$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa File: 3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa (raw, json) Hash identifier: /28ARXDz51rprV7NHWkLck9uHH/Z67xhwq0C/nhP7CI= Subject key identifier: 4D:65:DE:E2:C4:63:07:FC:B6:03:55:01:39:52:33:B8:40:C6:FD:ED Certificate issuer: /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Certificate serial: 010D0C9F4328584AD3A0F9F56AFF7A6B9BE00A00 Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 19504 IP address blocks: 64.6.112.0/20 maxlen: 24 66.109.112.0/21 maxlen: 24 68.171.176.0/20 maxlen: 24 104.200.208.0/21 maxlen: 24 216.147.224.0/20 maxlen: 24 2604:1c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f9:f5:6a:ff:7a:6b:9b:e0:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=89faf0c8-486b-48f4-88a8-1b21e298ae9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:67:56:8a:0f:b2:cc:71:54:a3:3c:3d:dd: 68:50:88:41:5e:cc:47:53:dd:c9:44:be:fe:74:f9: a3:aa:a8:68:be:84:4f:23:71:f2:46:42:8b:c5:46: 91:9b:f6:d2:14:fc:23:65:e5:b7:58:0f:ac:c4:a4: 4e:e6:a0:99:0c:a3:05:9f:13:fc:38:ce:ae:a0:f8: 7b:68:41:ce:9e:fe:df:8c:ca:4d:cf:66:96:90:75: ee:97:f1:67:d5:4b:2e:56:e6:a7:9f:03:28:62:e2: cd:7e:58:db:d1:36:1d:0d:53:9e:17:68:4b:d4:e6: 91:d3:d0:df:62:6e:76:44:ef:68:e3:e4:d0:a0:02: 62:d6:90:ca:ba:0d:21:93:63:ed:00:e1:f5:b6:4c: 59:e6:be:7e:75:81:3a:8b:6e:05:05:5f:3d:5f:e4: a5:7b:d4:fd:bc:a7:6c:06:7d:bf:4a:1c:a9:0a:14: b7:6c:bd:e2:a2:32:a1:7a:e9:b2:37:fe:35:4f:12: 66:44:12:0a:a0:28:cd:2a:90:93:21:00:21:89:c2: 84:0e:86:65:e2:c3:72:16:32:a4:5b:c4:52:a4:cb: 37:00:11:c6:59:f1:54:ae:da:24:13:d1:bf:7a:e1: ef:20:8a:c7:d6:b8:86:a4:9d:26:08:0e:ec:12:bd: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:DE:E2:C4:63:07:FC:B6:03:55:01:39:52:33:B8:40:C6:FD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl X509v3 Authority Key Identifier: keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer sbgp-ipAddrBlock: critical IPv4: 64.6.112.0/20 66.109.112.0/21 68.171.176.0/20 104.200.208.0/21 216.147.224.0/20 IPv6: 2604:1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:cf:84:38:f7:e1:57:63:e7:60:ca:3f:ea:f3:3c:53:84:1c: af:53:3a:44:f0:a5:da:be:19:49:da:ef:a8:98:19:0a:b3:a7: 86:f9:b4:0e:e0:1b:60:12:bb:ab:44:df:3a:49:34:da:16:cd: fb:88:fc:29:8d:05:f9:8e:63:04:b7:5e:bb:ae:e0:71:85:98: 46:5d:ce:ab:71:1c:9e:2a:9e:be:2d:39:11:d9:e0:69:6f:15: 0e:94:41:0d:9f:52:b3:a4:fe:8b:c5:27:f8:fa:de:c2:26:23: 62:e3:54:8a:de:de:ae:77:d0:2b:04:bb:81:da:0c:b5:b9:9d: be:e5:d2:6b:1f:0d:20:e8:29:a6:16:f4:f1:2d:c3:a0:1c:57: 11:10:c9:18:e7:d4:3e:93:a3:dc:73:e8:32:c2:c8:dd:97:c0: 8c:58:4a:e8:d5:ef:fe:a3:b4:b9:30:7c:69:c0:34:42:4e:9b: bb:eb:32:a8:a1:a9:ae:32:eb:a6:b4:19:ed:63:73:4a:26:05: d8:ff:a4:e8:8f:cc:76:de:e6:83:4d:41:96:41:93:b0:1d:bb: f7:b6:11:7f:5d:da:92:98:47:92:91:7e:59:58:be:2b:5d:e3: a5:c9:4b:e3:f6:f8:b3:5e:f0:c0:25:27:5a:52:5d:3a:b9:67: 4c:59:bc:b1 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWErToPn1av96a5vgCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ3N2UzYTQtYWIxYi00MGMzLWFlNTQtOWU1MGEyMTM0 Y2QzMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ODlmYWYwYzgtNDg2Yi00OGY0LTg4YTgtMWIyMWUyOThhZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSlnVooPssxxVKM8Pd1oUIhBXsxHU93JRL7+ dPmjqqhovoRPI3HyRkKLxUaRm/bSFPwjZeW3WA+sxKRO5qCZDKMFnxP8OM6uoPh7 aEHOnv7fjMpNz2aWkHXul/Fn1UsuVuannwMoYuLNfljb0TYdDVOeF2hL1OaR09Df Ym52RO9o4+TQoAJi1pDKug0hk2PtAOH1tkxZ5r5+dYE6i24FBV89X+Sle9T9vKds Bn2/ShypChS3bL3iojKheumyN/41TxJmRBIKoCjNKpCTIQAhicKEDoZl4sNyFjKk W8RSpMs3ABHGWfFUrtokE9G/euHvIIrH1riGpJ0mCA7sEr3/LQIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFE1l3uLEYwf8tgNVATlSM7hAxv3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3 ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUwYTIxMzRjZDMvM2M4NGQ3ZDctOGFjMS0z YWIyLWFlNzctZWVjZmY0N2JlOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ3N2UzYTQtYWIxYi00MGMzLWFl NTQtOWU1MGEyMTM0Y2QzLzhkNzdlM2E0LWFiMWItNDBjMy1hZTU0LTllNTBhMjEz NGNkMy5jcmwwHwYDVR0jBBgwFoAUM0hN1/MchQ8ZXVElt3kQwdqv8KYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUw YTIxMzRjZDMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEQAZwAwQD Qm1wAwQERKuwAwQDaMjQAwQE2JPgMA0EAgACMAcDBQAmBAHAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAELP hDj34Vdj52DKP+rzPFOEHK9TOkTwpdq+GUna76iYGQqzp4b5tA7gG2ASu6tE3zpJ NNoWzfuI/CmNBfmOYwS3Xruu4HGFmEZdzqtxHJ4qnr4tORHZ4GlvFQ6UQQ2fUrOk /ovFJ/j63sImI2LjVIre3q530CsEu4HaDLW5nb7l0msfDSDoKaYW9PEtw6AcVxEQ yRjn1D6To9xz6DLCyN2XwIxYSujV7/6jtLkwfGnANEJOm7vrMqihqa4y66a0Ge1j c0omBdj/pOiPzHbe5oNNQZZBk7Adu/e2EX9d2pKYR5KRfllYvitd46XJS+P2+LNe 8MAlJ1pSXTq5Z0xZvLE= -----END CERTIFICATE-----Generated at Sun Aug 24 00:30:17 2025 by rpki-client