$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa File: ef290b1f-5b52-39da-9484-acbda5333639.roa (raw, json) Hash identifier: 523zf+kwzpwH6N7lhB6DlFBfms8OuzWn8u0g0BrDbqU= Subject key identifier: 7F:39:A2:0D:83:4A:5A:96:16:BC:2D:39:D7:37:E1:42:33:31:E1:A3 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A8B0B57ED2820F9D50CDDB780 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 64.4.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:57:ed:28:20:f9:d5:0c:dd:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=bf767875-8a19-4aa7-a238-ef7103374b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:d2:14:52:f1:0d:a0:b4:49:08:d8:19:11: 8b:4d:29:aa:7d:e5:8b:bf:9e:aa:33:7c:c9:65:1f: f9:31:de:bf:5d:1e:d7:12:d7:3b:a5:97:1d:80:b7: 56:70:0c:a7:dc:93:ad:89:c0:73:3c:a4:74:30:50: 2c:cf:20:59:f0:10:b0:c4:22:f7:dc:a2:41:89:4c: 57:92:6d:5b:71:c2:83:a3:61:27:98:07:9e:f2:60: 5d:44:0b:5c:2e:10:fd:58:d7:5c:01:cf:85:08:41: 0f:b5:ac:84:b1:5b:08:fa:0c:2e:f8:b1:0d:2a:f4: a8:78:fa:df:3d:6b:cb:7a:9d:37:87:b2:22:d4:18: 1a:cd:f0:30:84:9a:2f:f9:e3:08:a3:14:b0:e4:0d: 07:29:a3:8b:a1:1f:82:2a:9f:00:4f:38:cb:ba:13: 01:d9:3d:89:b6:4a:f7:09:b9:76:b4:37:98:20:5d: ed:6c:7e:ff:e0:69:0c:67:cb:7c:c5:5a:9f:2e:fb: fd:52:48:f1:d0:d1:37:4b:b1:72:b6:0f:e5:c7:f2: 5a:e3:a7:f1:2c:d1:de:e4:7d:13:ff:73:c9:dc:4e: 84:6c:20:22:a8:e8:84:5c:dd:7d:6b:93:1b:e9:dc: f6:35:a6:dd:e1:66:ea:d1:08:02:4e:9e:db:cb:0a: 37:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:39:A2:0D:83:4A:5A:96:16:BC:2D:39:D7:37:E1:42:33:31:E1:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ef290b1f-5b52-39da-9484-acbda5333639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:61:43:27:99:a9:24:ec:37:c7:0c:ab:e4:d6:98:c5:51:a0: 13:c3:6b:4f:2d:02:93:bc:ee:9c:e0:a6:1b:bb:49:97:19:fb: fe:f4:ea:ea:0f:21:87:28:76:3b:05:28:5a:da:a0:06:5b:49: 6f:6c:cc:0d:37:73:f9:15:73:85:12:d4:6f:30:27:09:7b:fe: a3:f4:9a:0d:bb:b4:25:67:3d:80:fb:45:f9:c3:b8:f2:23:d5: 65:10:b4:09:55:33:70:eb:1d:38:0e:35:69:ca:69:81:38:f7: 2e:b7:84:76:ea:c5:d9:f2:11:fa:e6:b6:5c:c8:04:41:92:14: ac:c4:5e:76:f5:56:f8:be:f2:72:c3:a9:05:29:6c:44:45:d6: 1f:88:8a:ed:58:74:69:b1:f3:1d:a9:26:dc:51:ad:63:4b:54: f0:60:50:f8:91:74:9b:a5:b3:de:ea:38:18:d4:5b:3f:8a:45: a9:33:18:d6:fd:c1:fc:50:4e:27:ca:e7:87:75:78:11:e3:69: ac:11:e5:4b:6b:97:97:64:47:2f:1c:10:74:1d:51:2c:89:1e: 83:98:ab:a0:a8:bb:4c:56:3a:43:01:3a:b5:71:6e:6f:6c:17: f8:e1:a2:71:70:b6:60:6b:7e:e1:6b:fc:a7:4e:99:1f:b7:8f: 19:95:1d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1ftKCD51Qzdt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk YmY3Njc4NzUtOGExOS00YWE3LWEyMzgtZWY3MTAzMzc0YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX7SFFLxDaC0SQjYGRGLTSmqfeWLv56qM3zJ ZR/5Md6/XR7XEtc7pZcdgLdWcAyn3JOticBzPKR0MFAszyBZ8BCwxCL33KJBiUxX km1bccKDo2EnmAee8mBdRAtcLhD9WNdcAc+FCEEPtayEsVsI+gwu+LENKvSoePrf PWvLep03h7Ii1BgazfAwhJov+eMIoxSw5A0HKaOLoR+CKp8ATzjLuhMB2T2Jtkr3 Cbl2tDeYIF3tbH7/4GkMZ8t8xVqfLvv9Ukjx0NE3S7Fytg/lx/Ja46fxLNHe5H0T /3PJ3E6EbCAiqOiEXN19a5Mb6dz2Nabd4Wbq0QgCTp7bywo3oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH85og2DSlqWFrwtOdc34UIzMeGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZWYyOTBiMWYtNWI1Mi0z OWRhLTk0ODQtYWNiZGE1MzMzNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQATsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdhQyeZqSTsN8cMq+TWmMVRoBPDa08tApO87pzgphu7SZcZ+/706uoP IYcodjsFKFraoAZbSW9szA03c/kVc4US1G8wJwl7/qP0mg27tCVnPYD7RfnDuPIj 1WUQtAlVM3DrHTgONWnKaYE49y63hHbqxdnyEfrmtlzIBEGSFKzEXnb1Vvi+8nLD qQUpbERF1h+Iiu1YdGmx8x2pJtxRrWNLVPBgUPiRdJuls97qOBjUWz+KRakzGNb9 wfxQTifK54d1eBHjaawR5Utrl5dkRy8cEHQdUSyJHoOYq6Cou0xWOkMBOrVxbm9s F/jhonFwtmBrfuFr/KdOmR+3jxmVHUY= -----END CERTIFICATE-----Generated at Wed Aug 6 00:54:19 2025 by rpki-client