$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa File: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (raw, json) Hash identifier: 3lwWYhP715HLq7DsWpk/3JcoC1anChxjP5lkURyAZjE= Subject key identifier: B1:7D:55:CC:4F:6E:8A:58:14:6E:D8:ED:9D:1A:4C:D7:30:64:31:98 Certificate issuer: /CN=3bb548a9-e172-41a3-925a-609e931d0009 Certificate serial: 010D0C9F4328584AE891386C1D19CD6B903143E0 Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 40460 IP address blocks: 199.182.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:38:6c:1d:19:cd:6b:90:31:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=800b6fd1-2619-4480-9c42-73a0768e651f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:94:0c:17:0e:a7:03:e6:66:26:64:84:25: 3c:f4:2a:aa:a7:0f:3a:a8:ff:11:37:cd:78:4c:bf: 83:24:9d:34:47:cc:96:cc:57:29:6a:c8:91:97:77: 25:32:29:f0:4c:d2:56:61:cf:df:b6:f2:4c:e7:25: 0c:56:28:57:08:1c:78:54:80:13:ac:a0:4d:30:c8: 7f:52:c9:3b:c5:e3:13:31:24:f1:81:fc:c2:0b:b4: 2f:e4:88:73:23:14:76:44:a4:0e:e6:66:8e:31:f4: 51:ea:27:0a:a6:8e:b6:44:49:82:c0:ee:45:60:30: 42:ef:bb:db:37:3d:08:29:cd:f0:77:8e:0f:12:10: 7d:cd:4d:ba:18:34:74:18:de:e5:c1:15:02:24:b5: 89:60:08:e2:92:b6:fc:f6:8a:a0:46:e9:55:4f:82: 39:d8:cc:93:63:83:e4:e2:24:ce:c2:b7:91:d2:5e: f1:10:cd:9d:b1:72:95:98:46:30:4a:c7:d6:4d:88: 0e:24:b2:e5:52:bc:43:48:b7:e2:e2:53:5a:16:f9: 1b:ee:06:ff:86:ff:fb:4f:20:d5:d3:8d:d0:d9:8c: c1:b2:54:5f:e8:8f:6e:fc:29:ca:d1:d7:f6:2f:b0: b4:1c:bd:b8:f7:8d:f7:01:32:fa:a5:55:8f:10:af: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:55:CC:4F:6E:8A:58:14:6E:D8:ED:9D:1A:4C:D7:30:64:31:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl X509v3 Authority Key Identifier: keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer sbgp-ipAddrBlock: critical IPv4: 199.182.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:bd:32:35:06:93:3c:36:c6:b3:fc:b5:ad:68:e3:44:4d:93: d3:eb:40:df:6e:3a:92:2f:a7:05:bc:f6:f5:c8:88:ea:5a:f5: bc:36:ca:16:16:4e:67:08:de:0d:d8:55:b7:8d:ef:1a:5c:85: 8b:65:16:ac:fb:31:e6:4b:94:96:38:72:8e:ce:5e:37:49:2e: de:1f:b6:5a:fb:b3:3d:0a:aa:bc:12:d1:76:31:de:eb:b5:cc: 0d:52:6b:54:8b:79:44:62:df:58:9f:29:08:94:32:b1:1a:65: 09:4f:d0:c4:9f:fa:fc:a9:46:8b:ff:d2:92:4c:23:11:7a:c9: d4:f0:9f:a5:05:4a:ab:31:cd:48:ca:fa:2a:4e:7a:17:1c:38: 7c:09:ef:a9:78:04:de:4a:79:e3:49:8d:2a:bf:c4:19:58:b6: 02:72:cf:be:32:8d:5d:36:2c:96:71:58:e3:eb:67:4d:24:2f: 90:fd:c1:de:82:3c:d7:28:5a:b2:50:72:4e:ae:97:4d:89:f1: 30:e0:c8:e7:cf:2e:f9:41:70:ae:eb:b0:00:a5:8c:4b:f9:3b: 58:00:62:40:57:54:84:5e:21:84:b4:a0:67:82:d4:14:b4:45: 4e:70:be:aa:b5:5e:13:a0:1f:d3:8a:d2:6b:3a:47:c9:14:0e: ce:97:ae:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokThsHRnNa5AxQ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNTQ4YTktZTE3Mi00MWEzLTkyNWEtNjA5ZTkzMWQw MDA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ODAwYjZmZDEtMjYxOS00NDgwLTljNDItNzNhMDc2OGU2NTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaqUDBcOpwPmZiZkhCU89Cqqpw86qP8RN814 TL+DJJ00R8yWzFcpasiRl3clMinwTNJWYc/ftvJM5yUMVihXCBx4VIATrKBNMMh/ Usk7xeMTMSTxgfzCC7Qv5IhzIxR2RKQO5maOMfRR6icKpo62REmCwO5FYDBC77vb Nz0IKc3wd44PEhB9zU26GDR0GN7lwRUCJLWJYAjikrb89oqgRulVT4I52MyTY4Pk 4iTOwreR0l7xEM2dsXKVmEYwSsfWTYgOJLLlUrxDSLfi4lNaFvkb7gb/hv/7TyDV 043Q2YzBslRf6I9u/CnK0df2L7C0HL249433ATL6pVWPEK+NbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF9VcxPbopYFG7Y7Z0aTNcwZDGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1 NDhhOS1lMTcyLTQxYTMtOTI1YS02MDllOTMxZDAwMDkvZDNjNWRmM2UtZjJlNC0z NjEzLTk2MjYtMjY1YTcyYTZkY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNTQ4YTktZTE3Mi00MWEzLTky NWEtNjA5ZTkzMWQwMDA5LzNiYjU0OGE5LWUxNzItNDFhMy05MjVhLTYwOWU5MzFk MDAwOS5jcmwwHwYDVR0jBBgwFoAUFkV4gX9FTzzMRxgL5Nkx0UiTiwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1NDhhOS1lMTcyLTQxYTMtOTI1YS02MDll OTMxZDAwMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7a8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH29MjUGkzw2xrP8ta1o40RNk9PrQN9uOpIvpwW89vXIiOpa9bw2yhYW TmcI3g3YVbeN7xpchYtlFqz7MeZLlJY4co7OXjdJLt4ftlr7sz0KqrwS0XYx3uu1 zA1Sa1SLeURi31ifKQiUMrEaZQlP0MSf+vypRov/0pJMIxF6ydTwn6UFSqsxzUjK +ipOehccOHwJ76l4BN5KeeNJjSq/xBlYtgJyz74yjV02LJZxWOPrZ00kL5D9wd6C PNcoWrJQck6ul02J8TDgyOfPLvlBcK7rsACljEv5O1gAYkBXVIReIYS0oGeC1BS0 RU5wvqq1XhOgH9OK0ms6R8kUDs6XrvU= -----END CERTIFICATE-----Generated at Sun Aug 24 04:32:44 2025 by rpki-client