$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7e7b5a39-a47e-30fe-b0e3-3315f092e92b.roa File: 7e7b5a39-a47e-30fe-b0e3-3315f092e92b.roa (raw, json) Hash identifier: igy3svdBMXXrkVxJz/syAq2HwPR6eY0kJ2cwAaMbisI= Subject key identifier: 7E:96:27:E3:6C:7E:49:64:A8:D5:9F:89:E6:AB:06:86:4B:38:24:F4 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584ADA9BCA43260C6A39F3403E80 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7e7b5a39-a47e-30fe-b0e3-3315f092e92b.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 394708 IP address blocks: 209.173.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:ca:43:26:0c:6a:39:f3:40:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=38bca097-861e-4476-bffa-5b7afd082b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:a9:7a:f9:cd:a3:79:98:5c:04:5c:71:91: 81:87:80:37:89:bc:e8:a6:1e:ec:73:d1:67:c2:50: b0:8d:65:c8:05:2b:89:ae:8f:40:a5:69:43:ba:4b: 7f:ea:2e:06:84:83:c5:f4:a1:29:fc:0a:ad:bc:45: c5:72:23:36:0a:ac:07:fe:e5:9c:bc:d1:3c:3a:bc: 5d:b8:70:0b:01:b3:17:70:b5:7f:e5:f6:e6:98:3e: 67:5d:bb:57:db:dc:dc:b4:11:bf:1f:cc:5d:a0:a1: b8:63:21:14:80:9b:07:24:e4:5d:22:59:c0:1a:85: 1a:75:0c:06:a1:a0:01:1c:d6:cc:7d:4d:79:8f:23: 77:1e:4b:15:7c:53:bd:4d:95:d8:20:e6:79:2e:a5: e3:04:80:57:b2:91:38:c5:cf:4e:e1:a4:37:80:de: f0:5e:30:6a:b9:63:10:ee:59:aa:40:b9:6b:3f:e9: 4f:15:49:f9:93:4f:0e:09:be:cb:7f:e6:58:36:0f: bb:34:0f:fb:74:31:c0:d1:22:d4:02:79:34:ae:c4: 52:de:5e:bb:d2:d7:c0:32:e9:8d:f7:11:c0:9b:f3: 03:54:59:bd:38:37:86:3c:7f:32:b3:67:32:cc:db: 28:38:63:2d:38:6b:ca:d9:ed:98:3c:7e:42:4b:31: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:96:27:E3:6C:7E:49:64:A8:D5:9F:89:E6:AB:06:86:4B:38:24:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/7e7b5a39-a47e-30fe-b0e3-3315f092e92b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bd:a6:79:f1:c8:0e:89:1c:a9:cf:95:aa:9e:5e:29:85:f2: 28:89:0f:f8:1f:e4:04:27:98:23:c6:59:07:54:ec:df:64:86: 20:75:15:02:43:2d:33:13:07:73:e0:f7:bc:e4:49:1d:19:00: 80:d4:23:d5:44:f4:06:f0:e6:1f:92:7e:3f:39:79:bc:4c:15: fa:a7:25:5a:e3:85:36:35:bd:1f:b8:67:1c:13:b8:04:f7:56: 1f:a5:44:e7:d4:20:c1:b1:59:e6:d7:9f:ed:31:df:a1:11:e0: ef:85:bc:10:ea:35:f1:5d:ed:dc:ec:4c:52:58:6b:51:4a:13: 68:16:b1:e0:e0:a8:2c:99:af:ec:7d:30:d7:cc:6f:46:b9:64: d7:15:16:c0:31:63:32:55:57:d9:d5:e0:94:52:ce:61:1e:09: 13:b8:6a:93:9a:2d:63:62:00:85:cc:54:5f:6f:27:d5:58:ce: ba:38:9f:a0:e0:8d:61:87:53:2c:26:31:85:76:ac:7f:32:09: 80:d7:d5:1a:85:f7:1e:89:65:ba:78:b6:4b:0f:68:1c:3c:b1: 55:96:d6:ea:e0:46:d9:c7:76:4a:51:bb:7a:ae:06:9a:fa:30: f2:49:56:2c:68:ba:be:db:27:32:38:fc:4b:ec:7d:7a:69:72: 57:98:d4:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8pDJgxqOfNAPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MzhiY2EwOTctODYxZS00NDc2LWJmZmEtNWI3YWZkMDgyYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi2pevnNo3mYXARccZGBh4A3ibzoph7sc9Fn wlCwjWXIBSuJro9ApWlDukt/6i4GhIPF9KEp/AqtvEXFciM2CqwH/uWcvNE8Orxd uHALAbMXcLV/5fbmmD5nXbtX29zctBG/H8xdoKG4YyEUgJsHJORdIlnAGoUadQwG oaABHNbMfU15jyN3HksVfFO9TZXYIOZ5LqXjBIBXspE4xc9O4aQ3gN7wXjBquWMQ 7lmqQLlrP+lPFUn5k08OCb7Lf+ZYNg+7NA/7dDHA0SLUAnk0rsRS3l670tfAMumN 9xHAm/MDVFm9ODeGPH8ys2cyzNsoOGMtOGvK2e2YPH5CSzG2cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6WJ+NsfklkqNWfiearBoZLOCT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvN2U3YjVhMzktYTQ3ZS0z MGZlLWIwZTMtMzMxNWYwOTJlOTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0a24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG9pnnxyA6JHKnPlaqeXimF8iiJD/gf5AQnmCPGWQdU7N9khiB1FQJD LTMTB3Pg97zkSR0ZAIDUI9VE9Abw5h+Sfj85ebxMFfqnJVrjhTY1vR+4ZxwTuAT3 Vh+lROfUIMGxWebXn+0x36ER4O+FvBDqNfFd7dzsTFJYa1FKE2gWseDgqCyZr+x9 MNfMb0a5ZNcVFsAxYzJVV9nV4JRSzmEeCRO4apOaLWNiAIXMVF9vJ9VYzro4n6Dg jWGHUywmMYV2rH8yCYDX1RqF9x6JZbp4tksPaBw8sVWW1urgRtnHdkpRu3quBpr6 MPJJVixour7bJzI4/EvsfXppcleY1Ic= -----END CERTIFICATE-----Generated at Sat Aug 23 21:55:41 2025 by rpki-client