$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa File: 3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa (raw, json) Hash identifier: KC2BwoGyGvoUQIjWpZ7ckbNIq8GdujEmsxCEBGhz7Vw= Subject key identifier: AA:B2:44:C3:FD:5C:8D:A2:D4:7D:D4:F3:10:B5:D3:A5:1F:1A:4A:44 Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Certificate serial: 010D0C9F4328584AECC11F274C2168E0DA9D5C00 Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 398125 IP address blocks: 208.71.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1f:27:4c:21:68:e0:da:9d:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6e000efa-910e-4513-9049-df703cd6b855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:7c:3f:90:8b:8e:8f:f2:26:d1:2e:bd:b1: d5:48:e4:1f:2d:10:6a:35:b7:4b:a2:1b:c3:e0:0b: fa:ec:27:9b:71:cb:f4:7e:ff:02:32:c5:08:71:54: ff:c0:5c:1f:fc:a4:51:f5:b1:23:23:7f:b9:23:e2: dc:5c:d9:e0:16:60:23:92:e1:65:f1:95:ac:fe:54: 81:a2:eb:a1:3c:5b:0d:e9:2a:2a:fc:d7:20:bf:1a: b4:3b:3e:45:c1:df:d2:a4:98:7b:4d:1d:60:c0:e5: ae:4f:9f:68:06:8d:f3:1a:0b:fb:29:fc:87:fd:45: 30:43:8e:76:a5:55:50:f4:81:2d:c3:d4:1a:19:3e: e3:6b:e2:5c:f4:ba:1e:b4:6a:38:8c:c6:9d:c2:8e: 5f:29:4e:62:be:37:2a:bd:e6:92:b6:f3:4d:0e:65: 48:ce:a4:8b:4c:c1:d9:3d:ae:25:51:48:33:38:0d: 49:be:3d:a8:15:e2:c9:10:aa:a0:93:53:ae:3d:12: 6d:aa:77:7e:98:c7:41:e0:cb:b7:f0:b5:ab:32:0b: db:3e:02:0f:0a:36:96:65:9b:50:28:0e:72:53:74: 61:52:3b:22:84:d9:bd:b8:f0:87:d2:84:43:e5:8a: 7e:3e:0e:cd:33:95:ed:b4:d1:52:7a:1c:c7:de:00: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:44:C3:FD:5C:8D:A2:D4:7D:D4:F3:10:B5:D3:A5:1F:1A:4A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl X509v3 Authority Key Identifier: keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer sbgp-ipAddrBlock: critical IPv4: 208.71.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:6d:5d:2b:d4:c1:33:d2:6d:96:8d:d4:86:33:0d:6f:b1:81: cb:5c:6c:89:47:ec:d1:c4:c5:5b:b2:aa:46:31:ed:b5:91:43: c7:55:f0:0c:41:f7:13:c0:64:17:be:ae:dd:37:37:6e:84:84: cd:65:79:d9:51:f6:3b:eb:a2:7a:b6:89:04:42:0e:35:67:74: d9:2c:b1:6b:bc:90:46:84:dd:e6:de:37:bc:f9:54:9e:1f:65: 98:46:7b:05:73:7f:d2:70:ff:f1:7b:92:bc:35:2a:3a:38:f7: 41:80:53:ac:3a:3b:cb:10:71:39:9c:90:5e:7d:48:d5:ab:54: f8:b8:f0:5b:5c:9e:60:04:f0:3e:e2:cd:6f:51:60:cd:a8:e2: 71:32:d7:db:7b:ab:ed:53:38:b6:3b:1c:54:5c:b2:56:7c:8d: 87:b1:0b:82:ba:db:0e:93:27:e0:8a:4f:a0:86:39:55:e6:50: 51:0f:83:8e:44:c2:9e:b5:94:42:38:1f:77:5d:4f:41:d9:d3: 45:55:06:c9:ef:d1:14:54:20:59:f2:92:55:ca:d0:ef:e9:14: 82:36:d6:8f:21:36:f3:f6:f4:4a:29:6c:e4:4a:5f:41:2f:f0: c2:1d:2e:28:c5:52:a0:d2:7f:32:ef:e3:8b:c7:a7:59:25:b2: 89:6a:c0:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswR8nTCFo4NqdXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNjVjYmItNDBhOC00YmU4LTljMzUtNDE5ZjlkYzM2 ZDcxMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmUwMDBlZmEtOTEwZS00NTEzLTkwNDktZGY3MDNjZDZiODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrh8P5CLjo/yJtEuvbHVSOQfLRBqNbdLohvD 4Av67Cebccv0fv8CMsUIcVT/wFwf/KRR9bEjI3+5I+LcXNngFmAjkuFl8ZWs/lSB ouuhPFsN6Soq/Ncgvxq0Oz5Fwd/SpJh7TR1gwOWuT59oBo3zGgv7KfyH/UUwQ452 pVVQ9IEtw9QaGT7ja+Jc9LoetGo4jMadwo5fKU5ivjcqveaStvNNDmVIzqSLTMHZ Pa4lUUgzOA1Jvj2oFeLJEKqgk1OuPRJtqnd+mMdB4Mu38LWrMgvbPgIPCjaWZZtQ KA5yU3RhUjsihNm9uPCH0oRD5Yp+Pg7NM5XttNFSehzH3gDJ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqyRMP9XI2i1H3U8xC106UfGkpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2 NWNiYi00MGE4LTRiZTgtOWMzNS00MTlmOWRjMzZkNzEvM2E4NDNmNjctYjZlMi0z MDMxLWJjNGUtNmM4ZWFlM2QwZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjNjVjYmItNDBhOC00YmU4LTlj MzUtNDE5ZjlkYzM2ZDcxLzNiYzY1Y2JiLTQwYTgtNGJlOC05YzM1LTQxOWY5ZGMz NmQ3MS5jcmwwHwYDVR0jBBgwFoAUOBhgLEnhhtTnYbFpKTFGPpNKPqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2NWNiYi00MGE4LTRiZTgtOWMzNS00MTlm OWRjMzZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9tXSvUwTPSbZaN1IYzDW+xgctcbIlH7NHExVuyqkYx7bWRQ8dV8AxB 9xPAZBe+rt03N26EhM1ledlR9jvronq2iQRCDjVndNkssWu8kEaE3ebeN7z5VJ4f ZZhGewVzf9Jw//F7krw1Kjo490GAU6w6O8sQcTmckF59SNWrVPi48FtcnmAE8D7i zW9RYM2o4nEy19t7q+1TOLY7HFRcslZ8jYexC4K62w6TJ+CKT6CGOVXmUFEPg45E wp61lEI4H3ddT0HZ00VVBsnv0RRUIFnyklXK0O/pFII21o8hNvP29EopbORKX0Ev 8MIdLijFUqDSfzLv44vHp1klsolqwK8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:02 2025 by rpki-client