$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa File: db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa (raw, json) Hash identifier: rW0any6y1pwZxwg3BVrGEhVkSQOJSirnH3PrB/nGqEg= Subject key identifier: 43:2E:26:EF:1B:AA:51:4C:26:12:61:7A:16:52:E0:B0:ED:36:79:07 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A7D15FFB78CB1DD0F3CF4BC20 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 11090 IP address blocks: 216.152.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:ff:b7:8c:b1:dd:0f:3c:f4:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=dcc69ff6-5c75-4d51-b915-190c293f8b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:34:01:b5:2f:27:19:1f:4b:79:93:70:85:31: 2d:12:d3:d7:34:3b:02:e2:e7:05:90:ef:0b:66:f3: 6e:7b:f5:2f:34:3a:a7:8c:f9:a5:4b:8d:6c:3e:23: b0:53:fd:90:28:11:86:5a:1d:91:d8:99:52:0d:91: e3:68:74:9a:d4:9c:e7:20:ca:eb:46:e1:7b:0f:ba: 11:48:42:6e:8b:2b:a1:aa:96:a1:35:ac:13:8f:c9: 0c:c1:e3:65:67:9a:0f:5d:7c:af:f1:03:5a:b6:ee: 08:dc:87:e0:68:47:d0:b0:3a:8b:a2:fc:50:96:a9: 9a:52:28:da:fc:75:e4:d0:ad:65:28:44:7a:62:59: ed:15:f1:17:82:7c:56:3b:26:e9:49:d3:e1:69:73: e6:01:62:17:f7:b3:1e:72:8a:6a:42:32:f1:7e:42: a7:f7:57:c1:fc:38:9d:d0:9d:df:6d:24:29:e6:13: c9:5f:df:94:3a:8a:76:78:9b:18:e8:bd:65:b5:46: 86:89:16:80:18:62:c2:fa:bb:e6:08:10:80:0e:98: 61:26:14:8a:59:e4:64:3c:2b:c2:4f:94:67:c3:76: ff:19:dd:25:f6:5d:d8:75:ca:24:98:6a:5b:df:74: 98:75:b9:dc:05:6f:2a:ce:f8:7b:39:ca:6f:b3:60: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2E:26:EF:1B:AA:51:4C:26:12:61:7A:16:52:E0:B0:ED:36:79:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:19:3f:60:05:4a:99:8c:4d:48:0f:fe:f6:9e:22:a8:3e:1a: e9:e6:90:9c:8f:8a:da:2b:68:7c:6c:14:16:46:20:d7:e7:03: 88:b7:4d:38:08:af:bf:ac:6a:d5:69:e9:c3:cb:7d:a9:7b:d0: 95:57:13:a6:28:89:ca:ff:62:cf:19:c8:4e:87:21:f8:3c:6f: d5:be:9f:c0:6d:15:2c:5c:a9:c1:52:2c:29:ea:8b:94:c6:35: 2b:24:82:66:72:2f:5c:10:28:73:a1:b8:59:a1:77:df:ee:bc: 8a:fc:3f:74:65:b9:2b:27:e3:77:82:c9:1f:3e:b0:75:29:e4: 0e:15:df:9f:8c:32:ec:d7:a8:7d:cd:4e:70:b7:56:3e:31:b3: 73:31:1b:cd:ff:8c:da:eb:91:d8:1c:e6:a1:e4:a6:6e:e8:6e: 49:76:1d:fe:69:b1:19:f8:f8:5f:68:7c:44:09:8d:75:7a:8f: e3:c4:8f:f8:48:a6:6e:0d:28:cf:27:f3:a2:73:8e:9b:3e:37: a2:90:13:e6:e7:00:4c:d3:6b:36:fb:81:5b:e2:74:95:9f:2c: e6:a4:6f:0d:f4:d5:e3:4e:48:25:67:d4:52:00:77:31:ae:be: 8b:a4:84:a5:33:04:52:d9:44:59:3f:7f:95:71:f8:3e:e5:57: 56:70:67:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Ff+3jLHdDzz0vCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZGNjNjlmZjYtNWM3NS00ZDUxLWI5MTUtMTkwYzI5M2Y4YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDQBtS8nGR9LeZNwhTEtEtPXNDsC4ucFkO8L ZvNue/UvNDqnjPmlS41sPiOwU/2QKBGGWh2R2JlSDZHjaHSa1JznIMrrRuF7D7oR SEJuiyuhqpahNawTj8kMweNlZ5oPXXyv8QNatu4I3IfgaEfQsDqLovxQlqmaUija /HXk0K1lKER6YlntFfEXgnxWOybpSdPhaXPmAWIX97MecopqQjLxfkKn91fB/Did 0J3fbSQp5hPJX9+UOop2eJsY6L1ltUaGiRaAGGLC+rvmCBCADphhJhSKWeRkPCvC T5Rnw3b/Gd0l9l3YdcokmGpb33SYdbncBW8qzvh7Ocpvs2BThQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMuJu8bqlFMJhJhehZS4LDtNnkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGIwYWIzZjQtZjJhYi0z NDA2LWJjZWQtNjc1ODliOWUwYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMZP2AFSpmMTUgP/vaeIqg+GunmkJyPitoraHxsFBZGINfnA4i3TTgI r7+satVp6cPLfal70JVXE6Yoicr/Ys8ZyE6HIfg8b9W+n8BtFSxcqcFSLCnqi5TG NSskgmZyL1wQKHOhuFmhd9/uvIr8P3RluSsn43eCyR8+sHUp5A4V35+MMuzXqH3N TnC3Vj4xs3MxG83/jNrrkdgc5qHkpm7obkl2Hf5psRn4+F9ofEQJjXV6j+PEj/hI pm4NKM8n86Jzjps+N6KQE+bnAEzTazb7gVvidJWfLOakbw301eNOSCVn1FIAdzGu voukhKUzBFLZRFk/f5Vx+D7lV1ZwZ/k= -----END CERTIFICATE-----Generated at Tue Aug 5 08:24:17 2025 by rpki-client