$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa File: 3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa (raw, json) Hash identifier: 0LtJ3CxIZrroqDZE6LMUp7BMgfLECEbZi7EwUosyM1k= Subject key identifier: D8:AC:68:CD:EE:62:0B:F3:AE:F5:9B:A4:6D:ED:DF:0B:17:4F:82:15 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC8CFC68E5C01CF42A3D0 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 7106 IP address blocks: 74.126.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c8:cf:c6:8e:5c:01:cf:42:a3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=0918bc2b-4964-4f2d-8a12-1c26c6bc4499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:3d:c2:54:ae:ea:82:58:e5:a2:d9:d0:80: fe:97:50:55:a6:04:cf:be:e0:de:61:6b:af:8b:2f: 51:92:2b:e7:06:d0:1f:93:e3:63:66:a1:01:a9:69: 2f:06:9e:61:82:ea:7e:ea:54:71:09:1b:97:11:27: 01:ee:d0:95:ca:c8:f3:31:06:09:e1:80:15:f0:8d: d3:9a:64:ec:c9:f0:d1:00:cf:97:b6:db:5c:bc:93: 69:77:f6:d2:48:16:30:42:5b:86:99:c9:fb:d5:fd: 2f:19:b8:c2:ed:3a:87:d8:d4:42:f8:63:0e:84:80: f3:93:00:00:be:a6:db:bb:3e:a2:9b:d9:1f:84:b0: d1:d4:1e:d9:3f:7b:98:e4:5b:ac:38:49:b4:bd:b0: 0e:30:4b:7b:be:c0:37:fc:16:bc:7a:6a:2a:b1:83: 0f:34:53:b8:46:8c:79:d4:60:b6:a0:50:11:a0:94: 06:d0:77:2a:e4:23:41:32:a4:5e:92:c8:c5:26:e3: b1:5b:2b:c7:ef:e6:75:0e:ca:20:38:f7:3d:c1:44: 19:1f:21:31:28:8c:c9:0f:30:5f:4b:00:9f:a6:cb: 6e:a8:e8:1d:af:5f:24:eb:bf:62:cb:d6:96:3b:73: 8a:66:9f:7a:b9:91:70:5e:56:74:fe:fa:7f:dc:51: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AC:68:CD:EE:62:0B:F3:AE:F5:9B:A4:6D:ED:DF:0B:17:4F:82:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 74.126.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ab:fc:c7:08:43:5c:77:9e:67:86:32:f3:0a:f5:0a:aa:ae: 87:ad:b9:42:57:98:7e:4a:35:eb:22:26:2c:5a:70:54:2e:03: 96:98:ad:26:57:37:98:5c:92:37:e5:fb:80:3b:26:dd:66:b3: b3:7e:dd:f9:57:27:a1:ac:76:27:74:8c:20:51:b9:d0:6b:43: 07:c2:0d:79:d6:57:e7:37:cb:d7:0c:fb:1b:70:aa:45:a1:38: 7f:b6:6b:47:f9:77:f5:f4:44:49:86:dd:67:2d:43:bb:56:90: cd:c8:04:66:e4:ce:85:f8:89:9b:90:dd:96:26:45:9b:ad:e0: ae:60:a1:dd:6f:37:3e:f8:03:25:b8:4f:af:c8:c3:24:bb:5a: 6b:45:1f:7f:cb:39:e1:89:d0:43:d5:11:11:b8:05:e8:20:0f: 76:8e:43:14:b4:61:9f:5d:26:bd:0c:d4:f1:98:c2:e5:bd:57: 53:74:3e:d8:e7:01:f0:69:75:a3:08:8d:a9:b3:37:6e:c2:0e: fe:59:f4:5f:dc:f7:92:df:d3:e9:84:2d:08:9a:7d:a9:ce:96: 14:89:a3:8a:e7:36:f1:3a:aa:ec:b6:c3:2d:b3:e2:06:60:ac: 10:31:54:f9:16:c5:dc:69:4f:9c:6f:fd:99:53:30:83:12:12: b4:a7:74:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8jPxo5cAc9Co9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MDkxOGJjMmItNDk2NC00ZjJkLThhMTItMWMyNmM2YmM0NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt49wlSu6oJY5aLZ0ID+l1BVpgTPvuDeYWuv iy9RkivnBtAfk+NjZqEBqWkvBp5hgup+6lRxCRuXEScB7tCVysjzMQYJ4YAV8I3T mmTsyfDRAM+XtttcvJNpd/bSSBYwQluGmcn71f0vGbjC7TqH2NRC+GMOhIDzkwAA vqbbuz6im9kfhLDR1B7ZP3uY5FusOEm0vbAOMEt7vsA3/Ba8emoqsYMPNFO4Rox5 1GC2oFARoJQG0Hcq5CNBMqReksjFJuOxWyvH7+Z1DsogOPc9wUQZHyExKIzJDzBf SwCfpstuqOgdr18k679iy9aWO3OKZp96uZFwXlZ0/vp/3FE+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNisaM3uYgvzrvWbpG3t3wsXT4IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvM2NhNmZlMDktYjk5NC0z Y2I2LWIyZTctNzNjMDgwM2QxOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSr/McIQ1x3nmeGMvMK9QqqroetuUJXmH5KNesiJixacFQuA5aYrSZX N5hckjfl+4A7Jt1ms7N+3flXJ6Gsdid0jCBRudBrQwfCDXnWV+c3y9cM+xtwqkWh OH+2a0f5d/X0REmG3WctQ7tWkM3IBGbkzoX4iZuQ3ZYmRZut4K5god1vNz74AyW4 T6/IwyS7WmtFH3/LOeGJ0EPVERG4BeggD3aOQxS0YZ9dJr0M1PGYwuW9V1N0Ptjn AfBpdaMIjamzN27CDv5Z9F/c95Lf0+mELQiafanOlhSJo4rnNvE6quy2wy2z4gZg rBAxVPkWxdxpT5xv/ZlTMIMSErSndDQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:05:50 2025 by rpki-client