$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa File: 0dfe2830-3978-3ff5-b745-9bca32c3f603.roa (raw, json) Hash identifier: /4DzGOoEjJV3fNs3fSJmhg49aJlH8dylgo9NU7nSA7c= Subject key identifier: F1:E4:FF:2C:E8:AE:CF:F4:4C:39:4C:52:18:77:59:B9:75:95:D2:D7 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC8A46FD8369E7CD15D80 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 7106 IP address blocks: 66.209.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c8:a4:6f:d8:36:9e:7c:d1:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=136e4b39-6b5d-4825-8bdc-72d4a26951af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:c4:4a:ac:05:54:72:d4:df:ea:07:a8:9f: bf:77:88:d9:3b:20:4a:ca:c7:d9:a9:cf:73:19:a6: 64:0f:ab:f5:45:3d:66:5f:6e:03:da:c1:37:77:c1: 8e:63:5d:78:b8:75:9d:c4:8b:18:00:46:1b:9e:32: ad:1b:d5:c4:79:0c:09:5e:49:9c:2f:cc:29:5c:0a: c7:86:6d:d3:aa:fd:84:27:b4:49:03:5a:01:5d:db: 37:f1:47:f8:9c:d7:69:1d:35:fc:e4:7a:5b:68:f5: 91:b1:cd:64:f0:15:99:a1:45:30:0f:90:75:ea:92: 93:22:d3:85:e5:43:22:5d:34:f3:7f:47:ff:46:22: 2b:22:fd:08:cb:7b:12:b1:c5:d8:54:6c:9d:42:bd: 6c:13:c3:b8:1f:21:ca:85:79:fe:84:b9:dd:ca:39: 82:eb:2e:98:1f:8d:0c:4b:a9:c1:6b:3a:1d:e2:55: e9:75:e3:12:ae:d5:ee:75:78:95:67:7b:fc:fc:7e: 61:44:dd:32:5c:e5:e4:1d:1c:88:9a:41:7a:b3:2b: 2a:d0:59:dc:6d:5c:d5:1c:1f:65:d4:01:44:c1:db: 55:0b:9d:c7:0f:61:33:ae:e7:c9:41:c9:c8:9f:35: e1:18:a7:1d:8c:88:f9:84:2f:2b:4b:79:37:6e:d3: 06:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E4:FF:2C:E8:AE:CF:F4:4C:39:4C:52:18:77:59:B9:75:95:D2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0dfe2830-3978-3ff5-b745-9bca32c3f603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 66.209.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:37:06:9b:70:78:6d:8f:b0:37:e8:ee:03:23:69:01:0b:a5: 11:fa:cb:12:4c:b4:a6:05:1b:61:c8:5c:8c:de:a0:c9:ad:63: ab:8b:8e:16:de:b6:bd:4f:e8:14:37:cf:73:77:63:07:2d:d2: 01:62:e3:76:23:87:e0:63:44:71:1e:46:6b:6e:d2:8d:f5:75: e2:0b:60:bb:e5:ce:08:2c:40:cb:5e:db:6c:fa:5e:15:c0:2a: a1:e4:08:42:9b:d0:09:06:b7:97:27:f4:fc:f2:a8:6b:36:46: 63:e7:eb:fd:07:fc:c3:04:d1:80:4c:dd:83:74:2d:52:39:92: 21:dc:ac:dd:c6:8a:8b:67:c0:de:f8:95:b3:1b:f7:97:fa:07: c4:17:a5:28:3d:64:ee:43:ff:19:a4:3b:f7:69:5d:bb:1f:9a: 2f:d9:49:78:ae:47:8f:03:30:d7:2d:14:94:1a:5b:15:df:35: 02:4f:7e:aa:76:a2:aa:19:c0:f4:b8:48:19:e4:91:2b:a6:f7: 0b:84:e1:7d:4b:1b:27:17:bf:e8:be:77:b2:f7:a6:8f:9f:4e: 64:94:17:7e:82:92:4f:8b:48:08:da:e5:6c:8d:fe:97:bc:05: 14:e6:86:97:68:d4:b9:24:bf:ef:67:22:62:ad:cd:32:df:b8: 53:32:4f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8ikb9g2nnzRXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MTM2ZTRiMzktNmI1ZC00ODI1LThiZGMtNzJkNGEyNjk1MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBjESqwFVHLU3+oHqJ+/d4jZOyBKysfZqc9z GaZkD6v1RT1mX24D2sE3d8GOY114uHWdxIsYAEYbnjKtG9XEeQwJXkmcL8wpXArH hm3Tqv2EJ7RJA1oBXds38Uf4nNdpHTX85HpbaPWRsc1k8BWZoUUwD5B16pKTItOF 5UMiXTTzf0f/RiIrIv0Iy3sSscXYVGydQr1sE8O4HyHKhXn+hLndyjmC6y6YH40M S6nBazod4lXpdeMSrtXudXiVZ3v8/H5hRN0yXOXkHRyImkF6sysq0FncbVzVHB9l 1AFEwdtVC53HD2EzrufJQcnInzXhGKcdjIj5hC8rS3k3btMGPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHk/yzors/0TDlMUhh3Wbl1ldLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMGRmZTI4MzAtMzk3OC0z ZmY1LWI3NDUtOWJjYTMyYzNmNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQtGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY3BptweG2PsDfo7gMjaQELpRH6yxJMtKYFG2HIXIzeoMmtY6uLjhbe tr1P6BQ3z3N3Ywct0gFi43Yjh+BjRHEeRmtu0o31deILYLvlzggsQMte22z6XhXA KqHkCEKb0AkGt5cn9PzyqGs2RmPn6/0H/MME0YBM3YN0LVI5kiHcrN3GiotnwN74 lbMb95f6B8QXpSg9ZO5D/xmkO/dpXbsfmi/ZSXiuR48DMNctFJQaWxXfNQJPfqp2 oqoZwPS4SBnkkSum9wuE4X1LGycXv+i+d7L3po+fTmSUF36Ckk+LSAja5WyN/pe8 BRTmhpdo1Lkkv+9nImKtzTLfuFMyTy4= -----END CERTIFICATE-----Generated at Sun Aug 24 04:28:36 2025 by rpki-client