$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa File: dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa (raw, json) Hash identifier: dUa1TvpH1CpFjNTMBiujNwdI1N+C3/aDde/DXL/eams= Subject key identifier: 0C:C2:92:29:47:0D:C0:C3:0B:C2:DD:F9:AD:40:CD:DB:64:39:F5:29 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A8B0B58A008B5D2E1CF150180 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 64.4.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:58:a0:08:b5:d2:e1:cf:15:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=062a0f7f-aee7-4af7-895b-b1ff8300f2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:7f:7d:68:f4:e2:e7:b8:2c:c5:01:1f:90: 03:5a:f9:46:18:2a:a7:34:eb:c5:3d:5d:1b:80:28: 2b:4b:a3:19:85:a3:48:9f:19:c4:09:fe:d9:5c:f3: d4:c6:1e:d2:81:67:5c:af:cd:45:89:48:99:ec:57: 98:f4:24:3d:d6:b3:c0:4a:b0:2d:e1:30:71:12:1a: d6:d8:b8:68:03:f3:24:72:d0:af:63:b9:0e:a6:5c: 7d:aa:34:2f:5d:14:cf:af:1d:44:ea:c2:c2:c3:c4: 05:4c:41:e5:eb:64:16:70:65:b1:de:f7:70:5f:82: 7d:17:14:3b:2d:79:e7:f2:bc:f2:50:d5:d2:ef:f8: 12:f6:7f:f1:4a:78:a2:9c:e7:ed:48:26:da:25:1a: 34:e6:cc:5e:78:57:57:7d:b4:94:c1:5f:2e:51:ed: e4:03:8a:d0:d5:67:f1:f7:c7:fe:5d:85:98:90:82: 82:bb:67:89:da:c1:3e:61:38:84:70:12:fd:80:d7: a6:df:fd:f7:e7:ca:2d:c8:18:75:2e:41:69:b6:31: d7:de:f9:8e:bb:5c:77:9b:45:52:b6:34:66:71:0b: e7:f8:e0:96:ca:bf:e3:b9:d1:fd:f7:52:56:6f:b2: 12:ce:66:b2:ee:a6:b1:a8:14:20:9e:33:75:cd:f1: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C2:92:29:47:0D:C0:C3:0B:C2:DD:F9:AD:40:CD:DB:64:39:F5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/dffc97fb-786e-318b-b4ee-293d1a0f1da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:24:46:98:f4:ba:20:3e:79:d4:b0:99:bc:88:00:fb:25:3f: 73:a5:1f:4c:7f:54:8b:01:78:55:2f:87:12:86:53:f6:5e:3f: d7:48:35:f2:e7:52:2f:bf:b4:eb:0c:ae:28:18:e4:7b:55:d6: 75:6f:cf:75:07:63:9d:42:7d:79:33:97:da:c4:b3:19:42:11: 97:27:63:c4:f1:19:7c:9b:9e:4f:12:6f:1f:66:45:67:89:81: 68:a2:53:39:1f:b8:c3:33:c3:55:8c:3e:09:3d:29:cd:5f:9d: 16:50:39:25:2b:47:84:b0:0e:9e:f9:2c:ee:bf:42:4e:30:0b: e2:51:65:96:fd:ac:5b:7f:4c:d6:f0:65:c2:e1:3c:27:f4:ae: 9e:28:f4:2b:a2:2d:ac:24:ba:e2:03:21:b0:67:b7:4e:ac:1c: 46:ab:7c:11:70:7c:9b:b7:eb:95:16:17:06:6d:6a:4c:64:61: 87:ed:a5:ff:69:5e:cb:c0:03:6c:c6:43:32:47:3a:11:7a:a1: 2e:7a:a5:8c:50:8a:f1:6f:a5:36:b0:5e:56:fd:28:a8:8a:6b: d6:62:3f:e5:3f:36:6c:6b:c5:ea:6c:df:4d:95:e4:83:00:3c: 4c:67:4c:1d:d5:96:2b:bd:8d:74:03:87:9f:d5:0c:10:bf:5f: 9b:a7:1e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1igCLXS4c8VAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MDYyYTBmN2YtYWVlNy00YWY3LTg5NWItYjFmZjgzMDBmMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGl/fWj04ue4LMUBH5ADWvlGGCqnNOvFPV0b gCgrS6MZhaNInxnECf7ZXPPUxh7SgWdcr81FiUiZ7FeY9CQ91rPASrAt4TBxEhrW 2LhoA/MkctCvY7kOplx9qjQvXRTPrx1E6sLCw8QFTEHl62QWcGWx3vdwX4J9FxQ7 LXnn8rzyUNXS7/gS9n/xSniinOftSCbaJRo05sxeeFdXfbSUwV8uUe3kA4rQ1Wfx 98f+XYWYkIKCu2eJ2sE+YTiEcBL9gNem3/3358otyBh1LkFptjHX3vmOu1x3m0VS tjRmcQvn+OCWyr/judH991JWb7ISzmay7qaxqBQgnjN1zfELJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzCkilHDcDDC8Ld+a1AzdtkOfUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGZmYzk3ZmItNzg2ZS0z MThiLWI0ZWUtMjkzZDFhMGYxZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAkRpj0uiA+edSwmbyIAPslP3OlH0x/VIsBeFUvhxKGU/ZeP9dINfLn Ui+/tOsMrigY5HtV1nVvz3UHY51CfXkzl9rEsxlCEZcnY8TxGXybnk8Sbx9mRWeJ gWiiUzkfuMMzw1WMPgk9Kc1fnRZQOSUrR4SwDp75LO6/Qk4wC+JRZZb9rFt/TNbw ZcLhPCf0rp4o9CuiLawkuuIDIbBnt06sHEarfBFwfJu365UWFwZtakxkYYftpf9p XsvAA2zGQzJHOhF6oS56pYxQivFvpTawXlb9KKiKa9ZiP+U/Nmxrxeps302V5IMA PExnTB3Vliu9jXQDh5/VDBC/X5unHgQ= -----END CERTIFICATE-----Generated at Mon Aug 4 21:43:20 2025 by rpki-client