$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa File: 3b9384bd-5385-384e-95c7-0cd9faa340a3.roa (raw, json) Hash identifier: mlpJz2vzbmTlSrfZWfDrAreB+CSkIt+eGYEdDIXHKVs= Subject key identifier: A8:5E:D5:62:1C:8C:66:E0:EE:11:12:74:D8:69:DA:F7:BB:51:EB:57 Certificate issuer: /CN=d51196d1-75e6-431b-8514-1f946ae21089 Certificate serial: 010D0C9F4328584AA42B8196583B12C3B3A2EB40 Authority key identifier: B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 6140 IP address blocks: 107.161.208.0/20 maxlen: 20 2602:ffd3::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:81:96:58:3b:12:c3:b3:a2:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51196d1-75e6-431b-8514-1f946ae21089 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=4b8fd546-be04-4528-84ad-6850ff356dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:78:85:88:da:6f:0d:00:5b:95:64:2b:a6: be:e5:95:61:41:76:67:d7:e7:80:20:7c:37:fd:93: 05:ed:ba:85:48:1e:f1:77:55:9f:da:16:a2:38:70: 72:52:f0:33:3c:5d:8f:fc:f4:25:b5:e0:a8:b9:28: 5e:2f:8a:89:00:e5:88:9c:00:02:8e:04:e7:4e:95: 28:78:9d:54:9e:1b:7e:17:d0:15:5e:0f:2c:f1:4f: 18:31:f9:0d:bc:30:5b:7c:e8:75:5a:38:49:0c:fc: 59:20:a7:c6:42:a5:10:f2:cf:59:45:94:fd:7a:97: 3d:38:cc:1c:63:85:f1:60:37:28:65:70:1e:4f:f2: 51:16:b7:02:f3:f9:2d:c4:02:e0:f8:b4:fa:57:2f: d2:54:86:62:c1:0f:26:59:c2:81:a3:c0:35:76:6f: 3c:73:31:e2:3b:45:7c:e8:72:ce:39:f1:b1:15:37: b2:fb:34:7c:26:c3:ff:e6:50:e2:1b:37:1d:e9:85: 52:41:78:08:ee:6b:31:a8:23:61:10:a2:2c:ae:92: bf:65:eb:d4:dc:39:68:fa:9f:39:34:61:da:75:17: 6c:c8:5f:fc:11:03:58:c7:0e:0d:12:ee:88:e9:4e: 30:75:ff:99:34:19:12:3d:73:91:86:a0:fa:0f:ef: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:D5:62:1C:8C:66:E0:EE:11:12:74:D8:69:DA:F7:BB:51:EB:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/3b9384bd-5385-384e-95c7-0cd9faa340a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089/d51196d1-75e6-431b-8514-1f946ae21089.crl X509v3 Authority Key Identifier: keyid:B4:12:66:9F:66:09:97:D7:DF:43:A0:F6:F3:96:5D:F8:A3:DE:0D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d51196d1-75e6-431b-8514-1f946ae21089.cer sbgp-ipAddrBlock: critical IPv4: 107.161.208.0/20 IPv6: 2602:ffd3::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d1:d5:34:0c:b1:fd:bc:47:9e:4d:d5:b3:f0:e3:17:f7:e4: ff:f8:b7:e6:ec:b8:30:9b:94:1c:51:14:70:21:6e:17:b8:00: c4:fd:04:8f:dd:1d:d4:c5:1b:a6:c9:4e:78:b9:c1:27:6c:1b: c9:14:28:2f:f4:c6:7f:d4:87:1f:2c:21:e4:b7:dd:a6:8a:96: 4c:32:49:8d:0f:c0:66:83:44:bb:c4:4d:f8:c7:f6:74:5a:e6: 8b:bb:31:83:64:91:c3:5c:e2:df:e4:03:76:16:10:5b:58:46: 78:78:cb:b2:0d:48:a3:18:05:de:02:e0:5b:e3:71:b2:a6:a8: b1:8a:8c:7b:ac:04:c8:cc:e4:db:17:dc:94:21:37:47:98:7c: 3d:d1:6e:13:4a:d6:c6:b7:4c:a9:ce:7e:81:0b:ea:f7:e9:77: 49:71:dd:92:d6:9d:e6:7d:ba:b1:ff:da:2a:30:bd:68:ac:04: 09:34:d5:97:12:fb:5a:b1:72:ba:8a:66:28:d0:4c:d0:8b:ee: 54:ee:08:87:11:b0:dc:3f:9b:8d:cb:03:5f:a6:da:ac:cc:30: d7:1f:f3:d2:58:02:8a:bc:ba:cf:6a:b4:c7:96:6a:d6:21:7e: be:69:83:a7:b4:e5:61:8c:18:32:f6:ef:7b:4e:cc:62:ea:4f: e5:ff:c7:2a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEqkK4GWWDsSw7Oi60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUxMTk2ZDEtNzVlNi00MzFiLTg1MTQtMWY5NDZhZTIx MDg5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NGI4ZmQ1NDYtYmUwNC00NTI4LTg0YWQtNjg1MGZmMzU2ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGJ4hYjabw0AW5VkK6a+5ZVhQXZn1+eAIHw3 /ZMF7bqFSB7xd1Wf2haiOHByUvAzPF2P/PQlteCouSheL4qJAOWInAACjgTnTpUo eJ1Unht+F9AVXg8s8U8YMfkNvDBbfOh1WjhJDPxZIKfGQqUQ8s9ZRZT9epc9OMwc Y4XxYDcoZXAeT/JRFrcC8/ktxALg+LT6Vy/SVIZiwQ8mWcKBo8A1dm88czHiO0V8 6HLOOfGxFTey+zR8JsP/5lDiGzcd6YVSQXgI7msxqCNhEKIsrpK/ZevU3Dlo+p85 NGHadRdsyF/8EQNYxw4NEu6I6U4wdf+ZNBkSPXORhqD6D+89GwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKhe1WIcjGbg7hESdNhp2ve7UetXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTEx OTZkMS03NWU2LTQzMWItODUxNC0xZjk0NmFlMjEwODkvM2I5Mzg0YmQtNTM4NS0z ODRlLTk1YzctMGNkOWZhYTM0MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUxMTk2ZDEtNzVlNi00MzFiLTg1 MTQtMWY5NDZhZTIxMDg5L2Q1MTE5NmQxLTc1ZTYtNDMxYi04NTE0LTFmOTQ2YWUy MTA4OS5jcmwwHwYDVR0jBBgwFoAUtBJmn2YJl9ffQ6D285Zd+KPeDbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTExOTZkMS03NWU2LTQzMWItODUxNC0xZjk0 NmFlMjEwODkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEa6HQMA4E AgACMAgDBgQmAv/TADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCi0dU0DLH9vEeeTdWz8OMX9+T/+Lfm7Lgw m5QcURRwIW4XuADE/QSP3R3UxRumyU54ucEnbBvJFCgv9MZ/1IcfLCHkt92mipZM MkmND8Bmg0S7xE34x/Z0WuaLuzGDZJHDXOLf5AN2FhBbWEZ4eMuyDUijGAXeAuBb 43Gypqixiox7rATIzOTbF9yUITdHmHw90W4TStbGt0ypzn6BC+r36XdJcd2S1p3m fbqx/9oqML1orAQJNNWXEvtasXK6imYo0EzQi+5U7giHEbDcP5uNywNfptqszDDX H/PSWAKKvLrParTHlmrWIX6+aYOntOVhjBgy9u97Tsxi6k/l/8cq -----END CERTIFICATE-----Generated at Wed Aug 6 06:04:40 2025 by rpki-client