$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa File: 3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa (raw, json) Hash identifier: aYMaAp+pFeujn+tJb/FZ2TltMKo0pKQb3f05mi5/Fvo= Subject key identifier: 16:30:1D:9F:4F:99:C3:CF:BA:25:B6:46:D0:00:B6:40:59:2D:14:58 Certificate issuer: /CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7 Certificate serial: 010D0C9F4328584AE89123C72E59CD499B2F3180 Authority key identifier: 77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 3561 IP address blocks: 204.239.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:23:c7:2e:59:cd:49:9b:2f:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=f8a9a6b7-1d22-40dc-95f4-3f3085fef93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:58:a6:c6:60:b7:ea:6c:e0:65:d8:3b:7e: fb:b4:34:46:c4:07:7e:19:73:97:15:b1:e8:7a:8c: 96:20:17:dd:c1:3b:d5:5a:9d:ef:f1:7d:b9:ca:f8: 02:f3:76:87:de:ca:af:77:0d:05:60:de:db:a5:92: 81:65:cc:f4:4c:31:63:1a:b4:7b:4b:2b:b4:e1:5e: 82:0b:9b:e6:85:b8:44:f2:02:8d:61:d6:b8:1c:a4: 9a:53:d8:5c:a1:c0:fa:cf:82:ca:b4:4d:4e:fd:38: 5a:bb:cf:d0:8f:30:13:9a:f8:e5:78:6f:bd:9e:a4: 5d:9e:2a:e2:13:62:44:72:f9:75:66:ed:39:f7:5a: 70:78:7d:44:93:57:69:ed:94:c1:a1:19:4f:12:38: d5:9d:fb:78:0e:52:30:c8:77:f4:56:78:90:68:2a: cd:05:a4:a4:d8:95:00:bb:a1:8b:7a:03:b0:db:bb: 52:98:cd:8d:0d:72:29:4a:b8:83:65:56:84:49:4a: ac:fa:4b:5f:5e:f8:46:0e:27:c6:44:db:85:b7:2e: 91:b2:17:52:3c:ba:09:86:d9:e5:23:ec:61:25:c3: 74:4f:40:12:06:cf:c9:d4:4c:98:1d:cc:50:ac:b2: 65:15:f2:63:17:3d:cb:3f:15:88:10:eb:5c:6c:b7: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:30:1D:9F:4F:99:C3:CF:BA:25:B6:46:D0:00:B6:40:59:2D:14:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/3e06c13a-87c4-36d1-89be-3cf5da5c5024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.crl X509v3 Authority Key Identifier: keyid:77:DC:D2:23:7A:87:58:BC:36:EC:B0:C2:E2:C5:FE:82:8B:CE:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7bc6ab9a-5103-4cf8-b4a2-c3045292c5d7.cer sbgp-ipAddrBlock: critical IPv4: 204.239.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:98:56:e2:92:68:a2:d8:2f:cd:38:b0:6e:c5:ac:b3:8f:3e: 8b:ca:2a:78:b0:69:38:ac:fe:25:c8:e0:71:42:72:37:d1:aa: 19:1b:0b:cf:2e:e9:af:3b:ee:58:7c:ee:f8:97:db:10:7f:fb: d5:19:c3:64:d3:d4:02:62:be:70:b4:74:27:62:43:6a:a0:cf: 1d:08:b9:0d:3c:f9:9d:90:7c:b7:ef:b9:db:c2:09:96:6f:ef: a0:d5:10:79:8f:a2:1b:d1:9b:a6:dc:ac:7f:12:e1:d7:c3:4c: 98:5f:02:c4:d0:7a:b5:c2:4e:24:da:35:7a:db:d2:c2:f0:84: 89:45:09:8c:98:ea:a2:4e:4e:02:2a:e4:45:04:ef:7d:e9:41: b2:c3:2a:c6:a2:83:e5:53:d6:ef:ff:9b:21:4e:1c:4f:9e:38: 30:26:fc:3d:5f:a7:5b:a6:81:fb:9b:40:be:af:64:a5:a0:9b: 12:b3:9d:92:94:83:1a:ff:d7:fe:64:e4:70:11:eb:bc:06:4f: 55:a4:ca:53:cd:49:b6:1d:40:22:04:bc:68:22:1a:a4:7b:85: b5:bf:5b:dd:2c:97:e5:51:64:df:03:29:5e:88:3e:39:b9:2e: d9:3f:3a:a7:bb:9c:de:2d:22:cb:0d:c7:a1:f6:5a:57:35:19: 76:5a:31:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSPHLlnNSZsvMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjNmFiOWEtNTEwMy00Y2Y4LWI0YTItYzMwNDUyOTJj NWQ3MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZjhhOWE2YjctMWQyMi00MGRjLTk1ZjQtM2YzMDg1ZmVmOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7pYpsZgt+ps4GXYO377tDRGxAd+GXOXFbHo eoyWIBfdwTvVWp3v8X25yvgC83aH3sqvdw0FYN7bpZKBZcz0TDFjGrR7Syu04V6C C5vmhbhE8gKNYda4HKSaU9hcocD6z4LKtE1O/Thau8/QjzATmvjleG+9nqRdniri E2JEcvl1Zu0591pweH1Ek1dp7ZTBoRlPEjjVnft4DlIwyHf0VniQaCrNBaSk2JUA u6GLegOw27tSmM2NDXIpSriDZVaESUqs+ktfXvhGDifGRNuFty6RshdSPLoJhtnl I+xhJcN0T0ASBs/J1EyYHcxQrLJlFfJjFz3LPxWIEOtcbLe8vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYwHZ9PmcPPuiW2RtAAtkBZLRRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YmM2 YWI5YS01MTAzLTRjZjgtYjRhMi1jMzA0NTI5MmM1ZDcvM2UwNmMxM2EtODdjNC0z NmQxLTg5YmUtM2NmNWRhNWM1MDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2JjNmFiOWEtNTEwMy00Y2Y4LWI0 YTItYzMwNDUyOTJjNWQ3LzdiYzZhYjlhLTUxMDMtNGNmOC1iNGEyLWMzMDQ1Mjky YzVkNy5jcmwwHwYDVR0jBBgwFoAUd9zSI3qHWLw27LDC4sX+govOm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YmM2YWI5YS01MTAzLTRjZjgtYjRhMi1jMzA0 NTI5MmM1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaYVuKSaKLYL804sG7FrLOPPovKKniwaTis/iXI4HFCcjfRqhkbC88u 6a877lh87viX2xB/+9UZw2TT1AJivnC0dCdiQ2qgzx0IuQ08+Z2QfLfvudvCCZZv 76DVEHmPohvRm6bcrH8S4dfDTJhfAsTQerXCTiTaNXrb0sLwhIlFCYyY6qJOTgIq 5EUE733pQbLDKsaig+VT1u//myFOHE+eODAm/D1fp1umgfubQL6vZKWgmxKznZKU gxr/1/5k5HAR67wGT1WkylPNSbYdQCIEvGgiGqR7hbW/W90sl+VRZN8DKV6IPjm5 Ltk/Oqe7nN4tIssNx6H2Wlc1GXZaMXY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:09 2025 by rpki-client