$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa File: 3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json) Hash identifier: 9HH6gDQy/MOkXPToCIMmnMATng5Euqn2Q+VjHwrczmw= Subject key identifier: 39:16:A6:2F:BE:23:D0:E0:E0:AC:6C:63:5F:6E:59:1F:2C:BA:43:3D Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584A9900C0D529103352169BF720 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 397422 IP address blocks: 208.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c0:d5:29:10:33:52:16:9b:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=633523e8-182c-4e12-993c-6739e76f13fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4e:3c:a8:d8:33:0b:14:60:06:8d:e4:ad:05: 2e:73:e6:fa:0f:de:d6:75:92:67:27:b3:5e:b4:b6: 85:a9:7d:fc:0e:70:87:17:31:96:47:13:07:0f:41: a8:9d:c5:c3:53:26:08:dc:b0:71:1e:72:79:13:7e: 09:57:96:42:fb:61:4c:74:1d:60:8f:e9:fc:c2:97: 4d:ce:e8:4d:89:2f:ef:48:1e:ff:b7:0a:db:1b:d9: a0:e9:5e:c8:b2:98:3b:af:52:0d:2a:30:b6:f8:f8: 28:ec:b5:2d:5a:6f:ce:e9:c7:8b:89:9b:19:7e:08: 54:f2:37:7a:19:cb:ef:5a:2c:8a:2f:3d:90:8b:9d: 53:21:8d:8c:5b:4f:76:f2:7b:3d:e6:d8:ac:4b:00: f7:0e:6b:eb:37:0a:70:b5:52:8b:c8:66:30:f2:ba: 03:b0:4b:86:3e:92:df:a6:44:fe:d6:35:14:02:2c: cd:80:78:74:46:be:66:4d:be:4b:47:94:6b:d9:fe: 49:82:f6:c1:0a:07:a0:52:35:04:e1:80:27:73:6b: c7:6c:ea:46:76:d3:7e:c4:0e:f5:ea:ac:5b:df:74: 39:cd:a2:d1:ef:fa:63:51:08:33:de:d5:87:bc:cc: e5:0c:86:c3:e8:2d:a9:1b:74:5d:37:d4:44:7a:7d: 93:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:16:A6:2F:BE:23:D0:E0:E0:AC:6C:63:5F:6E:59:1F:2C:BA:43:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 208.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c6:4e:7c:aa:6b:95:5f:74:d3:46:dd:06:24:da:1b:93:12: 09:c6:1b:b4:45:62:a9:68:0d:ec:7d:db:44:72:57:89:22:d1: 51:3d:6a:6a:cb:21:fa:13:e2:16:d8:93:42:64:7b:33:87:9c: 2b:35:33:09:ef:f4:94:e8:35:24:95:62:b0:a9:99:1b:4d:19: df:1f:ad:47:ba:a9:be:12:16:1f:06:0a:bd:58:ee:f4:48:b4: 98:fd:8a:00:34:53:8c:c6:bc:94:d7:ee:e5:63:84:36:d7:9b: a3:ab:32:98:2a:34:3e:54:b9:b7:a3:be:73:16:30:ff:4e:f3: 98:39:7a:d8:45:30:15:aa:71:bc:d9:3d:db:82:0e:9b:f7:72: d7:5e:c6:ac:07:d9:45:9b:8e:35:09:77:5b:24:03:8e:85:bf: e5:29:90:2e:a0:56:54:58:37:56:d4:de:71:e1:9a:47:dc:7e: 9d:12:6b:a9:05:38:5d:78:5c:b5:dc:da:67:ac:95:6a:33:5a: 5a:c7:5f:77:f9:5b:21:3f:ba:27:a9:53:49:b7:93:19:bb:04: 08:f5:81:3a:d4:a5:df:e4:95:35:be:9f:83:96:c9:f6:90:e9: 19:a5:17:24:20:dc:79:80:1b:1d:bf:a8:bb:64:8f:53:0a:82: aa:f1:cd:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMDVKRAzUhab9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NjMzNTIzZTgtMTgyYy00ZTEyLTk5M2MtNjczOWU3NmYxM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU48qNgzCxRgBo3krQUuc+b6D97WdZJnJ7Ne tLaFqX38DnCHFzGWRxMHD0GoncXDUyYI3LBxHnJ5E34JV5ZC+2FMdB1gj+n8wpdN zuhNiS/vSB7/twrbG9mg6V7Ispg7r1INKjC2+Pgo7LUtWm/O6ceLiZsZfghU8jd6 GcvvWiyKLz2Qi51TIY2MW0928ns95tisSwD3DmvrNwpwtVKLyGYw8roDsEuGPpLf pkT+1jUUAizNgHh0Rr5mTb5LR5Rr2f5JgvbBCgegUjUE4YAnc2vHbOpGdtN+xA71 6qxb33Q5zaLR7/pjUQgz3tWHvMzlDIbD6C2pG3RdN9REen2T0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkWpi++I9Dg4KxsY19uWR8sukM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvM2M1Nzg4YjEtN2M4Mi0z Mjc1LTk0NTctYzYxZmY1MmIyODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHGTnyqa5VfdNNG3QYk2huTEgnGG7RFYqloDex920RyV4ki0VE9amrL IfoT4hbYk0JkezOHnCs1Mwnv9JToNSSVYrCpmRtNGd8frUe6qb4SFh8GCr1Y7vRI tJj9igA0U4zGvJTX7uVjhDbXm6OrMpgqND5UubejvnMWMP9O85g5ethFMBWqcbzZ PduCDpv3ctdexqwH2UWbjjUJd1skA46Fv+UpkC6gVlRYN1bU3nHhmkfcfp0Sa6kF OF14XLXc2meslWozWlrHX3f5WyE/uiepU0m3kxm7BAj1gTrUpd/klTW+n4OWyfaQ 6RmlFyQg3HmAGx2/qLtkj1MKgqrxzS8= -----END CERTIFICATE-----Generated at Tue Aug 5 16:44:20 2025 by rpki-client