$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa File: 3a897dcb-8200-3442-a76b-4fec09f925ce.roa (raw, json) Hash identifier: bYrPpryROXAmT2FSJFdWDQPTQCrW8ZsQufur9hf1AJI= Subject key identifier: 51:4E:F3:07:E7:F6:A8:25:50:98:B7:B9:90:40:85:71:A5:76:C9:05 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A778090F4362501E876759820 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 199.192.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:90:f4:36:25:01:e8:76:75:98:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=f4738f23-3136-458a-8310-52d4687e52a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b8:4b:0e:a2:a7:4d:a7:5d:05:2b:a3:1c:51: ec:01:cd:54:e5:a3:1c:41:6d:f3:85:4e:90:05:c0: 38:d7:af:69:1e:03:7a:1e:0e:2b:c5:8e:e4:90:a8: 03:93:68:d6:59:0a:ab:d2:ab:1f:16:15:51:65:ba: 5d:ff:05:fe:b6:ea:79:a6:3b:06:58:fc:59:02:91: 46:b7:f2:7d:16:f7:c9:a1:f1:39:b2:c4:1d:74:0f: 5e:c9:4b:df:31:26:7f:65:8f:02:99:86:26:03:3b: 95:5c:35:de:3b:a1:17:11:6f:43:75:fa:6d:4a:34: 0e:74:07:55:84:43:86:37:a3:a0:b7:b7:d3:f0:33: ae:3d:61:cb:d3:58:52:67:1f:dd:28:8b:ef:a3:fa: 7d:e0:8f:61:1f:29:32:2c:c1:c7:d6:81:d1:a1:09: 73:93:61:04:12:99:9a:46:73:e4:54:6c:ea:49:a6: a9:15:b0:4a:99:eb:3f:cd:1a:38:91:28:6d:c9:29: f8:6b:c2:62:57:8e:24:89:2d:a4:86:a6:b6:9c:d3: 94:93:2e:a9:20:6e:71:ae:e8:d8:7f:2d:9f:4c:6f: 99:82:dc:05:a0:8b:01:29:cb:41:8e:a6:a6:43:79: c0:3a:19:e4:d7:2a:94:d4:c1:c2:e0:71:6d:5e:2c: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:F3:07:E7:F6:A8:25:50:98:B7:B9:90:40:85:71:A5:76:C9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3a897dcb-8200-3442-a76b-4fec09f925ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 199.192.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:81:05:0d:b8:25:19:55:d5:dd:c8:f7:14:e4:49:81:e7:19: 21:23:61:88:59:f6:fe:ec:cb:e8:e2:f4:4b:70:81:25:c3:4b: 0f:ea:2b:1d:ab:f0:4a:44:08:2a:09:b7:eb:04:41:35:38:c2: a9:15:64:53:c2:61:28:9d:21:20:4f:4f:a0:a0:08:70:e9:14: d6:ce:70:25:66:fe:8b:d1:10:15:70:64:d6:54:67:23:cd:e4: e0:d9:58:5e:34:26:76:3c:a3:66:12:72:c6:c2:5c:bc:4e:1f: 89:0d:42:02:43:bb:df:5f:7e:00:f3:4e:8e:39:e9:73:b0:f2: 5e:3c:95:4f:17:25:68:36:b4:32:13:14:e5:3e:f2:b9:fc:5b: 6b:3f:fc:6e:4f:48:82:22:28:ed:8b:f9:e0:d7:64:f4:e7:c4: 41:75:89:19:42:7a:c7:7b:91:d1:03:25:07:f1:ec:a1:cb:43: b5:ea:83:a6:69:93:3e:c8:d5:51:a7:3b:57:57:c7:6c:b2:36: 7d:fd:1a:58:e9:ca:ba:d3:81:21:d2:77:7d:b3:a3:4e:a1:76: cb:a9:f2:26:af:67:01:1f:89:b0:bb:49:4c:71:d7:7e:f4:4e: d3:b7:b9:2a:ef:a8:48:d9:9a:bb:2c:d1:40:d8:61:f2:27:61: 96:7c:78:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJD0NiUB6HZ1mCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZjQ3MzhmMjMtMzEzNi00NThhLTgzMTAtNTJkNDY4N2U1MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7hLDqKnTaddBSujHFHsAc1U5aMcQW3zhU6Q BcA4169pHgN6Hg4rxY7kkKgDk2jWWQqr0qsfFhVRZbpd/wX+tup5pjsGWPxZApFG t/J9FvfJofE5ssQddA9eyUvfMSZ/ZY8CmYYmAzuVXDXeO6EXEW9DdfptSjQOdAdV hEOGN6Ogt7fT8DOuPWHL01hSZx/dKIvvo/p94I9hHykyLMHH1oHRoQlzk2EEEpma RnPkVGzqSaapFbBKmes/zRo4kShtySn4a8JiV44kiS2khqa2nNOUky6pIG5xrujY fy2fTG+ZgtwFoIsBKctBjqamQ3nAOhnk1yqU1MHC4HFtXiw/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFO8wfn9qglUJi3uZBAhXGldskFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvM2E4OTdkY2ItODIwMC0z NDQyLWE3NmItNGZlYzA5ZjkyNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+BBQ24JRlV1d3I9xTkSYHnGSEjYYhZ9v7sy+ji9EtwgSXDSw/qKx2r 8EpECCoJt+sEQTU4wqkVZFPCYSidISBPT6CgCHDpFNbOcCVm/ovREBVwZNZUZyPN 5ODZWF40JnY8o2YScsbCXLxOH4kNQgJDu99ffgDzTo456XOw8l48lU8XJWg2tDIT FOU+8rn8W2s//G5PSIIiKO2L+eDXZPTnxEF1iRlCesd7kdEDJQfx7KHLQ7Xqg6Zp kz7I1VGnO1dXx2yyNn39GljpyrrTgSHSd32zo06hdsup8iavZwEfibC7SUxx1370 TtO3uSrvqEjZmrss0UDYYfInYZZ8eIM= -----END CERTIFICATE-----Generated at Mon Aug 4 21:55:44 2025 by rpki-client