$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa File: 6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa (raw, json) Hash identifier: qcJ3p6rfTIyMCwQICJbLOqbEFd+bfvDdETiHWR1DxpA= Subject key identifier: E3:5F:C1:38:56:99:C5:6A:84:1C:44:D3:6C:F0:94:09:A0:A8:B9:00 Certificate issuer: /CN=3878fd50-eae1-4b38-a142-8eff8910579b Certificate serial: 010D0C9F4328584AECC1403726CF16ADD5798200 Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 14807 IP address blocks: 204.11.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:40:37:26:cf:16:ad:d5:79:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3e6f6c77-e562-48ac-8aeb-12db8b2edb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:ca:e8:e3:19:f6:8d:74:5d:07:55:7a:0e: f6:50:6d:9d:f1:05:6e:45:bc:45:18:45:ae:b5:26: 7b:ca:fd:05:00:13:d4:95:b4:5b:4e:95:a0:0b:85: 30:f0:aa:5d:24:d6:05:ff:fe:b7:33:f8:cf:9f:5e: 92:1a:81:1d:70:0a:4e:43:2a:ab:aa:77:af:84:3f: 6b:15:a6:f7:68:ac:ea:88:ea:2a:ef:81:97:f1:49: 74:90:55:c3:d2:6e:6b:f5:9c:dc:17:f5:40:ff:2e: cc:2a:b9:70:d5:83:2a:7f:f9:7a:e5:7e:e5:6c:30: 49:78:f6:33:e2:6c:47:0b:8b:2b:cb:d8:3b:55:1d: e6:8f:89:bf:bb:37:73:91:e5:a2:99:0a:de:7b:10: ae:5d:80:d0:ce:0f:34:95:64:7c:1a:75:d3:b7:bf: ba:2a:cc:da:b9:dc:30:14:d0:36:43:c2:e3:fb:1e: d9:50:f9:c9:a3:e7:ad:72:43:7b:36:a3:2f:b3:f6: 05:dd:88:86:dc:92:5b:53:8e:f2:71:f9:3f:ce:27: e0:90:6f:a5:47:85:a0:76:f7:f5:eb:89:a2:f2:68: 74:1c:04:02:31:2b:c0:b7:15:1f:ac:64:2c:87:e1: dd:63:83:2e:16:56:91:8e:d8:70:6f:5c:88:52:08: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5F:C1:38:56:99:C5:6A:84:1C:44:D3:6C:F0:94:09:A0:A8:B9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/6da1affb-4d05-3dd1-8dd0-5b6952d3c2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl X509v3 Authority Key Identifier: keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer sbgp-ipAddrBlock: critical IPv4: 204.11.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:08:bd:42:46:86:98:6c:a5:53:32:30:40:ca:17:09:09:5d: 50:4f:b8:3a:27:50:6a:9b:42:a4:39:32:b3:32:14:ff:35:82: 7c:a3:4f:15:fa:13:47:60:57:04:29:7b:42:0c:8d:6d:e1:64: a7:41:e5:96:ba:52:46:58:d8:07:6f:88:b9:f3:30:1a:c2:82: 88:21:a1:42:ac:c8:7c:6e:2b:7d:6d:87:3c:23:02:bd:46:27: 83:bf:de:85:b4:b6:21:c4:51:1f:f5:a9:7a:96:7b:28:0a:3e: 8a:ab:0e:93:70:75:e4:0e:36:e3:36:3c:b8:d7:3f:56:3c:06: f6:f9:47:24:0d:b2:d3:9f:28:e3:1b:7e:18:ed:6b:b3:db:8b: 0d:21:02:de:6f:0e:d6:6e:46:b6:41:31:63:7d:3d:c3:f4:02: 75:53:89:9d:5a:3d:ee:94:fb:e1:8f:0f:b2:2b:fe:98:c1:15: f2:45:10:97:3e:be:e9:a4:9d:77:91:fb:83:bd:2a:4b:c3:c5: 80:42:2a:26:07:e7:e0:51:9e:b3:2b:92:f5:68:0b:78:aa:00: b9:44:5c:17:6b:f5:f7:95:4f:c8:7a:f7:c4:7a:db:46:4b:d1: 73:14:6b:db:0c:8e:09:b2:24:4d:7e:f7:80:6d:26:5a:dd:19: e4:53:07:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUA3Js8WrdV5ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg3OGZkNTAtZWFlMS00YjM4LWExNDItOGVmZjg5MTA1 NzliMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2U2ZjZjNzctZTU2Mi00OGFjLThhZWItMTJkYjhiMmVkYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrnK6OMZ9o10XQdVeg72UG2d8QVuRbxFGEWu tSZ7yv0FABPUlbRbTpWgC4Uw8KpdJNYF//63M/jPn16SGoEdcApOQyqrqnevhD9r Fab3aKzqiOoq74GX8Ul0kFXD0m5r9ZzcF/VA/y7MKrlw1YMqf/l65X7lbDBJePYz 4mxHC4sry9g7VR3mj4m/uzdzkeWimQreexCuXYDQzg80lWR8GnXTt7+6Kszaudww FNA2Q8Lj+x7ZUPnJo+etckN7NqMvs/YF3YiG3JJbU47ycfk/zifgkG+lR4Wgdvf1 64mi8mh0HAQCMSvAtxUfrGQsh+HdY4MuFlaRjthwb1yIUghTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONfwThWmcVqhBxE02zwlAmgqLkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODc4 ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZmODkxMDU3OWIvNmRhMWFmZmItNGQwNS0z ZGQxLThkZDAtNWI2OTUyZDNjMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3OGZkNTAtZWFlMS00YjM4LWEx NDItOGVmZjg5MTA1NzliLzM4NzhmZDUwLWVhZTEtNGIzOC1hMTQyLThlZmY4OTEw NTc5Yi5jcmwwHwYDVR0jBBgwFoAUQMXDZ1KqbdY9NOCuMynjdcOGqMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zODc4ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZm ODkxMDU3OWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4IvUJGhphspVMyMEDKFwkJXVBPuDonUGqbQqQ5MrMyFP81gnyjTxX6 E0dgVwQpe0IMjW3hZKdB5Za6UkZY2AdviLnzMBrCgoghoUKsyHxuK31thzwjAr1G J4O/3oW0tiHEUR/1qXqWeygKPoqrDpNwdeQONuM2PLjXP1Y8Bvb5RyQNstOfKOMb fhjta7Pbiw0hAt5vDtZuRrZBMWN9PcP0AnVTiZ1aPe6U++GPD7Ir/pjBFfJFEJc+ vumknXeR+4O9KkvDxYBCKiYH5+BRnrMrkvVoC3iqALlEXBdr9feVT8h698R620ZL 0XMUa9sMjgmyJE1+94BtJlrdGeRTBwA= -----END CERTIFICATE-----Generated at Mon Aug 25 11:30:59 2025 by rpki-client