$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa File: 3ffa981a-91a8-3617-9331-ea8500d52ebc.roa (raw, json) Hash identifier: U77L5o6cJr7YYkUOq+L/G8ECIiQTMa94BOvKW9BxVXc= Subject key identifier: 65:71:1C:5C:EB:69:A5:D7:AE:13:18:E6:14:51:87:D7:15:D6:E7:A1 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584ADA9BC0DBAAE4D7D7508F2EC0 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 23158 IP address blocks: 67.216.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c0:db:aa:e4:d7:d7:50:8f:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=3aeb7916-c3a2-426b-b8e7-3482a320e97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:a0:4e:3a:0d:af:08:99:a6:77:0d:9e:22: 80:16:ec:9f:17:d5:aa:52:ac:ce:27:bd:fd:32:21: ec:d4:1c:4d:e9:86:a6:a9:84:f5:45:65:32:8d:13: a6:a2:24:82:ff:7a:5f:ad:3d:e0:cf:a7:cb:7e:01: 90:6c:8f:38:f9:3c:26:68:7e:46:6b:38:94:3d:45: 95:f1:1b:c1:97:ba:08:0d:42:98:99:fb:d3:00:7e: 4b:25:e8:2c:97:2f:40:39:87:ef:a8:0c:47:32:72: 3e:48:e8:3b:14:ba:b7:d7:84:30:14:f7:2c:41:00: a9:21:dd:20:3a:dc:8f:37:2a:76:bf:de:94:b8:2e: ea:55:8e:07:64:6b:fd:06:49:b1:81:5c:23:ce:49: 8f:31:22:1a:de:e6:db:e6:46:74:d1:18:bb:fa:54: cb:d5:d4:1a:85:9d:b8:49:c4:87:73:07:8f:f5:85: a7:77:2f:44:87:63:fc:96:55:50:e7:81:e1:8f:2c: 15:19:af:d3:27:6e:25:b0:34:dd:eb:da:c5:9b:1a: ac:c5:51:de:3f:e0:b1:d1:9d:bc:2e:58:46:8d:0b: 71:da:e4:ef:8f:43:bd:8c:43:00:51:ec:79:31:27: 45:f6:de:5f:e5:bc:9d:27:2b:86:a7:8e:ad:c4:64: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:71:1C:5C:EB:69:A5:D7:AE:13:18:E6:14:51:87:D7:15:D6:E7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 67.216.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:0f:a5:9d:cf:4e:7a:ef:07:33:c3:ce:c4:2e:9d:63:8a:ee: 78:a8:e3:74:81:ed:2e:c0:51:db:7d:7b:62:37:6e:32:8b:cc: 76:c4:e1:4a:09:92:9d:68:3a:c0:f6:e7:93:ce:12:21:1a:a8: f0:4f:2a:23:13:4a:fd:c5:00:36:45:d3:2a:9f:8a:08:ba:a1: 49:6b:dc:69:ec:cc:06:ee:b5:0e:c8:4e:cd:13:ad:b9:43:7f: 47:e8:c0:d2:6a:9d:d0:bf:40:cb:e6:bb:01:4e:b9:b2:a3:2f: 39:93:e8:e3:6a:d6:56:00:45:86:83:88:0b:e7:04:00:c2:75: 43:2e:b5:e2:22:c3:74:ab:89:aa:b5:d6:36:34:e2:2e:5e:ed: 0e:36:c7:d8:f0:94:e3:ec:9a:6e:95:6f:94:7f:d8:14:0c:8d: 06:4f:df:94:de:a9:13:1a:05:57:6c:88:bb:15:a9:aa:5f:b8: 22:3a:03:da:31:4c:54:c4:3f:bb:e9:e5:8e:e4:11:2a:9d:88: 95:ab:b0:83:f9:a6:a2:b1:bb:00:56:81:9b:c2:87:3c:91:ad: fe:02:4b:62:3a:47:94:90:4f:20:db:02:5e:17:0a:ee:20:36: cf:81:e3:3e:e8:d2:be:29:66:eb:0d:88:9d:9e:cc:ae:cd:75: ee:45:9d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8DbquTX11CPLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk M2FlYjc5MTYtYzNhMi00MjZiLWI4ZTctMzQ4MmEzMjBlOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnWgTjoNrwiZpncNniKAFuyfF9WqUqzOJ739 MiHs1BxN6YamqYT1RWUyjROmoiSC/3pfrT3gz6fLfgGQbI84+TwmaH5GaziUPUWV 8RvBl7oIDUKYmfvTAH5LJegsly9AOYfvqAxHMnI+SOg7FLq314QwFPcsQQCpId0g OtyPNyp2v96UuC7qVY4HZGv9BkmxgVwjzkmPMSIa3ubb5kZ00Ri7+lTL1dQahZ24 ScSHcweP9YWndy9Eh2P8llVQ54HhjywVGa/TJ24lsDTd69rFmxqsxVHeP+Cx0Z28 LlhGjQtx2uTvj0O9jEMAUex5MSdF9t5f5bydJyuGp46txGROmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVxHFzraaXXrhMY5hRRh9cV1uehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvM2ZmYTk4MWEtOTFhOC0z NjE3LTkzMzEtZWE4NTAwZDUyZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgPpZ3PTnrvBzPDzsQunWOK7nio43SB7S7AUdt9e2I3bjKLzHbE4UoJ kp1oOsD255POEiEaqPBPKiMTSv3FADZF0yqfigi6oUlr3GnszAbutQ7ITs0TrblD f0fowNJqndC/QMvmuwFOubKjLzmT6ONq1lYARYaDiAvnBADCdUMuteIiw3Sriaq1 1jY04i5e7Q42x9jwlOPsmm6Vb5R/2BQMjQZP35TeqRMaBVdsiLsVqapfuCI6A9ox TFTEP7vp5Y7kESqdiJWrsIP5pqKxuwBWgZvChzyRrf4CS2I6R5SQTyDbAl4XCu4g Ns+B4z7o0r4pZusNiJ2ezK7Nde5Fnds= -----END CERTIFICATE-----Generated at Sun Aug 24 03:19:04 2025 by rpki-client