$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa File: f205ab86-219a-31dd-ab9e-6b08bb875800.roa (raw, json) Hash identifier: mGElJEQOzALI0FpbTz5bky7Se53hVw1uXFinMmg+8i0= Subject key identifier: D9:42:13:94:4E:BC:A9:3B:37:8C:53:50:7C:D8:24:E1:53:CF:59:F7 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A8B0B6164E686D9AD2A3CC680 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 216.137.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:61:64:e6:86:d9:ad:2a:3c:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=1d4ab93e-d685-46b0-9fe8-867073804678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:30:d2:80:22:1f:fb:16:7a:12:3a:3a:7d: 67:4c:7b:83:aa:a1:49:7f:79:9e:16:e4:8e:15:cc: b3:2e:41:9c:8d:e6:c0:3b:7e:8a:74:28:00:a4:1a: 2e:38:3c:d1:ec:c6:2e:bf:9e:31:0d:0d:67:c4:29: 74:ff:a9:e2:5c:a2:46:35:30:3d:42:d1:fa:0e:c9: 36:91:4d:9e:76:1d:85:1c:91:4e:05:03:83:6e:b2: ca:a2:2d:56:0b:ca:28:29:e0:9e:05:96:17:a8:dc: b9:59:9a:85:77:16:b4:5f:75:c1:2d:26:f4:a9:21: db:65:26:d0:89:de:53:17:7c:eb:a6:f1:64:d8:f5: b4:82:62:88:66:7a:ed:8d:61:40:1c:c4:da:95:49: ba:c3:fa:01:79:92:82:c9:d0:87:28:51:62:39:ea: d1:98:6e:99:3e:28:bc:41:4b:6a:74:2d:06:ca:b8: 1b:31:2a:cf:3d:59:88:6a:2d:a5:90:ba:f0:0b:76: c4:44:22:89:bc:2a:dd:9e:bb:f8:7d:9c:46:dd:b0: 09:de:3e:62:10:7a:68:f6:d9:63:c7:59:8c:cc:03: 2c:3a:4c:09:ff:dc:21:8e:c1:96:3b:b5:ff:39:27: 08:33:ce:a7:08:fa:69:dc:f7:e2:f8:04:d6:ae:40: 77:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:42:13:94:4E:BC:A9:3B:37:8C:53:50:7C:D8:24:E1:53:CF:59:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.137.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:18:cd:69:4a:f0:ff:79:55:cf:91:5e:a0:62:8a:0e:ce:79: d9:4e:10:d5:e8:8b:db:33:f8:4c:64:b7:0d:fd:25:b5:6c:3a: dd:bb:2d:7e:ac:3a:46:6a:29:01:bc:5c:06:f9:21:3c:82:4a: 61:5d:1c:f3:82:c2:e4:f2:64:1e:7a:98:06:ad:2a:6e:7c:7f: 10:d9:57:e8:2e:93:8d:f4:53:2d:94:9a:75:08:a6:7a:7b:d6: e6:69:8e:51:06:a5:ba:d7:18:b5:8f:c1:26:24:8d:99:c2:cb: 37:24:9d:2c:8c:3c:5b:7b:6d:80:3e:99:00:1f:01:ec:c1:3a: ba:3d:10:56:4c:ab:b8:a4:37:18:97:02:08:8f:be:8e:bd:cf: 47:ee:45:91:73:d2:15:a1:8f:10:a1:b8:e8:92:e4:c4:52:52: 46:77:01:27:4b:54:ee:2e:17:a4:bf:13:1d:14:37:38:75:23: 0f:10:b6:db:c8:c4:6b:02:f1:06:7a:a1:a5:5c:4b:1f:e6:f7: 21:1a:1f:8f:bb:fa:43:d0:1f:63:e0:3f:49:dd:a6:e7:40:dd: a2:04:15:00:38:2b:30:df:14:c9:ec:a5:b4:4b:be:f3:ed:67: 6f:cd:b0:d3:46:83:48:71:67:5d:b4:19:ab:6f:a5:eb:ca:1c: a9:9b:ab:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC2Fk5obZrSo8xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MWQ0YWI5M2UtZDY4NS00NmIwLTlmZTgtODY3MDczODA0Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHkw0oAiH/sWehI6On1nTHuDqqFJf3meFuSO FcyzLkGcjebAO36KdCgApBouODzR7MYuv54xDQ1nxCl0/6niXKJGNTA9QtH6Dsk2 kU2edh2FHJFOBQODbrLKoi1WC8ooKeCeBZYXqNy5WZqFdxa0X3XBLSb0qSHbZSbQ id5TF3zrpvFk2PW0gmKIZnrtjWFAHMTalUm6w/oBeZKCydCHKFFiOerRmG6ZPii8 QUtqdC0GyrgbMSrPPVmIai2lkLrwC3bERCKJvCrdnrv4fZxG3bAJ3j5iEHpo9tlj x1mMzAMsOkwJ/9whjsGWO7X/OScIM86nCPpp3Pfi+ATWrkB3AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlCE5ROvKk7N4xTUHzYJOFTz1n3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZjIwNWFiODYtMjE5YS0z MWRkLWFiOWUtNmIwOGJiODc1ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2InAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoYzWlK8P95Vc+RXqBiig7OedlOENXoi9sz+Exktw39JbVsOt27LX6s OkZqKQG8XAb5ITyCSmFdHPOCwuTyZB56mAatKm58fxDZV+guk430Uy2UmnUIpnp7 1uZpjlEGpbrXGLWPwSYkjZnCyzcknSyMPFt7bYA+mQAfAezBOro9EFZMq7ikNxiX AgiPvo69z0fuRZFz0hWhjxChuOiS5MRSUkZ3ASdLVO4uF6S/Ex0UNzh1Iw8QttvI xGsC8QZ6oaVcSx/m9yEaH4+7+kPQH2PgP0ndpudA3aIEFQA4KzDfFMnspbRLvvPt Z2/NsNNGg0hxZ120GatvpevKHKmbq4c= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:18 2025 by rpki-client