$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa File: 3f9ad2a5-8547-3650-a790-25df90ed3852.roa (raw, json) Hash identifier: pVDT2pYGDB8Hk/tpuHiDLWEc3Dj1Xby+F22b9LGI3Lc= Subject key identifier: 30:06:E5:56:FC:5C:07:4E:FB:53:C1:95:BA:F3:F1:77:EA:F7:F6:88 Certificate issuer: /CN=8d34ec60-03b0-4663-8748-fab291e36393 Certificate serial: 010D0C9F4328584A9BCB6CC4CC839B515395F5C0 Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 395807 IP address blocks: 199.60.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:6c:c4:cc:83:9b:51:53:95:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=d85f641d-ebd8-42bd-a255-dd823f849bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fb:fd:7a:cc:ef:61:9a:e5:a0:5a:d1:18:9c: 5a:41:6c:69:58:7a:a5:c8:40:50:1b:47:e6:da:cd: cb:60:e6:77:9e:9f:50:30:34:28:1f:00:05:0e:f5: a2:0f:c9:48:95:2d:eb:52:19:48:08:01:61:43:cc: 5c:3e:b9:ad:1d:46:89:30:2b:ab:e3:43:90:a6:aa: 69:16:66:18:12:92:28:0c:da:5f:a3:a7:a6:4e:90: b2:bb:a7:00:fa:cf:c6:3f:7b:95:59:b3:ec:9c:e7: 68:57:30:4d:03:2b:ae:ab:95:6a:ad:c4:3e:84:53: 2f:d0:20:6a:6a:a7:a5:d7:49:76:a4:65:a6:6d:45: c2:c3:9d:83:3e:78:f7:af:e3:56:28:ca:9c:6a:16: ca:03:a1:1d:04:42:73:0e:5d:74:aa:2b:7f:e9:65: 16:01:95:aa:e0:99:a8:93:68:ec:2f:e3:71:81:83: 09:a3:24:c0:06:19:2c:97:65:22:06:54:c8:cf:35: 36:4d:6c:8a:76:33:08:43:0d:34:57:31:f1:92:ce: c9:81:a1:08:a9:3c:d1:64:1f:fa:8a:3d:6e:63:08: aa:7f:98:52:8c:1f:c6:b4:59:9d:ae:68:5d:c6:4a: 35:a4:9d:1f:71:0d:a3:4f:5e:e6:05:52:3e:e1:85: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:06:E5:56:FC:5C:07:4E:FB:53:C1:95:BA:F3:F1:77:EA:F7:F6:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/3f9ad2a5-8547-3650-a790-25df90ed3852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl X509v3 Authority Key Identifier: keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer sbgp-ipAddrBlock: critical IPv4: 199.60.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3c:8c:42:48:0a:39:04:4f:6b:9c:ac:49:36:6e:d3:87:8a: a4:dd:e6:61:46:c5:cb:85:44:e9:a8:fb:34:7d:06:f6:c0:91: f7:9d:81:5b:4e:57:a2:2a:b3:7f:c3:5d:ac:d7:17:72:d1:43: de:f5:ef:65:a2:20:23:fa:fc:4a:dd:07:85:69:ce:30:53:a3: b2:92:23:16:ab:3b:c3:dc:56:28:6e:27:e1:c1:5d:65:29:41: fb:41:7c:5f:0b:f6:a4:38:f3:0c:21:6b:0d:90:7b:a4:8e:03: 67:1a:38:a7:77:56:dd:d4:0e:64:e7:f3:a3:5d:83:f9:37:b5: f1:68:fd:73:a2:e9:8f:e7:7a:f3:c7:e5:84:72:8c:32:c9:c1: 4b:57:3a:ed:50:98:87:b5:e5:90:a2:7a:95:22:cf:4e:52:bc: 86:59:1d:52:78:d0:e0:e1:d3:43:01:8d:19:a5:de:55:41:f3: 1a:f2:3c:2f:18:bc:6d:af:8e:34:16:5e:fc:bd:46:4b:be:43: c2:39:bb:f9:7c:3c:fd:2f:4c:fe:f8:22:75:6f:7b:cc:59:22: ac:c4:98:1d:49:53:15:b3:d7:ef:b5:e6:a8:9f:9a:12:29:2c: 0e:78:64:a4:33:05:16:07:c3:23:51:49:a7:a2:9e:b3:b6:7c: 8e:94:24:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby2zEzIObUVOV9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2 MzkzMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk ZDg1ZjY0MWQtZWJkOC00MmJkLWEyNTUtZGQ4MjNmODQ5YmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fv9eszvYZrloFrRGJxaQWxpWHqlyEBQG0fm 2s3LYOZ3np9QMDQoHwAFDvWiD8lIlS3rUhlICAFhQ8xcPrmtHUaJMCur40OQpqpp FmYYEpIoDNpfo6emTpCyu6cA+s/GP3uVWbPsnOdoVzBNAyuuq5VqrcQ+hFMv0CBq aqel10l2pGWmbUXCw52DPnj3r+NWKMqcahbKA6EdBEJzDl10qit/6WUWAZWq4Jmo k2jsL+NxgYMJoyTABhksl2UiBlTIzzU2TWyKdjMIQw00VzHxks7JgaEIqTzRZB/6 ij1uYwiqf5hSjB/GtFmdrmhdxko1pJ0fcQ2jT17mBVI+4YV20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAG5Vb8XAdO+1PBlbrz8Xfq9/aIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0 ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvM2Y5YWQyYTUtODU0Ny0z NjUwLWE3OTAtMjVkZjkwZWQzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3 NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxzyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG08jEJICjkET2ucrEk2btOHiqTd5mFGxcuFROmo+zR9BvbAkfedgVtO V6Iqs3/DXazXF3LRQ97172WiICP6/ErdB4VpzjBTo7KSIxarO8PcVihuJ+HBXWUp QftBfF8L9qQ48wwhaw2Qe6SOA2caOKd3Vt3UDmTn86Ndg/k3tfFo/XOi6Y/nevPH 5YRyjDLJwUtXOu1QmIe15ZCiepUiz05SvIZZHVJ40ODh00MBjRml3lVB8xryPC8Y vG2vjjQWXvy9Rku+Q8I5u/l8PP0vTP74InVve8xZIqzEmB1JUxWz1++15qifmhIp LA54ZKQzBRYHwyNRSaeinrO2fI6UJKQ= -----END CERTIFICATE-----Generated at Sun Aug 10 13:47:30 2025 by rpki-client