:f3:fd:34:20:8c:07:25:cf:8d: c3:75:07:d5:d5:35:13:48:f0:b6:da:0b:bc:83:05: aa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:4C:2F:AC:D9:15:EC:72:69:D2:DB:F3:7F:E2:27:D0:CD:8C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl X509v3 Authority Key Identifier: keyid:D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer sbgp-ipAddrBlock: critical IPv4: 162.252.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:25:71:ce:a1:30:48:11:a8:5e:da:24:89:ca:b6:74:c9:4a: 1e:8f:9b:77:f5:4c:39:f3:15:7f:07:83:f9:c6:4e:b6:a6:82: 8f:7e:fc:0c:df:6e:5d:9a:9f:07:4b:b2:4b:c9:13:bb:96:3d: e7:80:53:30:cd:fa:62:68:33:e5:94:b1:61:51:6e:cf:c5:48: 35:d5:b6:c3:fc:51:dd:f8:5e:50:3d:ff:64:80:05:fd:85:e6: 94:1e:4f:1a:a9:94:b8:d3:35:63:40:fc:be:19:46:40:9e:92: 12:b1:f5:21:52:8b:f1:d9:d6:b8:f5:65:da:ee:15:f0:4b:b4: 32:25:0c:78:9b:ba:26:24:43:b4:3c:c8:c0:01:86:07:54:3a: a3:07:37:a4:c1:78:b0:d6:c2:22:ec:5e:44:8c:bc:94:07:34: 1e:5d:b0:98:7e:2a:79:f2:e5:13:51:96:b1:44:86:bc:33:7e: 09:24:22:88:c3:fe:d8:04:12:64:84:40:8d:37:ea:9a:b9:d9: f3:dc:ff:97:f5:67:0f:f7:ea:be:ed:7f:28:56:48:25:e0:1b: 3d:0f:23:9e:cc:11:b0:a5:aa:72:cc:e2:d5:d5:54:2c:45:f4: 86:34:ee:4f:26:28:3c:a8:75:17:1a:7f:ce:eb:d1:8a:c8:1c: d5:cf:cb:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMJIBLxy/yqG4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk1MmNjMGItYTM2NS00MGI4LWE4YjMtNDM0MDhjNGM2 ZmUxMB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZDY2N2MzYTEtZjRjYy00ZDRjLWExZGMtNzIyNWU1M2MwNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNy4ymrXjp4IVm2Wiryjb9DtdaQH48kV/4dk Be6cSAhrFvVb6WXa+2Pe9CgCazBqeDnC3g5jqZZzbypu5XppEw6YbuZcIUkvZkBs IFGQGNReE3O+2P2xGAJkICS9bVvZea7llHijiYAXZ1UP+k9lU77d8XCETOoh3TMO KyQJMqOfekPTUkkmww1jF7BZ5vJSI2z1lLn+fvPwYK5QfGZvJdBZ0TpJLF+R8BFd yMKC0COZlN0Yal10jkmyfAO9Kma/Esf34VaMimxTDM787HrXo/Txo3S/oCPBCPpx FZSpwe/oktnE/Vvz/TQgjAclz43DdQfV1TUTSPC22gu8gwWqHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaNTC+s2RXscmnS2/N/4ifQzYwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82OTUy Y2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0YzZmZTEvOWU3ZmU0MzItYTNkZS0z M2MxLWFiNjctMTc3MTNkN2I4ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjk1MmNjMGItYTM2NS00MGI4LWE4 YjMtNDM0MDhjNGM2ZmUxLzY5NTJjYzBiLWEzNjUtNDBiOC1hOGIzLTQzNDA4YzRj NmZlMS5jcmwwHwYDVR0jBBgwFoAU1AlbTrX+Ny7zhHYXBh4i9RecCoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQw OGM0YzZmZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABElcc6hMEgRqF7aJInKtnTJSh6Pm3f1TDnzFX8Hg/nGTramgo9+/Azf bl2anwdLskvJE7uWPeeAUzDN+mJoM+WUsWFRbs/FSDXVtsP8Ud34XlA9/2SABf2F 5pQeTxqplLjTNWNA/L4ZRkCekhKx9SFSi/HZ1rj1ZdruFfBLtDIlDHibuiYkQ7Q8 yMABhgdUOqMHN6TBeLDWwiLsXkSMvJQHNB5dsJh+Knny5RNRlrFEhrwzfgkkIojD /tgEEmSEQI036pq52fPc/5f1Zw/36r7tfyhWSCXgGz0PI57MEbClqnLM4tXVVCxF 9IY07k8mKDyodRcaf87r0YrIHNXPy0g= -----END CERTIFICATE-----Generated at Mon Aug 4 18:28:21 2025 by rpki-client