$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ff7838d-8a50-315e-a498-efd5e29a3945.roa File: 3ff7838d-8a50-315e-a498-efd5e29a3945.roa (raw, json) Hash identifier: gsAy1LJ4akKvVuYnupDfUn/zf2CRPyq4smEvS4D/U1k= Subject key identifier: EE:CE:73:1B:50:63:E0:72:59:5C:91:76:21:9A:B5:EA:F2:F2:90:FA Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F43285849F9DFD64374DB0EBEDF6A2380 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ff7838d-8a50-315e-a498-efd5e29a3945.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 7106 IP address blocks: 209.173.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d6:43:74:db:0e:be:df:6a:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=263c26e3-a5e9-44ac-838e-7460920f8326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0b:b2:91:a8:00:d9:b7:56:0a:e1:aa:20:b0: af:37:48:93:e8:66:95:34:51:49:02:39:2d:da:2b: f1:60:80:e1:95:05:d9:c1:88:54:b9:54:e3:b9:f9: 82:86:90:f4:84:5f:92:c7:81:5c:09:4e:08:de:b8: 5e:1a:52:7d:ee:29:3b:e5:fd:75:dd:09:54:28:8a: 65:f4:36:8f:c7:e8:f2:60:96:b7:d6:d9:e2:57:5a: 46:a0:27:65:1e:c0:cd:48:39:b3:58:ab:0d:98:f5: c7:9f:0d:e2:a0:a8:6a:d5:e7:ef:ab:61:4f:5d:3d: 58:36:58:46:28:2b:de:6b:1f:8f:76:77:0d:dd:1e: f6:b4:04:bb:e8:2a:84:31:dd:36:4e:77:52:f5:39: ea:fb:b1:58:43:12:d2:73:a0:b2:dd:b1:45:82:cf: 4e:6c:47:10:44:a5:2f:10:00:0a:4d:a1:24:32:b3: 9e:9d:97:7a:b4:a7:ac:04:07:30:7b:b1:97:d6:97: 2d:10:c0:de:f8:8f:a1:22:69:0c:d4:5d:ca:a3:5d: 35:b8:93:b4:76:e6:0b:3f:7d:24:80:bb:cf:7d:3f: 93:7d:f8:94:52:cc:d6:19:67:c3:95:49:78:6d:50: 48:9b:b0:b7:43:75:f1:d0:eb:57:63:16:87:0a:9b: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CE:73:1B:50:63:E0:72:59:5C:91:76:21:9A:B5:EA:F2:F2:90:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ff7838d-8a50-315e-a498-efd5e29a3945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fd:4e:45:b0:0f:1a:4a:cf:16:0b:84:05:b6:2f:4a:20:ba: 8e:e3:3d:65:07:7d:e3:47:0c:85:a8:1c:d8:18:96:ed:73:fd: e9:ad:75:5a:71:d5:84:c2:ea:47:8f:ee:cf:7b:81:87:e2:b2: bf:d7:87:ac:7f:58:e2:97:c7:c9:82:b1:a9:dd:01:44:35:54: b6:db:2e:b5:27:ba:41:86:ec:6e:5c:5d:f4:f8:4a:0f:8d:87: cd:d1:79:5f:65:f3:a2:3a:17:7a:ac:9d:80:33:9e:01:a8:07: 35:3f:b9:42:2b:29:40:ae:17:f3:79:8e:c8:f6:b8:84:ce:68: 69:8b:0e:fd:08:9e:f1:ee:6b:3c:64:96:f7:03:6e:f0:ea:78: 8a:7f:63:46:77:f4:91:04:cd:f1:89:39:5d:b6:00:15:fd:70: ab:ad:c9:ef:6f:e1:df:28:e3:11:bb:15:91:f3:86:03:03:c8: 24:b7:66:45:49:5e:cd:22:57:54:35:f3:8a:24:38:2f:dd:dc: d4:20:87:e7:10:45:b8:e8:da:cd:95:36:47:27:20:bc:5f:c5: 5a:63:4d:99:a0:93:57:be:40:4b:60:16:6a:ed:56:6a:4c:aa: c4:1d:6b:87:0d:66:c5:bb:18:e2:8e:7a:44:9a:ca:2c:bc:b2: 48:c7:16:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539ZDdNsOvt9qI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MjYzYzI2ZTMtYTVlOS00NGFjLTgzOGUtNzQ2MDkyMGY4MzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AuykagA2bdWCuGqILCvN0iT6GaVNFFJAjkt 2ivxYIDhlQXZwYhUuVTjufmChpD0hF+Sx4FcCU4I3rheGlJ97ik75f113QlUKIpl 9DaPx+jyYJa31tniV1pGoCdlHsDNSDmzWKsNmPXHnw3ioKhq1efvq2FPXT1YNlhG KCveax+PdncN3R72tAS76CqEMd02TndS9Tnq+7FYQxLSc6Cy3bFFgs9ObEcQRKUv EAAKTaEkMrOenZd6tKesBAcwe7GX1pctEMDe+I+hImkM1F3Ko101uJO0duYLP30k gLvPfT+TffiUUszWGWfDlUl4bVBIm7C3Q3Xx0OtXYxaHCpvWpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7OcxtQY+ByWVyRdiGatery8pD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvM2ZmNzgzOGQtOGE1MC0z MTVlLWE0OTgtZWZkNWUyOWEzOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0a2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA79TkWwDxpKzxYLhAW2L0oguo7jPWUHfeNHDIWoHNgYlu1z/emtdVpx 1YTC6keP7s97gYfisr/Xh6x/WOKXx8mCsandAUQ1VLbbLrUnukGG7G5cXfT4Sg+N h83ReV9l86I6F3qsnYAzngGoBzU/uUIrKUCuF/N5jsj2uITOaGmLDv0InvHuazxk lvcDbvDqeIp/Y0Z39JEEzfGJOV22ABX9cKutye9v4d8o4xG7FZHzhgMDyCS3ZkVJ Xs0iV1Q184okOC/d3NQgh+cQRbjo2s2VNkcnILxfxVpjTZmgk1e+QEtgFmrtVmpM qsQda4cNZsW7GOKOekSayiy8skjHFpU= -----END CERTIFICATE-----Generated at Mon Jun 30 18:11:28 2025 by rpki-client