$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/70958b02-c48b-3f2c-a02b-6adaaed006b9.roa File: 70958b02-c48b-3f2c-a02b-6adaaed006b9.roa (raw, json) Hash identifier: iOntAThPegMVrIJIqEOsm+8JDyiBk11w7YyzUYD1kPQ= Subject key identifier: 0D:E2:74:A3:73:2F:C9:8F:35:6A:53:3E:EA:78:A0:BA:43:0D:34:B0 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BC8576F7A6D32FE1A6240 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/70958b02-c48b-3f2c-a02b-6adaaed006b9.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 7106 IP address blocks: 96.45.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c8:57:6f:7a:6d:32:fe:1a:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=489ff592-94af-4b59-b58a-d7be0d87fd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:12:88:31:81:f7:44:7a:cb:bb:a4:ac:33: a9:d4:de:d5:b8:9f:29:f0:32:92:c6:87:4e:a7:5a: 1c:d8:cc:dd:b7:2f:60:aa:4f:e7:e1:9b:7a:1f:4e: 04:90:b0:79:e6:98:e8:07:37:b6:c7:b8:cd:f3:46: ce:d6:0e:db:e7:d0:23:1a:f9:61:1b:58:66:05:c0: 13:00:2e:e5:89:5c:8f:36:52:41:a5:30:96:1b:df: 95:75:14:c1:3f:07:9a:1c:03:13:55:d0:e4:ff:79: b8:88:ef:1c:7a:55:07:3f:f6:0f:76:c3:6e:4f:35: b5:70:4e:48:f0:13:9f:2c:68:45:f3:d4:a2:5f:27: 04:47:66:d4:2b:94:78:1f:32:5f:8c:69:3d:8e:a1: 76:e6:99:86:f4:a7:e2:9d:d8:6d:d6:3b:76:de:ec: 90:1b:67:14:2d:98:5f:6b:e8:a1:61:4e:a5:ce:33: c4:45:ea:ae:83:2a:45:a2:4f:e7:47:23:62:d8:39: 48:2c:97:28:f5:13:4b:91:87:f0:dd:d5:2e:e2:79: 3b:43:03:17:7b:c9:91:5c:a4:f8:44:1c:0a:76:b6: 11:b5:73:17:fe:09:57:4a:96:97:26:63:2c:3b:e2: c0:2f:e4:2e:6e:b9:2b:89:f8:05:5f:ea:5f:de:3d: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E2:74:A3:73:2F:C9:8F:35:6A:53:3E:EA:78:A0:BA:43:0D:34:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/70958b02-c48b-3f2c-a02b-6adaaed006b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 96.45.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:72:cf:ea:33:b5:20:58:f6:68:11:74:84:07:05:e3:c8:4a: bb:4f:1b:f2:34:57:51:5d:22:63:b4:c0:c7:10:0e:e9:12:67: c6:8d:c4:a3:84:d3:60:ca:83:26:ec:2f:30:0f:be:d4:89:ee: 09:74:4b:2f:b4:c1:51:8c:03:cf:85:35:5a:60:8e:30:76:fc: dc:b4:d6:f7:c6:24:ad:d3:34:e2:be:31:04:67:08:0c:c9:76: b7:84:9a:69:fc:b7:f2:a3:c8:26:26:1d:d4:36:6a:4e:68:99: 28:c9:1f:69:09:64:5d:9e:24:34:ed:61:f2:4a:c6:1c:57:4e: f3:9e:6e:4c:c9:62:91:f9:9e:42:79:7e:9a:46:ae:b7:7b:98: 38:a1:e7:36:c8:80:f3:90:d8:3b:a3:58:3b:9d:0f:69:80:b5: e6:86:66:13:55:4d:d1:de:69:1f:0e:50:41:33:56:55:1c:bd: 56:e2:b3:f5:81:81:57:e8:96:55:e7:31:03:76:b6:39:78:66: ce:3c:30:b4:7e:e3:15:fe:98:90:e4:0f:7e:d0:b4:df:27:f9: f2:ae:71:c3:59:d7:dd:69:4c:ce:45:fb:1e:14:f9:cd:9a:fa: 10:a1:bc:71:b5:04:d5:b8:2b:60:f2:67:5a:a9:7d:d8:8f:7b: 34:2b:e4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8hXb3ptMv4aYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NDg5ZmY1OTItOTRhZi00YjU5LWI1OGEtZDdiZTBkODdmZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYcSiDGB90R6y7ukrDOp1N7VuJ8p8DKSxodO p1oc2Mzdty9gqk/n4Zt6H04EkLB55pjoBze2x7jN80bO1g7b59AjGvlhG1hmBcAT AC7liVyPNlJBpTCWG9+VdRTBPweaHAMTVdDk/3m4iO8celUHP/YPdsNuTzW1cE5I 8BOfLGhF89SiXycER2bUK5R4HzJfjGk9jqF25pmG9Kfindht1jt23uyQG2cULZhf a+ihYU6lzjPERequgypFok/nRyNi2DlILJco9RNLkYfw3dUu4nk7QwMXe8mRXKT4 RBwKdrYRtXMX/glXSpaXJmMsO+LAL+QubrkrifgFX+pf3j1qPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3idKNzL8mPNWpTPup4oLpDDTSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNzA5NThiMDItYzQ4Yi0z ZjJjLWEwMmItNmFkYWFlZDAwNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYC3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFyz+oztSBY9mgRdIQHBePISrtPG/I0V1FdImO0wMcQDukSZ8aNxKOE 02DKgybsLzAPvtSJ7gl0Sy+0wVGMA8+FNVpgjjB2/Ny01vfGJK3TNOK+MQRnCAzJ dreEmmn8t/KjyCYmHdQ2ak5omSjJH2kJZF2eJDTtYfJKxhxXTvOebkzJYpH5nkJ5 fppGrrd7mDih5zbIgPOQ2DujWDudD2mAteaGZhNVTdHeaR8OUEEzVlUcvVbis/WB gVfollXnMQN2tjl4Zs48MLR+4xX+mJDkD37QtN8n+fKuccNZ191pTM5F+x4U+c2a +hChvHG1BNW4K2DyZ1qpfdiPezQr5Lk= -----END CERTIFICATE-----Generated at Sun Aug 24 03:55:06 2025 by rpki-client