$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa File: 08b21afd-c79d-35c4-91d3-323622a79ddc.roa (raw, json) Hash identifier: UYV+7+fKA7ePYRxnWCQLkgj57Vta43hDMNfWeqayxi8= Subject key identifier: B9:0C:04:45:8A:E3:38:54:21:47:51:EF:2E:04:29:FC:F9:DF:B0:54 Certificate issuer: /CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Certificate serial: 010D0C9F4328584AD7D1290B1CEAB276DB95AD00 Authority key identifier: 3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 21930 IP address blocks: 207.207.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:29:0b:1c:ea:b2:76:db:95:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=653ffedc-e20a-4acf-90ff-eac425e65cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:b6:ba:97:5e:6d:48:31:e4:21:c5:71:7e: ff:5e:3a:6d:ac:7a:15:16:26:ae:4b:7c:a6:b9:2c: f3:65:21:3e:d0:5d:ab:e6:67:40:81:e2:0e:83:b7: a0:16:59:f9:6b:62:2b:03:22:16:67:6d:53:5d:d1: 51:5f:41:ef:df:04:43:83:83:71:d8:a5:75:a5:9a: 00:85:ef:60:89:d4:b4:37:89:80:35:63:38:7b:fe: d2:fc:7d:65:38:f1:df:2d:b5:55:ef:1b:89:a9:56: 94:25:b5:03:af:5a:ed:49:53:d7:34:30:cc:e9:61: 23:45:c1:a5:fc:7f:6e:20:b0:2f:96:86:74:31:a2: eb:7b:ae:05:68:00:9c:8e:0c:f0:e5:d7:e9:df:40: 79:6f:5d:cc:ae:7e:22:53:37:7b:45:05:99:ff:f9: 76:49:77:36:e2:fe:39:6e:7c:ce:2b:92:ee:7b:08: 66:a4:95:7c:d1:59:bf:16:0a:c5:e5:84:77:1c:41: 8d:60:11:12:64:4e:ee:71:7c:61:d1:a7:3c:20:a0: 84:68:84:42:0b:f3:61:96:73:f5:24:c3:cd:7d:b6: 1a:13:b6:2f:96:14:7f:68:10:4d:46:85:e3:13:c9: 23:f4:2e:8c:d5:4e:11:65:50:ac:35:79:c5:75:1c: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0C:04:45:8A:E3:38:54:21:47:51:EF:2E:04:29:FC:F9:DF:B0:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/08b21afd-c79d-35c4-91d3-323622a79ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.crl X509v3 Authority Key Identifier: keyid:3E:98:7B:0D:CE:66:B6:86:13:8A:2A:FB:21:30:82:87:5B:74:B0:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3ae7ecff-e3ab-472d-a4ec-0fcd3fe94aa7.cer sbgp-ipAddrBlock: critical IPv4: 207.207.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b6:89:18:a1:2a:ae:33:e5:f9:aa:1d:84:82:d7:b1:75:c9: b5:80:b0:cb:23:63:c9:6b:5d:38:94:8a:70:b5:c2:0a:12:18: 68:f0:b7:93:f6:99:cf:29:68:1b:23:21:d8:e6:1e:64:51:da: 4d:d7:ba:40:12:07:4f:b5:8b:4d:33:07:53:7d:c0:93:c1:04: e1:5c:8e:ef:15:51:6b:22:65:d6:f3:9e:a4:5d:28:71:c9:af: f2:6e:9c:33:9e:18:c0:b0:e1:4c:48:86:21:83:61:74:b6:ca: 04:fa:0e:0d:de:75:d5:13:66:49:29:b4:36:dd:de:d0:c6:69: a8:b4:fa:bc:33:c1:20:cb:8e:12:29:8d:e1:54:8d:e0:4f:24: f2:2e:9d:cc:79:67:e7:16:ea:8c:23:9f:43:7b:96:ab:e9:58: 23:95:11:9b:1e:64:02:d4:ff:39:2e:cb:31:fb:d4:09:89:48: 17:91:da:b6:35:9d:33:ce:26:df:81:d8:14:78:09:82:3c:5f: 94:6a:91:08:5e:8b:c0:93:46:dd:27:e5:46:36:9f:02:ef:fd: e1:5b:a9:24:c2:1c:60:63:8a:6e:ee:59:e8:72:42:bf:2e:58: 43:c5:1e:e3:8d:02:49:41:62:f7:2d:8e:fc:0c:82:55:9b:ff: 53:1f:26:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SkLHOqydtuVrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlN2VjZmYtZTNhYi00NzJkLWE0ZWMtMGZjZDNmZTk0 YWE3MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NjUzZmZlZGMtZTIwYS00YWNmLTkwZmYtZWFjNDI1ZTY1Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4O2updebUgx5CHFcX7/XjptrHoVFiauS3ym uSzzZSE+0F2r5mdAgeIOg7egFln5a2IrAyIWZ21TXdFRX0Hv3wRDg4Nx2KV1pZoA he9gidS0N4mANWM4e/7S/H1lOPHfLbVV7xuJqVaUJbUDr1rtSVPXNDDM6WEjRcGl /H9uILAvloZ0MaLre64FaACcjgzw5dfp30B5b13Mrn4iUzd7RQWZ//l2SXc24v45 bnzOK5LuewhmpJV80Vm/FgrF5YR3HEGNYBESZE7ucXxh0ac8IKCEaIRCC/NhlnP1 JMPNfbYaE7YvlhR/aBBNRoXjE8kj9C6M1U4RZVCsNXnFdRyXSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkMBEWK4zhUIUdR7y4EKfz537BUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYWU3 ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNkM2ZlOTRhYTcvMDhiMjFhZmQtYzc5ZC0z NWM0LTkxZDMtMzIzNjIyYTc5ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2FlN2VjZmYtZTNhYi00NzJkLWE0 ZWMtMGZjZDNmZTk0YWE3LzNhZTdlY2ZmLWUzYWItNDcyZC1hNGVjLTBmY2QzZmU5 NGFhNy5jcmwwHwYDVR0jBBgwFoAUPph7Dc5mtoYTiir7ITCCh1t0sEkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYWU3ZWNmZi1lM2FiLTQ3MmQtYTRlYy0wZmNk M2ZlOTRhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz88MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG2iRihKq4z5fmqHYSC17F1ybWAsMsjY8lrXTiUinC1wgoSGGjwt5P2 mc8paBsjIdjmHmRR2k3XukASB0+1i00zB1N9wJPBBOFcju8VUWsiZdbznqRdKHHJ r/JunDOeGMCw4UxIhiGDYXS2ygT6Dg3eddUTZkkptDbd3tDGaai0+rwzwSDLjhIp jeFUjeBPJPIuncx5Z+cW6owjn0N7lqvpWCOVEZseZALU/zkuyzH71AmJSBeR2rY1 nTPOJt+B2BR4CYI8X5RqkQhei8CTRt0n5UY2nwLv/eFbqSTCHGBjim7uWehyQr8u WEPFHuONAklBYvctjvwMglWb/1MfJjc= -----END CERTIFICATE-----Generated at Sat Aug 23 22:53:50 2025 by rpki-client