$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa File: afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa (raw, json) Hash identifier: Bj5LBEfSgmV2Mh5HXlK5nAQx9uxOjOjV8EEjPRfDCNQ= Subject key identifier: 2B:6D:23:C1:61:19:63:03:45:E0:57:DB:98:9B:E0:FA:7D:9E:B1:F6 Certificate issuer: /CN=3cd40041-6571-4f30-b76a-4746a4c2d957 Certificate serial: 010D0C9F4328584AA42B7F617B8BB1DCCC830C00 Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 11051 IP address blocks: 205.207.255.0/24 maxlen: 24 2620:13e:500a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7f:61:7b:8b:b1:dc:cc:83:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=c8df2c94-365a-4446-8476-e81d66dd2ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:8b:62:d5:3e:9c:ac:81:fd:07:92:72:8d: 37:03:09:f6:df:74:22:96:37:8b:53:36:a9:25:4a: 37:89:89:ea:7f:82:c3:f0:b9:f7:15:f7:47:e8:a8: b1:4f:6c:85:a3:7b:43:1d:82:a3:9e:c4:12:ec:1f: 34:dd:cd:90:0f:fa:15:fa:ec:8c:dc:be:f5:21:76: c6:47:0a:75:72:59:cf:b2:66:e1:1e:ea:be:cf:a9: d8:34:f4:21:68:a5:3c:0e:f8:dc:aa:ac:53:0a:c6: bc:08:cc:b9:72:bb:47:34:26:11:02:7f:c7:0b:9f: 55:fa:9e:b3:34:1e:09:c5:12:68:e7:18:78:78:93: 84:cb:66:3b:25:40:85:dd:04:61:5c:be:19:5e:72: d6:34:d7:b2:64:75:7a:3a:e7:49:d1:19:c4:51:8c: ed:24:b5:cb:87:58:3b:05:99:b3:a4:9b:44:f7:2e: 0e:20:9e:81:0d:ac:e1:10:d6:fb:ec:cb:fc:21:42: 30:36:de:e5:4c:8e:ec:9f:3a:f5:52:b4:aa:5b:18: 2d:3d:d8:ec:1c:42:93:1d:a4:f2:ec:64:26:d1:df: d9:c6:0f:c2:0c:69:f0:91:fa:fc:59:a0:ec:ff:f2: 93:e1:16:47:a9:bb:94:71:5b:cc:6d:52:c6:e4:63: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6D:23:C1:61:19:63:03:45:E0:57:DB:98:9B:E0:FA:7D:9E:B1:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl X509v3 Authority Key Identifier: keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer sbgp-ipAddrBlock: critical IPv4: 205.207.255.0/24 IPv6: 2620:13e:500a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f9:cf:4e:2b:35:68:30:d3:0c:1b:ee:d3:cf:0e:2d:15:4f: c3:17:dd:83:90:20:5c:81:3f:e0:aa:6b:a4:e1:29:aa:4d:6a: 8a:b1:89:56:8c:a4:9e:c4:92:56:7a:83:06:da:eb:0c:45:99: 12:cf:c0:c6:2a:61:28:70:dd:8e:0a:b8:e9:c5:36:a8:fd:12: 60:a3:d3:b7:9b:8d:63:85:8e:5f:b5:18:53:38:82:09:1f:ba: 59:9a:a9:bc:46:0a:c8:4e:eb:1d:7c:3e:1c:85:86:b4:d7:a0: a8:bd:94:36:cf:7f:1d:26:30:f2:29:d7:98:1a:7c:38:9a:59: 93:60:9e:6d:9f:5c:2d:3e:16:92:a7:08:42:28:8d:67:5d:50: a6:8a:58:98:46:ab:8f:ff:92:24:5c:33:92:d9:49:2a:74:01: 37:93:e7:cb:e1:a2:b0:b9:72:1c:bb:c2:e2:3f:91:a4:43:92: 36:f3:80:2c:3f:08:2c:f9:e4:3b:da:00:7d:09:cd:b4:e6:7d: 5e:5d:2a:32:58:da:96:97:c5:1e:3f:f6:9b:0d:52:f7:b4:15: 41:dc:71:2a:22:4c:ec:08:bd:17:b5:13:3c:42:83:4b:ac:13: 07:3e:61:bf:9f:4f:7d:12:0e:89:b6:2e:42:b3:28:32:9a:cc: f8:c8:fa:94 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqkK39he4ux3MyDDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NkNDAwNDEtNjU3MS00ZjMwLWI3NmEtNDc0NmE0YzJk OTU3MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YzhkZjJjOTQtMzY1YS00NDQ2LTg0NzYtZTgxZDY2ZGQyY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRSLYtU+nKyB/QeSco03Awn233QiljeLUzap JUo3iYnqf4LD8Ln3FfdH6KixT2yFo3tDHYKjnsQS7B803c2QD/oV+uyM3L71IXbG Rwp1clnPsmbhHuq+z6nYNPQhaKU8DvjcqqxTCsa8CMy5crtHNCYRAn/HC59V+p6z NB4JxRJo5xh4eJOEy2Y7JUCF3QRhXL4ZXnLWNNeyZHV6OudJ0RnEUYztJLXLh1g7 BZmzpJtE9y4OIJ6BDazhENb77Mv8IUIwNt7lTI7snzr1UrSqWxgtPdjsHEKTHaTy 7GQm0d/Zxg/CDGnwkfr8WaDs//KT4RZHqbuUcVvMbVLG5GPLYwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCttI8FhGWMDReBX25ib4Pp9nrH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0 MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2YTRjMmQ5NTcvYWZkOTVhM2EtYzhjZC0z ZWU0LTlmZWItYmMzMzZlYTQ5ZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2NkNDAwNDEtNjU3MS00ZjMwLWI3 NmEtNDc0NmE0YzJkOTU3LzNjZDQwMDQxLTY1NzEtNGYzMC1iNzZhLTQ3NDZhNGMy ZDk1Ny5jcmwwHwYDVR0jBBgwFoAUC3dIwZueWstRL5acM8C2yILbDiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2 YTRjMmQ5NTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzc//MA8E AgACMAkDBwAmIAE+UAowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApvnPTis1aDDTDBvu088OLRVPwxfdg5Ag XIE/4KprpOEpqk1qirGJVoyknsSSVnqDBtrrDEWZEs/AxiphKHDdjgq46cU2qP0S YKPTt5uNY4WOX7UYUziCCR+6WZqpvEYKyE7rHXw+HIWGtNegqL2UNs9/HSYw8inX mBp8OJpZk2CebZ9cLT4WkqcIQiiNZ11QpopYmEarj/+SJFwzktlJKnQBN5Pny+Gi sLlyHLvC4j+RpEOSNvOALD8ILPnkO9oAfQnNtOZ9Xl0qMljalpfFHj/2mw1S97QV QdxxKiJM7Ai9F7UTPEKDS6wTBz5hv59PfRIOibYuQrMoMprM+Mj6lA== -----END CERTIFICATE-----Generated at Mon Aug 4 22:18:04 2025 by rpki-client