$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa File: be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa (raw, json) Hash identifier: 26I+kP4iKNSy+f3ADqC/2T1iNAgmt7UmU0DWZ6gi1Bk= Subject key identifier: 53:6A:B3:85:A5:EF:83:7A:FD:55:18:C9:28:DB:47:4E:37:F3:C0:65 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A778080B0E13737F96F07CF40 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 18785 IP address blocks: 216.106.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:80:b0:e1:37:37:f9:6f:07:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=94bc4aec-31bd-4d5b-8e23-49370ce4b186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:1d:79:3d:b6:f2:9d:0e:71:df:85:45:54: f8:37:53:24:46:9e:40:5c:dc:33:bc:6b:4c:b9:8e: cb:de:68:9f:21:ad:03:f1:71:3d:4b:b6:dc:5c:50: 8b:2d:a4:c2:b8:d9:90:54:1a:80:32:43:5c:e9:00: 66:b4:57:db:19:c5:b3:97:f7:03:89:cb:ab:2c:12: cd:b4:0f:c2:15:76:28:3e:f4:ea:f0:0b:1d:d9:e0: 7c:5e:2d:0b:8b:3c:8d:e1:01:56:57:0e:dc:ce:5d: 01:78:f2:11:f7:0e:26:9f:e1:1a:24:0d:43:df:fd: 70:eb:8f:1b:f8:93:58:49:8a:9f:7d:92:c3:c0:c2: 99:c9:13:71:a3:1d:24:10:d9:48:46:0f:31:32:8e: a1:02:22:8f:73:08:2e:37:36:f3:aa:0e:cc:7c:82: 94:ab:65:8d:e4:8a:0f:16:4e:69:5b:00:9a:ba:cd: ef:e5:39:ae:f9:75:69:17:a3:c7:1d:bd:66:93:79: 11:6b:12:b6:78:50:b4:56:a0:aa:ab:63:92:06:62: 10:2f:55:14:b5:5e:7c:97:7c:f3:83:14:d1:4d:ef: 6c:fe:07:1a:9a:86:18:27:fb:2e:36:ac:4e:ac:5a: c2:bb:87:9e:4b:df:50:e0:e4:84:c2:74:e6:af:a1: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6A:B3:85:A5:EF:83:7A:FD:55:18:C9:28:DB:47:4E:37:F3:C0:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/be8fc6de-01c8-350c-a49d-dc5cb7dccb3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.106.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:db:3e:2f:a2:03:ce:4a:cb:ff:93:13:34:e5:ff:37:f5:99: 59:e7:18:82:e6:62:a5:2e:54:c5:d6:04:3c:59:08:1a:6a:a4: 44:c2:05:c7:6c:4c:66:1e:de:c5:6c:1b:4a:9f:de:97:88:fa: d4:14:77:dd:32:e4:58:a9:17:92:a7:ed:47:e9:3a:a0:ef:b4: 1d:53:c4:42:69:7f:30:05:c5:f9:c2:6d:c5:1f:ff:29:ca:66: 9b:9b:77:49:f2:47:0c:3e:b1:09:e1:ef:f2:b1:f5:26:49:5d: 9c:1d:b8:37:d9:64:62:80:29:f7:32:68:14:47:34:69:5c:9f: f6:1e:8a:63:b3:49:43:10:67:d9:75:85:1d:0d:63:c4:52:69: 3a:82:11:3d:64:3f:5e:15:70:c8:45:32:39:3b:1d:1d:93:8c: f0:6b:c1:a9:d0:48:1a:91:88:e7:ba:a7:b6:ab:e6:e2:c8:16: cf:10:53:10:0d:de:34:c7:1a:55:02:e8:77:bd:41:36:a3:a1: 1b:58:e6:16:bc:8e:31:36:3f:45:49:b1:cd:03:c9:68:e2:a3: 37:cc:04:86:67:83:51:94:1c:14:eb:a4:c0:96:72:52:90:6e: 86:d4:0d:e3:dd:ea:8a:0f:e5:6d:0b:37:41:af:b1:26:d6:b5: 9d:82:f9:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gICw4Tc3+W8Hz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk OTRiYzRhZWMtMzFiZC00ZDViLThlMjMtNDkzNzBjZTRiMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX4deT228p0Ocd+FRVT4N1MkRp5AXNwzvGtM uY7L3mifIa0D8XE9S7bcXFCLLaTCuNmQVBqAMkNc6QBmtFfbGcWzl/cDicurLBLN tA/CFXYoPvTq8Asd2eB8Xi0LizyN4QFWVw7czl0BePIR9w4mn+EaJA1D3/1w648b +JNYSYqffZLDwMKZyRNxox0kENlIRg8xMo6hAiKPcwguNzbzqg7MfIKUq2WN5IoP Fk5pWwCaus3v5Tmu+XVpF6PHHb1mk3kRaxK2eFC0VqCqq2OSBmIQL1UUtV58l3zz gxTRTe9s/gcamoYYJ/suNqxOrFrCu4eeS99Q4OSEwnTmr6FSCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNqs4Wl74N6/VUYySjbR04388BlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYmU4ZmM2ZGUtMDFjOC0z NTBjLWE0OWQtZGM1Y2I3ZGNjYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Gr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbbPi+iA85Ky/+TEzTl/zf1mVnnGILmYqUuVMXWBDxZCBpqpETCBcds TGYe3sVsG0qf3peI+tQUd90y5FipF5Kn7UfpOqDvtB1TxEJpfzAFxfnCbcUf/ynK Zpubd0nyRww+sQnh7/Kx9SZJXZwduDfZZGKAKfcyaBRHNGlcn/YeimOzSUMQZ9l1 hR0NY8RSaTqCET1kP14VcMhFMjk7HR2TjPBrwanQSBqRiOe6p7ar5uLIFs8QUxAN 3jTHGlUC6He9QTajoRtY5ha8jjE2P0VJsc0DyWjiozfMBIZng1GUHBTrpMCWclKQ bobUDePd6ooP5W0LN0GvsSbWtZ2C+Sg= -----END CERTIFICATE-----Generated at Mon Aug 4 13:59:09 2025 by rpki-client