$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/39647f57-674b-3051-89ee-29b2408dff59.roa File: 39647f57-674b-3051-89ee-29b2408dff59.roa (raw, json) Hash identifier: 89RJAYGV2BHjrPv0ompkjXZpTTBP4HuRKOjz48syg7k= Subject key identifier: DF:98:B8:BB:35:88:65:2A:BE:4C:A2:F5:AE:2D:A0:62:94:56:2E:CE Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AB91BA485C2A147494A4ECA80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/39647f57-674b-3051-89ee-29b2408dff59.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 6312 IP address blocks: 216.106.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:a4:85:c2:a1:47:49:4a:4e:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=044720c5-3bcc-4cfc-93c3-35668564a02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:28:96:cf:86:5a:6f:7f:1e:92:7a:99:aa: 40:fd:74:cf:14:0d:e4:0f:98:e6:70:16:08:e6:48: 0d:c6:0c:23:98:71:8a:1d:2e:6e:f3:15:da:73:e8: 41:aa:63:18:f6:43:1b:68:a3:98:82:d6:e4:3c:00: d4:b0:62:a5:4e:2e:11:ac:81:e3:9c:00:42:46:d0: 09:51:a6:46:d0:5a:4b:0e:5d:2c:aa:bb:50:7b:67: b3:ad:5b:b7:be:4f:95:27:57:5c:92:2d:2d:44:31: 7b:fa:73:8e:14:ee:53:25:73:25:83:8c:6b:a3:6f: cd:d6:36:bb:55:63:5f:bd:ff:7c:f8:ff:61:51:5c: 4c:6f:62:5c:4f:a6:79:8b:b5:29:dc:76:16:9a:a2: 8c:21:6f:45:7b:dc:a9:1f:dc:24:df:d3:be:f6:82: 33:35:6b:38:52:db:de:65:98:9a:e9:a6:12:0d:7c: 18:bb:6d:4c:11:46:33:59:6c:8c:6c:02:47:4f:3b: dd:08:3c:bf:82:9b:b3:ce:2d:22:00:52:c4:6d:f9: 94:23:52:e7:0e:0a:05:3a:04:db:b6:3d:3c:8a:f5: fc:1b:67:7b:5a:af:02:c0:17:b2:d1:b7:08:e7:6b: 1e:00:0f:8f:51:d8:62:d0:03:a4:c1:60:cc:d0:9d: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:98:B8:BB:35:88:65:2A:BE:4C:A2:F5:AE:2D:A0:62:94:56:2E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/39647f57-674b-3051-89ee-29b2408dff59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e7:1b:cb:0a:f0:ff:10:9f:2a:56:64:70:41:23:61:3d:d0: e3:60:25:54:3f:f0:d6:a2:02:bf:6e:f7:f2:6e:10:cc:f5:21: 3b:7b:16:b2:e5:dd:95:bb:fc:71:07:fb:17:93:ac:08:c7:8d: c4:6e:8d:b8:31:55:53:44:ae:fb:7e:00:4b:d8:aa:af:a7:ee: c5:6e:42:ed:69:bf:84:57:ad:af:5a:e3:53:da:92:df:30:35: 86:f8:fc:75:60:93:c3:21:f2:da:5f:bd:19:95:32:60:dd:85: d5:5f:29:91:fa:1a:51:ec:e8:33:ac:8b:70:5c:4d:8d:0e:1f: 91:10:b9:26:90:af:bf:8b:ee:b7:57:52:97:ba:38:fc:78:4d: 42:a4:94:48:6c:60:db:ff:e7:65:0a:63:c8:ff:e8:63:94:28: 27:38:85:95:ef:1d:c2:e5:0c:f8:72:3d:54:83:2f:34:3c:9d: 76:a1:3f:49:99:50:22:f8:ab:73:d0:d9:53:c3:06:53:ce:cb: 45:1a:b1:4d:74:ad:3d:30:04:a3:87:a5:51:df:48:e3:51:fa: f2:8f:f0:67:e7:09:82:7a:a4:1d:fd:0b:fa:fb:78:3f:29:92: 95:b4:68:92:b1:b4:9e:86:0f:32:e6:e4:95:6c:86:86:dc:6d: 19:31:ba:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6SFwqFHSUpOyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MDQ0NzIwYzUtM2JjYy00Y2ZjLTkzYzMtMzU2Njg1NjRhMDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDsols+GWm9/HpJ6mapA/XTPFA3kD5jmcBYI 5kgNxgwjmHGKHS5u8xXac+hBqmMY9kMbaKOYgtbkPADUsGKlTi4RrIHjnABCRtAJ UaZG0FpLDl0sqrtQe2ezrVu3vk+VJ1dcki0tRDF7+nOOFO5TJXMlg4xro2/N1ja7 VWNfvf98+P9hUVxMb2JcT6Z5i7Up3HYWmqKMIW9Fe9ypH9wk39O+9oIzNWs4Utve ZZia6aYSDXwYu21MEUYzWWyMbAJHTzvdCDy/gpuzzi0iAFLEbfmUI1LnDgoFOgTb tj08ivX8G2d7Wq8CwBey0bcI52seAA+PUdhi0AOkwWDM0J27fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+YuLs1iGUqvkyi9a4toGKUVi7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMzk2NDdmNTctNjc0Yi0z MDUxLTg5ZWUtMjliMjQwOGRmZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATnG8sK8P8QnypWZHBBI2E90ONgJVQ/8NaiAr9u9/JuEMz1ITt7FrLl 3ZW7/HEH+xeTrAjHjcRujbgxVVNErvt+AEvYqq+n7sVuQu1pv4RXra9a41Pakt8w NYb4/HVgk8Mh8tpfvRmVMmDdhdVfKZH6GlHs6DOsi3BcTY0OH5EQuSaQr7+L7rdX Upe6OPx4TUKklEhsYNv/52UKY8j/6GOUKCc4hZXvHcLlDPhyPVSDLzQ8nXahP0mZ UCL4q3PQ2VPDBlPOy0UasU10rT0wBKOHpVHfSONR+vKP8GfnCYJ6pB39C/r7eD8p kpW0aJKxtJ6GDzLm5JVshobcbRkxuuY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:38 2025 by rpki-client