$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa File: af9473bf-b67e-357e-95a9-91892269d8f7.roa (raw, json) Hash identifier: lDzZSlVnuCHS/vAEMgGS5ugknpg31f+TY0OTPn1GPQw= Subject key identifier: AA:C7:AC:7D:59:DC:99:07:A7:46:18:02:8D:9E:E5:E8:28:3C:EB:FE Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F4328584AA160D125A83F719A8C43F740 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 208.79.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d1:25:a8:3f:71:9a:8c:43:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=5cd9457a-39b9-4477-a4c7-364eb7fdfbc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:4e:88:01:1c:03:01:47:ef:bc:24:85:25: 96:b5:5e:e5:21:17:2c:79:21:c4:4e:30:12:8c:94: 0d:ac:b0:ea:b6:0c:93:ef:1f:71:a5:3f:79:79:25: 69:84:10:58:14:8b:ea:3f:58:0a:35:53:53:49:40: 02:6c:73:bf:43:c3:7e:c9:9b:67:1c:93:72:f6:54: b2:3c:c6:03:bf:c2:dc:c7:4f:73:e7:6c:59:04:52: 71:39:f4:bb:bf:32:68:ac:20:33:38:1c:ba:72:bf: 1d:ff:d8:37:5f:e3:8d:57:ba:9f:cf:71:b0:95:a6: fe:7e:86:26:df:e0:87:6a:c5:03:03:99:b4:80:00: f9:79:1b:6d:9e:96:44:33:28:0c:ea:53:32:11:87: 44:7f:80:2e:4f:e2:f6:df:4c:01:5e:b9:74:d6:38: ea:29:2f:fd:53:d7:a2:3d:b9:0b:d3:36:92:b8:91: 01:d6:e2:e3:38:43:a1:7b:b1:8e:3f:84:13:47:c0: 3c:0a:70:0a:1c:e2:4d:88:ea:2e:09:13:38:18:28: e3:9c:37:75:28:38:7d:6c:b2:27:c3:39:9a:f4:65: 51:18:2a:18:fb:b6:df:0b:0e:99:4e:3c:c4:dd:8e: 0f:c6:20:39:74:1a:c4:b4:04:4b:f4:1b:e2:52:cf: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C7:AC:7D:59:DC:99:07:A7:46:18:02:8D:9E:E5:E8:28:3C:EB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/af9473bf-b67e-357e-95a9-91892269d8f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b1:10:10:9f:62:a1:fc:c2:d5:82:85:3a:73:a2:24:d1:b1: 0a:31:f8:1a:4e:81:56:64:09:20:6f:b9:61:fb:bb:23:0b:35: c3:6f:76:ab:b8:00:d0:59:3a:68:58:0f:a5:5d:63:e3:a8:e8: 7a:61:c9:d7:4d:af:a9:30:62:73:e8:41:8b:10:65:dd:ec:75: 49:c9:4e:c8:be:1f:f3:ef:43:9b:5f:50:72:5c:8e:f1:99:63: fe:3d:69:1c:2b:dc:26:1a:2b:0a:5f:77:b3:0c:35:10:c8:5b: d9:0a:22:75:17:c1:d0:a5:5f:55:65:31:47:ad:ec:ee:48:2b: a3:98:3c:65:47:d8:a3:7f:2d:61:93:ed:59:12:8f:e4:41:6f: 93:80:c5:a6:e0:88:e0:81:2a:41:3c:44:33:88:3e:a0:8f:e9: ec:87:14:3f:47:49:0f:c7:84:ee:f7:2e:83:78:83:bf:09:73: 3a:6b:46:ab:81:82:b1:cd:22:30:a5:8c:9d:f0:b1:79:22:18: 7a:ab:6b:11:a9:ad:1c:3d:6e:d5:b8:17:0c:0d:61:ba:29:15: 3d:c6:da:41:c7:ba:30:db:18:1b:bd:28:ee:11:fa:c6:c1:3f: ff:6f:8d:24:ba:62:d1:a6:c4:97:fa:73:c7:b9:29:bc:08:f8: d9:4c:42:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNElqD9xmoxD90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NWNkOTQ1N2EtMzliOS00NDc3LWE0YzctMzY0ZWI3ZmRmYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwENOiAEcAwFH77wkhSWWtV7lIRcseSHETjAS jJQNrLDqtgyT7x9xpT95eSVphBBYFIvqP1gKNVNTSUACbHO/Q8N+yZtnHJNy9lSy PMYDv8Lcx09z52xZBFJxOfS7vzJorCAzOBy6cr8d/9g3X+ONV7qfz3Gwlab+foYm 3+CHasUDA5m0gAD5eRttnpZEMygM6lMyEYdEf4AuT+L230wBXrl01jjqKS/9U9ei PbkL0zaSuJEB1uLjOEOhe7GOP4QTR8A8CnAKHOJNiOouCRM4GCjjnDd1KDh9bLIn wzma9GVRGCoY+7bfCw6ZTjzE3Y4PxiA5dBrEtARL9BviUs+E/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrHrH1Z3JkHp0YYAo2e5egoPOv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvYWY5NDczYmYtYjY3ZS0z NTdlLTk1YTktOTE4OTIyNjlkOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOxEBCfYqH8wtWChTpzoiTRsQox+BpOgVZkCSBvuWH7uyMLNcNvdqu4 ANBZOmhYD6VdY+Oo6HphyddNr6kwYnPoQYsQZd3sdUnJTsi+H/PvQ5tfUHJcjvGZ Y/49aRwr3CYaKwpfd7MMNRDIW9kKInUXwdClX1VlMUet7O5IK6OYPGVH2KN/LWGT 7VkSj+RBb5OAxabgiOCBKkE8RDOIPqCP6eyHFD9HSQ/HhO73LoN4g78JczprRquB grHNIjCljJ3wsXkiGHqraxGprRw9btW4FwwNYbopFT3G2kHHujDbGBu9KO4R+sbB P/9vjSS6YtGmxJf6c8e5KbwI+NlMQis= -----END CERTIFICATE-----Generated at Wed Aug 6 00:52:37 2025 by rpki-client