$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa File: cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa (raw, json) Hash identifier: k2ajIYwHMoDF2NfW8v8o9IAYDECgnnd5t2XGwGSrc+M= Subject key identifier: 32:71:3E:0E:AF:7E:E7:DE:B5:FE:29:96:80:84:0D:8A:6B:BD:44:DA Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A8B0B601211C1840246641A80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 216.137.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:60:12:11:c1:84:02:46:64:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=7aeb9cbc-4d09-4faa-bc11-8bb654872ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:80:c2:76:0e:4f:91:96:f0:16:12:84:1d: d1:6e:fe:03:cc:6c:80:aa:76:81:bb:8a:6c:07:47: c1:93:c2:7a:86:d5:91:12:74:58:6f:ca:2e:f2:ed: fa:81:5d:69:19:ed:9b:6f:99:9f:99:e9:3d:34:f9: d4:d2:53:5f:69:c2:a4:4c:ac:1f:89:3f:d5:19:9e: 78:c4:3c:ee:da:eb:b3:c6:f4:24:56:55:df:d2:d1: 6d:d6:86:ec:16:cf:e7:13:a4:03:31:cf:e4:68:2f: 4d:7f:c9:a4:58:89:e7:40:a7:e2:94:96:78:9c:ee: 98:01:9f:67:45:2a:7f:0f:01:86:d4:d9:78:47:d7: 4a:63:07:32:9a:e9:4e:d9:7e:08:92:1a:42:5f:36: 96:f2:35:be:a2:27:85:7e:ac:0c:f6:db:f9:bf:34: 39:bc:3f:41:2d:c8:b5:2f:32:37:28:da:4d:cd:6f: a9:e5:94:1d:d8:e8:2a:71:72:12:6c:e2:64:5e:a2: e3:6b:68:63:81:13:9a:e0:6c:fd:a8:28:72:3e:c2: f3:65:71:67:51:17:72:8f:be:4a:c6:52:6b:37:ae: 5e:48:08:a6:44:69:a5:87:b0:8b:40:01:13:d0:68: be:03:77:07:58:65:bf:5d:b9:b7:b4:3d:36:c1:78: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:3E:0E:AF:7E:E7:DE:B5:FE:29:96:80:84:0D:8A:6B:BD:44:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb2313f0-298a-3e14-976e-8f20dfb6c43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c7:cd:86:d4:6c:4a:51:34:4e:a9:0f:5f:8d:db:8c:cb:d7: 01:db:fe:f8:43:b0:ac:23:e6:56:43:45:47:7f:78:81:59:27: b9:c6:6f:82:c0:f0:ac:49:5f:52:eb:b4:50:9e:41:d4:65:4d: fb:35:ef:ae:19:5d:f8:67:2b:27:66:87:4b:01:be:94:2a:4c: 04:de:4c:ad:ac:f3:5d:f5:1d:69:e4:10:ee:f7:3b:19:df:7f: d8:ab:81:ed:e6:3e:23:b8:f1:99:da:36:ea:a8:8b:02:c3:44: e4:7e:82:07:43:5f:49:f6:4f:96:b5:1f:8d:7f:77:ce:c8:98: 42:75:6d:76:19:5b:c1:26:b4:6d:0f:80:85:c7:48:e7:3c:fd: b4:92:21:a1:ec:0d:3b:6f:6e:88:55:24:05:96:0e:c8:2d:a5: 09:2c:44:9d:9c:fa:14:4d:8d:71:f6:9d:c2:2b:9c:ba:a2:32: ed:7c:7d:d0:3b:b3:a8:ef:1a:78:5a:2d:c2:f6:98:81:d0:f4: de:07:bd:d1:05:ba:53:cc:b6:4b:44:74:8d:3c:96:1f:25:b2: c1:04:4c:af:59:fe:42:5f:03:e1:40:6f:36:6b:c5:0b:70:bd: 3e:68:71:74:f8:3b:5f:e3:44:96:8f:c6:87:2d:b8:bc:0b:95: bf:7d:3a:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2ASEcGEAkZkGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk N2FlYjljYmMtNGQwOS00ZmFhLWJjMTEtOGJiNjU0ODcyZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9WAwnYOT5GW8BYShB3Rbv4DzGyAqnaBu4ps B0fBk8J6htWREnRYb8ou8u36gV1pGe2bb5mfmek9NPnU0lNfacKkTKwfiT/VGZ54 xDzu2uuzxvQkVlXf0tFt1obsFs/nE6QDMc/kaC9Nf8mkWInnQKfilJZ4nO6YAZ9n RSp/DwGG1Nl4R9dKYwcymulO2X4IkhpCXzaW8jW+oieFfqwM9tv5vzQ5vD9BLci1 LzI3KNpNzW+p5ZQd2OgqcXISbOJkXqLja2hjgROa4Gz9qChyPsLzZXFnURdyj75K xlJrN65eSAimRGmlh7CLQAET0Gi+A3cHWGW/Xbm3tD02wXh26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJxPg6vfufetf4ploCEDYprvUTaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvY2IyMzEzZjAtMjk4YS0z ZTE0LTk3NmUtOGYyMGRmYjZjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2InQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvHzYbUbEpRNE6pD1+N24zL1wHb/vhDsKwj5lZDRUd/eIFZJ7nGb4LA 8KxJX1LrtFCeQdRlTfs1764ZXfhnKydmh0sBvpQqTATeTK2s8131HWnkEO73Oxnf f9irge3mPiO48ZnaNuqoiwLDROR+ggdDX0n2T5a1H41/d87ImEJ1bXYZW8EmtG0P gIXHSOc8/bSSIaHsDTtvbohVJAWWDsgtpQksRJ2c+hRNjXH2ncIrnLqiMu18fdA7 s6jvGnhaLcL2mIHQ9N4HvdEFulPMtktEdI08lh8lssEETK9Z/kJfA+FAbzZrxQtw vT5ocXT4O1/jRJaPxoctuLwLlb99OqU= -----END CERTIFICATE-----Generated at Mon Aug 4 21:49:02 2025 by rpki-client