$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2073a295-27a8-3312-8d73-4f4a3cc70f90.roa File: 2073a295-27a8-3312-8d73-4f4a3cc70f90.roa (raw, json) Hash identifier: cQzwrm5tG00QSGiLvbGO77JMwjAhq8mlAu6mDgZeOJE= Subject key identifier: 9F:E8:F8:51:12:6D:CE:AA:28:EF:9D:B4:D1:4B:C4:DF:50:C8:3A:D8 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A6C55E16FC01BDFC4D4893AA0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2073a295-27a8-3312-8d73-4f4a3cc70f90.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 401415 IP address blocks: 216.106.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:e1:6f:c0:1b:df:c4:d4:89:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=aa5f5aee-4b03-438c-9af7-2a38f5a3573c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:d5:5d:92:1a:0f:23:25:b3:e3:5d:a4:f3: bf:3f:6c:7a:0c:66:a9:59:21:60:24:d6:63:19:e6: 89:f0:42:52:d5:bd:7e:3f:2f:0c:60:be:8d:e0:94: 2c:40:61:48:19:e9:ae:ea:39:e6:1c:55:fd:7d:78: fb:06:5d:fe:b7:bd:af:5b:70:b2:26:19:1e:01:5f: a7:ad:86:7c:2f:7e:fc:20:c1:23:e1:8f:15:4a:0a: 33:d5:64:eb:e6:21:e5:7a:dc:e9:3c:db:3b:2c:b0: b7:81:41:b4:0a:dc:58:44:ac:d6:4f:2a:50:3c:76: fc:4f:b5:a8:8d:3a:2f:80:54:27:85:36:b6:c3:20: 08:9a:94:0c:45:cc:58:c8:0e:f7:01:f6:3a:ba:33: 95:2f:e4:31:81:e5:37:9e:d8:38:a1:00:08:a8:cf: 48:6a:d5:93:91:52:f7:24:6b:d7:08:90:f2:72:d9: 09:15:ac:f0:ab:4e:f5:04:5c:f4:b0:82:d9:c8:e6: 78:af:ad:76:cf:cc:56:40:bc:88:d0:97:19:3e:28: 70:25:60:4e:99:0c:6e:1d:aa:80:a2:12:3b:6f:07: 2e:4d:a1:51:31:eb:b9:5a:84:66:c0:98:9a:81:79: b3:eb:b7:db:be:61:40:32:b1:2d:17:c8:14:f9:d6: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E8:F8:51:12:6D:CE:AA:28:EF:9D:B4:D1:4B:C4:DF:50:C8:3A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2073a295-27a8-3312-8d73-4f4a3cc70f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7c:3d:99:20:d8:05:f3:08:cf:26:d8:a1:40:a0:3b:d1:3b: 78:6b:92:62:b0:58:9a:49:d3:c1:b9:15:c2:58:b6:2b:4f:5d: 24:d8:8f:ec:c3:a2:c1:b3:74:c2:70:96:9b:0f:f0:0a:b4:70: 01:4c:8e:8f:03:10:47:c7:7e:a8:84:7c:66:1e:c9:e1:93:5c: 57:43:e9:7a:89:c4:19:15:f3:10:0b:39:4e:85:ca:10:80:0e: e4:8d:a5:a7:76:73:9f:22:c2:c5:5c:7e:43:b8:1f:e1:4a:e4: b7:e0:56:4b:10:ab:31:bd:a3:37:af:d5:bb:eb:46:ce:ec:4b: d0:04:66:40:06:df:39:c6:96:de:be:ae:51:e7:06:85:0e:c1: ef:dd:8f:82:01:a1:c1:fb:ce:a4:40:8e:f7:c6:be:61:0e:18: d4:2c:ba:05:6a:11:c1:96:6a:3b:a1:74:be:81:69:d6:ee:27: a9:b8:89:bc:c8:8d:70:a9:ba:dd:df:56:7d:0c:98:a1:8e:6b: 36:a6:7a:d2:fd:c1:cd:80:8a:b2:c7:0a:de:d5:a0:b5:8d:4c: 4b:87:95:a0:5f:c8:64:46:fe:9f:c5:be:22:d3:cb:06:da:9b: 07:16:61:49:74:ec:23:ac:49:a1:91:78:16:0f:7a:4c:98:af: 76:aa:bd:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVeFvwBvfxNSJOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YWE1ZjVhZWUtNGIwMy00MzhjLTlhZjctMmEzOGY1YTM1NzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx3VXZIaDyMls+NdpPO/P2x6DGapWSFgJNZj GeaJ8EJS1b1+Py8MYL6N4JQsQGFIGemu6jnmHFX9fXj7Bl3+t72vW3CyJhkeAV+n rYZ8L378IMEj4Y8VSgoz1WTr5iHletzpPNs7LLC3gUG0CtxYRKzWTypQPHb8T7Wo jTovgFQnhTa2wyAImpQMRcxYyA73AfY6ujOVL+QxgeU3ntg4oQAIqM9IatWTkVL3 JGvXCJDyctkJFazwq071BFz0sILZyOZ4r612z8xWQLyI0JcZPihwJWBOmQxuHaqA ohI7bwcuTaFRMeu5WoRmwJiagXmz67fbvmFAMrEtF8gU+daugQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/o+FESbc6qKO+dtNFLxN9QyDrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjA3M2EyOTUtMjdhOC0z MzEyLThkNzMtNGY0YTNjYzcwZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ8PZkg2AXzCM8m2KFAoDvRO3hrkmKwWJpJ08G5FcJYtitPXSTYj+zD osGzdMJwlpsP8Aq0cAFMjo8DEEfHfqiEfGYeyeGTXFdD6XqJxBkV8xALOU6FyhCA DuSNpad2c58iwsVcfkO4H+FK5LfgVksQqzG9ozev1bvrRs7sS9AEZkAG3znGlt6+ rlHnBoUOwe/dj4IBocH7zqRAjvfGvmEOGNQsugVqEcGWajuhdL6BadbuJ6m4ibzI jXCput3fVn0MmKGOazametL9wc2AirLHCt7VoLWNTEuHlaBfyGRG/p/FviLTywba mwcWYUl07COsSaGReBYPekyYr3aqvYw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:10:27 2025 by rpki-client