$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa File: 6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa (raw, json) Hash identifier: EiuF7vR2rRCnBRd9rpo+U1Q1SnikN38eK4PeXGMm4+0= Subject key identifier: 73:60:07:95:4D:F2:18:6F:98:B2:F5:F0:B6:6B:F2:95:F5:27:3D:7D Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A8B0B5F8862203743FF89BE00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 216.137.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5f:88:62:20:37:43:ff:89:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=1016dae6-08fb-4a60-9073-6937fa29154b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:71:ec:18:2b:8b:ac:d6:f1:09:00:14:66: c9:c1:f8:bd:ab:e2:06:9d:e2:2e:f2:7f:c1:03:fa: 54:76:28:3e:e2:15:db:99:b6:65:3c:02:5b:96:12: a5:28:e0:bb:d1:72:d7:e4:fb:a3:14:e6:e6:e5:dd: cd:e0:17:35:9d:31:f7:c2:97:c6:0f:ea:cd:7f:f9: 8d:05:41:c8:db:55:9f:f5:87:82:c3:c4:f3:08:28: d6:0a:73:b7:02:5e:fc:cf:b3:0d:2a:1d:ce:e6:fe: e9:92:fa:56:79:a9:76:ba:d0:84:51:eb:39:40:56: c0:fa:f1:31:8c:18:0f:50:07:b4:30:fe:c1:57:bb: d7:0f:5a:98:ee:cb:6a:65:1f:3c:bf:b8:80:87:c5: 7b:ac:73:48:8d:da:1a:26:6f:6c:17:b0:d0:51:a2: 5b:5f:3d:52:d2:d2:0c:09:ca:36:40:77:c2:1a:19: c7:c3:5d:65:01:cd:92:57:96:01:64:40:cb:a6:8d: 1b:ed:39:0d:e0:c1:5c:66:b6:14:8e:1a:72:f6:06: 49:cf:71:8f:67:c1:10:5c:a1:e1:95:11:1d:3e:8e: 46:1f:92:cd:12:0d:48:3d:42:f4:f1:eb:5d:b2:ca: 71:e9:5a:7f:bf:07:ac:1d:90:05:6d:68:e6:55:0d: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:60:07:95:4D:F2:18:6F:98:B2:F5:F0:B6:6B:F2:95:F5:27:3D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:af:95:eb:d4:36:9b:49:09:03:7f:81:46:38:56:65:06:1c: 08:29:ef:c7:0e:3d:9e:d3:e3:ce:32:ae:9c:fa:1f:65:5d:16: bd:f4:64:50:c0:d9:84:a0:f9:a1:95:fc:13:e4:28:37:50:da: 8f:0f:c6:b7:73:f6:02:67:a1:0b:e8:39:b6:d4:a2:6c:3b:96: d1:f7:4a:8a:cc:4f:48:10:03:f2:46:e2:6d:b5:f6:d9:bf:58: 74:05:ad:45:c1:d5:48:41:8c:a5:bf:fd:d4:9f:f0:81:0c:ec: 33:4b:a4:d3:7e:13:8d:58:03:6e:b1:4b:1e:cd:ae:25:21:df: d7:71:9d:e0:24:52:8a:fd:a8:14:1f:bf:5b:f5:a5:16:c9:d8: 99:ff:34:71:4b:91:9d:62:50:e9:14:05:88:38:95:30:79:b0: e2:b6:5c:c4:b1:0a:5e:c9:9d:53:9e:8d:ef:35:cb:2d:02:4c: 74:bb:6d:31:51:ad:b8:55:c9:69:b2:29:53:7f:04:ad:a3:da: de:5a:c6:af:e1:ea:92:ea:ff:57:6d:66:8b:18:a9:d5:89:5d: 17:80:24:ec:08:1c:d1:10:14:03:25:1e:e3:91:cf:24:85:4d: 8d:b9:0c:dc:8d:da:b9:dd:98:c9:98:91:a2:f4:f9:87:fb:3a: 46:77:d3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1+IYiA3Q/+JvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MTAxNmRhZTYtMDhmYi00YTYwLTkwNzMtNjkzN2ZhMjkxNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAxx7Bgri6zW8QkAFGbJwfi9q+IGneIu8n/B A/pUdig+4hXbmbZlPAJblhKlKOC70XLX5PujFObm5d3N4Bc1nTH3wpfGD+rNf/mN BUHI21Wf9YeCw8TzCCjWCnO3Al78z7MNKh3O5v7pkvpWeal2utCEUes5QFbA+vEx jBgPUAe0MP7BV7vXD1qY7stqZR88v7iAh8V7rHNIjdoaJm9sF7DQUaJbXz1S0tIM Cco2QHfCGhnHw11lAc2SV5YBZEDLpo0b7TkN4MFcZrYUjhpy9gZJz3GPZ8EQXKHh lREdPo5GH5LNEg1IPUL08etdsspx6Vp/vwesHZAFbWjmVQ2chwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNgB5VN8hhvmLL18LZr8pX1Jz19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNmRlMzljZmItMjczMC0z ZTlmLTk3MzYtM2E2Y2FjMTA3MWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2In8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWvlevUNptJCQN/gUY4VmUGHAgp78cOPZ7T484yrpz6H2VdFr30ZFDA 2YSg+aGV/BPkKDdQ2o8Pxrdz9gJnoQvoObbUomw7ltH3SorMT0gQA/JG4m219tm/ WHQFrUXB1UhBjKW//dSf8IEM7DNLpNN+E41YA26xSx7NriUh39dxneAkUor9qBQf v1v1pRbJ2Jn/NHFLkZ1iUOkUBYg4lTB5sOK2XMSxCl7JnVOeje81yy0CTHS7bTFR rbhVyWmyKVN/BK2j2t5axq/h6pLq/1dtZosYqdWJXReAJOwIHNEQFAMlHuORzySF TY25DNyN2rndmMmYkaL0+Yf7OkZ30+4= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:42 2025 by rpki-client