$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa File: 6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa (raw, json) Hash identifier: NUs8NwA/vzIT32r/LVqI/x5wpJyTLEutwjzeqhVPwh8= Subject key identifier: EE:3B:79:5B:82:00:01:67:E4:67:EB:A9:16:46:5C:3F:39:2C:84:EF Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BCA53F174233E30FA1540 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 209.173.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:ca:53:f1:74:23:3e:30:fa:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=f4d78bcf-1e36-48f4-b9bf-e47614a91653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:f5:0f:34:18:a7:de:7f:1c:19:96:54:64: c5:57:ce:32:d7:34:57:d4:b8:94:f8:81:7e:76:bd: 1c:10:12:7b:c6:71:1b:85:19:9a:58:1c:19:bd:da: 2c:52:f8:e9:ca:07:92:6f:cb:91:2b:76:76:a3:ac: 8b:ed:c5:9b:81:9a:23:f2:a0:16:3a:da:e6:2e:c5: 9c:f1:bf:0f:8b:30:fd:c6:7d:1e:1b:3e:e0:3b:62: 4b:24:3f:b4:f2:1c:3e:b1:8b:e3:d0:bd:4b:65:1c: 95:c3:29:99:dd:40:d5:00:c7:1b:de:af:c5:39:af: d5:39:06:c7:c8:86:ef:f8:0f:bf:ba:95:d6:81:3e: f8:33:e9:34:f0:e8:e8:df:b6:47:e6:24:f9:3e:75: 44:b0:08:69:93:f7:43:f8:71:b0:c8:52:97:50:b5: 38:99:64:03:da:a3:6a:be:2b:35:62:f9:2b:ef:f8: c8:93:20:31:42:c4:30:f5:d1:b1:18:e9:b4:f4:b3: 22:6f:6e:b6:94:5b:29:77:86:0a:14:2f:e4:0f:94: 5f:6d:f9:35:16:32:4f:1f:4f:09:ac:42:f6:e1:c2: 11:a2:6c:2b:cb:b4:65:ff:11:dc:e9:8e:41:08:d2: 53:05:a4:06:81:2f:d7:af:41:e0:86:42:be:3e:4d: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:79:5B:82:00:01:67:E4:67:EB:A9:16:46:5C:3F:39:2C:84:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a1:27:a4:30:c5:2a:57:1f:8a:58:9a:e8:e0:f5:5b:9e:78: 93:d3:97:30:3e:60:37:a2:9e:51:1a:8a:53:d7:97:81:2b:89: a1:69:2f:ca:07:5c:30:cb:8b:f2:9f:d1:2d:8a:fa:ea:98:3d: e7:46:64:49:45:7f:4d:70:79:9c:de:23:97:ea:ff:4a:f8:38: 13:88:96:d9:80:1c:c1:f4:12:71:9d:86:dc:ec:27:e3:82:e6: d2:6a:86:f4:18:3a:d2:d0:20:06:c3:46:43:f1:df:36:6f:26: 09:2e:3b:e0:e7:36:bc:97:fe:62:35:ab:be:c8:e2:e1:62:ab: c8:59:a0:0a:14:da:96:ab:52:4f:2e:44:cb:8a:b0:f4:ff:94: e6:a2:b3:9b:99:f9:a6:32:9b:18:3e:ed:89:e4:67:9b:6d:34: 84:09:7e:35:dc:a0:8c:47:94:21:86:ed:c3:a4:94:b8:2d:8a: be:e6:cb:83:29:42:e0:e6:88:b6:a0:e0:21:1d:22:17:d4:08: ce:3b:19:e8:cb:b2:33:84:b5:a8:21:0a:62:0f:70:b4:99:7c: 6e:7c:c1:24:89:12:94:f8:f9:44:d7:54:dc:e4:8f:d2:43:e5: 41:66:c7:3c:42:a6:60:e4:09:e0:27:14:12:d8:df:82:8f:12: 78:25:e2:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8pT8XQjPjD6FUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZjRkNzhiY2YtMWUzNi00OGY0LWI5YmYtZTQ3NjE0YTkxNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZb1DzQYp95/HBmWVGTFV84y1zRX1LiU+IF+ dr0cEBJ7xnEbhRmaWBwZvdosUvjpygeSb8uRK3Z2o6yL7cWbgZoj8qAWOtrmLsWc 8b8PizD9xn0eGz7gO2JLJD+08hw+sYvj0L1LZRyVwymZ3UDVAMcb3q/FOa/VOQbH yIbv+A+/upXWgT74M+k08Ojo37ZH5iT5PnVEsAhpk/dD+HGwyFKXULU4mWQD2qNq vis1Yvkr7/jIkyAxQsQw9dGxGOm09LMib262lFspd4YKFC/kD5Rfbfk1FjJPH08J rEL24cIRomwry7Rl/xHc6Y5BCNJTBaQGgS/Xr0HghkK+Pk1YcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO47eVuCAAFn5GfrqRZGXD85LITvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNmQ3NmZhM2YtN2NiZC0z ODIxLWFhMjctMDdhNzFjY2FjMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0a28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGhJ6QwxSpXH4pYmujg9VueeJPTlzA+YDeinlEailPXl4EriaFpL8oH XDDLi/Kf0S2K+uqYPedGZElFf01weZzeI5fq/0r4OBOIltmAHMH0EnGdhtzsJ+OC 5tJqhvQYOtLQIAbDRkPx3zZvJgkuO+DnNryX/mI1q77I4uFiq8hZoAoU2parUk8u RMuKsPT/lOais5uZ+aYymxg+7YnkZ5ttNIQJfjXcoIxHlCGG7cOklLgtir7my4Mp QuDmiLag4CEdIhfUCM47GejLsjOEtaghCmIPcLSZfG58wSSJEpT4+UTXVNzkj9JD 5UFmxzxCpmDkCeAnFBLY34KPEngl4tA= -----END CERTIFICATE-----Generated at Sat Aug 23 22:09:31 2025 by rpki-client