$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c24b86c3-13cd-35e2-a75e-37b277aa5ec6.roa File: c24b86c3-13cd-35e2-a75e-37b277aa5ec6.roa (raw, json) Hash identifier: Q5Fxv3rU4G8G3rmhr5OBeByaGTvCQ8F9QoA568lIdfI= Subject key identifier: F3:69:DF:36:72:F0:FB:C1:C6:2D:DA:4E:46:46:DB:16:50:22:56:B7 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584A6C55E1F0C638A2491A182D60 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c24b86c3-13cd-35e2-a75e-37b277aa5ec6.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 401415 IP address blocks: 216.249.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:e1:f0:c6:38:a2:49:1a:18:2d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=aedc80c7-4035-4407-b158-0caad2b1f220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:00:d0:12:71:c1:4d:7e:6b:79:52:29:da: f5:d4:2d:1d:a7:c2:cf:54:56:f5:2b:ce:6b:fe:0e: d4:a1:74:bf:0e:d7:f3:7b:e5:4c:4e:39:22:5e:68: f3:1b:d2:cd:05:2b:77:db:84:58:ab:5a:70:4f:34: a9:37:f5:70:c7:13:3d:8b:4a:73:54:f1:07:ce:1b: 7b:e4:bc:a9:28:29:2f:55:30:95:5a:1e:ee:1b:57: b9:65:0f:b0:16:25:46:8b:cd:66:23:43:04:59:6d: f9:ac:0f:eb:2d:0b:84:31:14:67:58:59:45:0a:d6: 34:fe:7a:a2:03:ac:34:d7:31:df:e4:96:17:2e:0e: 65:52:98:80:a1:55:8b:47:bf:73:17:3b:66:d6:d6: 7e:c5:f2:2a:71:48:39:54:42:f2:29:88:b1:cd:99: 7a:49:c9:5a:11:61:d6:27:62:2d:e0:a0:f1:9e:9a: 02:20:68:de:9d:2d:32:69:29:b5:1c:9b:28:2a:a9: 1d:b9:5f:57:70:d1:cb:b1:bb:ba:28:c7:7c:26:74: cf:c3:2b:33:29:30:e6:ad:45:7f:b9:4b:c3:c2:74: b5:2a:ac:55:ef:84:53:57:24:b5:18:65:d1:d3:6e: 95:77:4e:c3:f4:68:61:27:f8:4c:6f:49:fc:67:80: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:69:DF:36:72:F0:FB:C1:C6:2D:DA:4E:46:46:DB:16:50:22:56:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c24b86c3-13cd-35e2-a75e-37b277aa5ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 216.249.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:31:68:e4:43:2f:f3:e4:ee:d0:06:2f:5b:50:6a:f2:10:15: 13:18:56:68:c5:ca:c7:78:31:e8:5e:f6:87:58:a5:6f:ba:e0: 52:8b:26:4a:ed:5c:f2:54:85:6e:97:cf:78:24:f7:9a:ca:e0: 3a:2f:ec:09:a8:3b:3b:14:12:82:f8:40:3f:0e:d3:e0:d2:6c: 2c:91:5f:40:5d:bf:94:f4:53:c4:50:bf:b6:0f:4c:71:1b:43: 03:53:d6:41:08:1a:ca:e5:e0:13:f0:5b:ee:da:e7:16:24:ae: e5:a2:7f:e4:66:72:9f:00:3a:e3:ed:55:e8:5c:22:a7:44:93: 9b:dd:19:ca:5e:de:a3:5c:d2:1d:5d:ed:42:37:b4:85:54:d2: b3:a1:af:90:28:a8:77:87:4c:1d:a7:1a:bf:b9:16:71:cc:3d: e6:f3:1a:57:a4:70:ad:4c:1e:4d:d9:d2:d4:ad:b7:88:18:f3: 06:d3:5a:5a:8c:cc:83:83:af:9f:4d:f3:7e:8b:24:96:e2:74: cc:34:99:f8:bc:01:f3:6a:b5:99:41:e7:a9:da:c3:05:5e:63: 21:73:9c:29:66:1b:39:1f:e6:44:21:df:8a:7c:7d:74:5a:49: f3:e6:c8:76:0a:41:72:61:a5:ff:67:0f:06:ac:e5:ad:2d:65: e3:a9:74:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVeHwxjiiSRoYLWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YWVkYzgwYzctNDAzNS00NDA3LWIxNTgtMGNhYWQyYjFmMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA190A0BJxwU1+a3lSKdr11C0dp8LPVFb1K85r /g7UoXS/Dtfze+VMTjkiXmjzG9LNBSt324RYq1pwTzSpN/VwxxM9i0pzVPEHzht7 5LypKCkvVTCVWh7uG1e5ZQ+wFiVGi81mI0MEWW35rA/rLQuEMRRnWFlFCtY0/nqi A6w01zHf5JYXLg5lUpiAoVWLR79zFztm1tZ+xfIqcUg5VELyKYixzZl6SclaEWHW J2It4KDxnpoCIGjenS0yaSm1HJsoKqkduV9XcNHLsbu6KMd8JnTPwyszKTDmrUV/ uUvDwnS1KqxV74RTVyS1GGXR026Vd07D9GhhJ/hMb0n8Z4B9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNp3zZy8PvBxi3aTkZG2xZQIla3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzI0Yjg2YzMtMTNjZC0z NWUyLWE3NWUtMzdiMjc3YWE1ZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUxaORDL/Pk7tAGL1tQavIQFRMYVmjFysd4Mehe9odYpW+64FKLJkrt XPJUhW6Xz3gk95rK4Dov7AmoOzsUEoL4QD8O0+DSbCyRX0Bdv5T0U8RQv7YPTHEb QwNT1kEIGsrl4BPwW+7a5xYkruWif+Rmcp8AOuPtVehcIqdEk5vdGcpe3qNc0h1d 7UI3tIVU0rOhr5AoqHeHTB2nGr+5FnHMPebzGlekcK1MHk3Z0tStt4gY8wbTWlqM zIODr59N836LJJbidMw0mfi8AfNqtZlB56nawwVeYyFznClmGzkf5kQh34p8fXRa SfPmyHYKQXJhpf9nDwas5a0tZeOpdME= -----END CERTIFICATE-----Generated at Mon Aug 4 13:59:08 2025 by rpki-client