$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa File: 9a980a6a-941e-34a1-9ffa-edd653116330.roa (raw, json) Hash identifier: NGtvqqdXeCtfQcstbDQnPQHJFodn2kIn4X1Lwtxk5EU= Subject key identifier: 1A:7B:8C:3B:DE:E3:B8:74:21:EF:0D:DB:99:79:9A:DC:B1:77:B6:3D Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A8B0B60036FCBD43284C98000 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 216.137.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:60:03:6f:cb:d4:32:84:c9:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=89a42823-6f64-44b0-a95c-bd07ef8344d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:73:48:d7:a4:df:f6:a8:34:df:1f:b2:b5: 77:0c:65:9a:75:33:14:48:d8:1f:96:da:66:57:ed: e0:a9:3b:94:59:cc:5e:33:0b:98:d2:21:0d:aa:89: 52:ec:07:f4:c4:0f:b2:4c:7e:5c:a5:4f:79:84:8e: 07:9c:20:e6:a6:d9:c5:45:b0:60:7d:5b:fc:14:a3: e7:e1:2f:74:bc:f7:9a:3d:c9:80:b9:88:7e:a4:0b: 18:d4:ce:59:89:df:a3:cf:c4:58:47:f7:74:22:f4: 1b:b9:a2:54:4d:a1:2a:ec:dd:60:e5:ad:2b:b7:26: cc:f9:5a:aa:c8:c4:1d:43:1a:28:0d:09:6c:9f:0b: 36:82:3d:bf:d3:3a:e7:fc:87:87:89:d7:e5:0e:9e: 31:72:14:73:b3:c9:38:ea:c1:8d:9a:4d:b3:6c:9d: 97:2f:ca:a6:74:ff:d7:b6:3c:b5:70:65:3c:93:3e: d8:f1:c0:d2:be:78:27:1e:26:70:ff:2d:3b:3a:21: 79:60:2a:b1:c7:af:fe:74:e6:c5:31:ef:04:51:3d: 6e:e6:de:71:c5:de:82:23:ae:4e:3c:d4:78:72:ab: 4e:3d:ad:6e:90:f5:3f:b7:32:29:94:4a:d1:de:ad: 5e:b8:0f:64:0f:bb:6f:0b:86:67:56:6f:61:33:a5: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7B:8C:3B:DE:E3:B8:74:21:EF:0D:DB:99:79:9A:DC:B1:77:B6:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:22:4e:be:98:91:c6:42:a0:20:13:13:9e:42:8f:5c:68:f1: 07:53:cd:8f:f0:72:b7:a1:ab:c2:db:46:f0:00:c9:3f:2d:bc: 14:af:cb:60:51:60:25:34:89:c2:be:27:e8:67:44:0f:5d:08: 40:98:f7:eb:3e:eb:29:4c:08:fe:a2:60:fa:58:0b:9d:cb:79: 5b:88:76:64:6e:5e:2a:00:fb:e2:44:59:71:16:9e:b2:a1:52: 9b:48:30:93:a3:46:6f:b5:02:96:ca:6f:e1:0c:76:59:2c:e4: 5f:32:09:56:a2:e1:df:4c:7e:17:cd:92:a3:d6:91:83:a3:77: bc:f8:7e:dd:33:5b:24:07:1e:1f:06:f2:40:63:45:8b:16:77: 04:0d:56:13:53:a5:a6:8a:44:51:1d:47:f7:bb:f8:75:6f:6d: 11:b4:f3:ad:fb:30:90:c1:4b:0b:20:18:2a:ac:52:79:30:d8: 1b:21:9b:52:f2:82:52:f9:3c:ac:21:53:3a:5f:5b:e6:6c:33: f6:67:16:14:f9:7b:3a:1b:34:97:a9:15:72:18:c6:29:13:6c: 51:26:00:13:04:5d:5e:18:46:92:46:30:5c:58:4f:b8:5e:c2: 1a:99:88:c1:fd:67:a5:d5:2e:9e:b8:8f:17:2c:01:38:94:be: cb:35:88:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2ADb8vUMoTJgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ODlhNDI4MjMtNmY2NC00NGIwLWE5NWMtYmQwN2VmODM0NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNpzSNek3/aoNN8fsrV3DGWadTMUSNgfltpm V+3gqTuUWcxeMwuY0iENqolS7Af0xA+yTH5cpU95hI4HnCDmptnFRbBgfVv8FKPn 4S90vPeaPcmAuYh+pAsY1M5Zid+jz8RYR/d0IvQbuaJUTaEq7N1g5a0rtybM+Vqq yMQdQxooDQlsnws2gj2/0zrn/IeHidflDp4xchRzs8k46sGNmk2zbJ2XL8qmdP/X tjy1cGU8kz7Y8cDSvngnHiZw/y07OiF5YCqxx6/+dObFMe8EUT1u5t5xxd6CI65O PNR4cqtOPa1ukPU/tzIplErR3q1euA9kD7tvC4ZnVm9hM6Uy2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp7jDve47h0Ie8N25l5mtyxd7Y9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvOWE5ODBhNmEtOTQxZS0z NGExLTlmZmEtZWRkNjUzMTE2MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsiTr6YkcZCoCATE55Cj1xo8QdTzY/wcrehq8LbRvAAyT8tvBSvy2BR YCU0icK+J+hnRA9dCECY9+s+6ylMCP6iYPpYC53LeVuIdmRuXioA++JEWXEWnrKh UptIMJOjRm+1ApbKb+EMdlks5F8yCVai4d9MfhfNkqPWkYOjd7z4ft0zWyQHHh8G 8kBjRYsWdwQNVhNTpaaKRFEdR/e7+HVvbRG08637MJDBSwsgGCqsUnkw2Bshm1Ly glL5PKwhUzpfW+ZsM/ZnFhT5ezobNJepFXIYxikTbFEmABMEXV4YRpJGMFxYT7he whqZiMH9Z6XVLp64jxcsATiUvss1iNw= -----END CERTIFICATE-----Generated at Tue Aug 5 17:30:25 2025 by rpki-client