$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa File: 40a445a0-c71d-3db6-9909-8be2612ff8f9.roa (raw, json) Hash identifier: Vo5inNO2HCzqHz1mGhM/E8yaCPRvNzVrugt5+EzBtRA= Subject key identifier: DD:AB:E4:DB:A4:37:30:17:89:95:34:8D:6B:EF:11:48:3F:7C:E8:AC Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584AA85BB759D87DD356665BE700 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 209.114.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b7:59:d8:7d:d3:56:66:5b:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=d4985c09-f782-445d-a458-aa0686b715b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:3a:4e:53:62:d8:1b:85:b4:d8:aa:a5:06: 3f:cd:47:80:30:d7:e7:f6:5d:f9:af:25:3a:db:b8: 90:02:54:e4:36:15:b2:25:ee:a5:e5:fe:72:71:d0: 00:b1:2d:25:da:bc:2c:37:3a:ff:92:28:bb:1e:cb: 99:c9:b4:3d:fe:ac:a4:4d:04:c3:eb:55:1d:be:2a: ba:5b:cb:fd:98:40:8a:ac:7d:09:b3:56:82:49:9c: b8:8a:37:ca:b7:1c:b6:77:e1:4a:bb:b1:fd:e3:08: fc:8c:e8:6d:c3:df:40:8f:52:36:e8:53:00:e5:90: 6e:6b:cd:cc:42:c4:df:eb:6c:24:f1:a0:78:af:9b: 13:b0:e2:63:ec:3a:99:0d:76:16:43:28:6d:43:69: 83:c7:3c:69:58:b7:f4:f0:77:cf:10:ef:c1:9a:fb: 8c:40:8a:60:1e:1f:b2:c1:a4:2f:32:3b:f2:57:3c: e6:75:97:5e:10:a2:3e:7a:f4:00:ec:c0:ec:0c:b3: ec:55:89:71:92:6c:6e:57:5f:78:2b:aa:39:a2:28: 20:1f:2b:40:2a:47:2c:5e:c0:a2:d0:b9:cf:90:91: 93:48:84:fb:21:67:e5:c7:0f:2f:95:1c:2d:6f:28: 53:ed:b9:76:d2:38:8e:d9:ce:df:a6:0e:9c:3c:03: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AB:E4:DB:A4:37:30:17:89:95:34:8D:6B:EF:11:48:3F:7C:E8:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:13:19:2b:89:47:2c:f9:76:c2:9b:1f:c6:a8:6d:70:f6:ef: d7:b7:fd:0f:90:a1:b6:89:f5:0f:2f:76:ce:63:f9:95:74:03: d1:47:1a:5b:43:60:e3:8b:ea:98:d0:ce:d9:f9:88:ac:97:db: d0:f3:1b:84:65:12:60:5b:d9:dc:0c:ca:b8:77:c9:af:0a:b5: 0f:a5:c8:0a:8d:8e:ce:57:a4:da:2d:44:69:29:4e:17:45:f1: 71:b5:3d:c9:ee:94:00:94:43:18:26:e4:31:a6:16:a6:2c:f1: d6:96:4b:22:88:05:23:cd:b4:bc:52:e2:fc:e3:ab:df:cc:bf: 9f:d6:5c:f5:63:6c:e3:48:bc:d5:6b:db:92:ec:7f:af:54:00: f6:dd:d5:2d:21:75:1e:23:ec:76:d4:31:72:25:25:5f:64:ff: 63:4b:2f:fb:f1:27:23:ac:f4:11:c2:a7:9d:71:13:4f:d4:7f: 88:f5:78:b1:0c:05:a3:47:0e:8c:14:17:d0:4e:df:82:bb:f3: 46:b3:5d:c5:e4:44:7e:ed:d0:60:0f:90:1a:23:b2:bd:66:5a: 9d:6a:44:a0:75:10:38:10:9f:8e:dd:e3:58:aa:64:f7:a0:8f: 99:8a:dd:f8:8d:d8:39:9e:e7:90:a8:e3:11:5e:68:e9:c9:aa: a8:80:34:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7dZ2H3TVmZb5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ZDQ5ODVjMDktZjc4Mi00NDVkLWE0NTgtYWEwNjg2YjcxNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WI6TlNi2BuFtNiqpQY/zUeAMNfn9l35ryU6 27iQAlTkNhWyJe6l5f5ycdAAsS0l2rwsNzr/kii7HsuZybQ9/qykTQTD61Udviq6 W8v9mECKrH0Js1aCSZy4ijfKtxy2d+FKu7H94wj8jOhtw99Aj1I26FMA5ZBua83M QsTf62wk8aB4r5sTsOJj7DqZDXYWQyhtQ2mDxzxpWLf08HfPEO/BmvuMQIpgHh+y waQvMjvyVzzmdZdeEKI+evQA7MDsDLPsVYlxkmxuV194K6o5oiggHytAKkcsXsCi 0LnPkJGTSIT7IWflxw8vlRwtbyhT7bl20jiO2c7fpg6cPAMghwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2r5NukNzAXiZU0jWvvEUg/fOisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvNDBhNDQ1YTAtYzcxZC0z ZGI2LTk5MDktOGJlMjYxMmZmOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsTGSuJRyz5dsKbH8aobXD279e3/Q+QobaJ9Q8vds5j+ZV0A9FHGltD YOOL6pjQztn5iKyX29DzG4RlEmBb2dwMyrh3ya8KtQ+lyAqNjs5XpNotRGkpThdF 8XG1PcnulACUQxgm5DGmFqYs8daWSyKIBSPNtLxS4vzjq9/Mv5/WXPVjbONIvNVr 25Lsf69UAPbd1S0hdR4j7HbUMXIlJV9k/2NLL/vxJyOs9BHCp51xE0/Uf4j1eLEM BaNHDowUF9BO34K780azXcXkRH7t0GAPkBojsr1mWp1qRKB1EDgQn47d41iqZPeg j5mK3fiN2Dme55Co4xFeaOnJqqiANHc= -----END CERTIFICATE-----Generated at Thu Aug 7 04:44:32 2025 by rpki-client