$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa File: 3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa (raw, json) Hash identifier: gJWLZJil1Lx3fX6dyf+PGG4b08dC1SWc6WyvvuiHKxU= Subject key identifier: 30:83:E4:1C:8F:A3:E3:95:85:08:7F:5F:F4:03:23:71:77:F9:D9:98 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584ACB40E6747E9A04B1FF470E80 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 40562 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:e6:74:7e:9a:04:b1:ff:47:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=d4b75899-ba03-403f-8b16-db72169c90fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:aa:49:a0:87:9d:9f:ad:3e:e2:4d:43:a5: 3b:73:40:d3:5e:8f:cd:1b:7f:28:3d:fa:c8:78:8c: ff:34:69:d7:19:dc:13:d7:5e:18:60:fd:c4:17:29: f2:01:07:d7:ca:82:23:09:e6:85:6a:ea:66:c1:0a: 11:5e:38:e0:a0:35:9e:15:1c:18:45:c2:c6:7c:a3: 28:56:bf:be:33:fa:c0:2d:c2:bc:46:bc:aa:11:06: 71:2f:73:fc:7a:9c:14:68:f2:ed:f1:47:fd:05:2a: 92:99:00:57:01:48:ae:12:29:c1:b2:bf:69:b8:51: a0:a9:8f:39:36:3d:62:cd:25:7f:19:bd:5c:46:1a: c3:5b:39:02:47:a9:76:cc:89:7c:44:dd:d6:92:6b: eb:5d:92:ca:36:10:67:a3:88:f4:20:39:94:fd:cb: b2:8d:bf:79:d3:26:ae:6e:ab:8c:7b:df:a0:09:93: d8:1c:37:ad:87:b1:ed:79:7f:8b:8f:04:ee:b0:6c: f7:3d:cb:8d:cd:50:34:0c:ce:3f:8f:98:92:da:a8: c5:eb:5e:4c:f2:20:6c:54:47:f2:b4:30:c5:04:32: 0a:7e:bb:a0:cf:bd:39:75:ad:d3:73:a1:67:2f:5b: a7:2b:55:98:c4:4b:6d:26:90:7e:51:07:ff:ae:cc: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:83:E4:1C:8F:A3:E3:95:85:08:7F:5F:F4:03:23:71:77:F9:D9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:63:db:be:43:eb:c0:40:49:71:2a:a7:bc:4f:60:21:cd:82: 0f:ef:77:e8:99:f2:b7:68:3a:17:0c:a6:5a:57:e6:07:da:7b: 9c:2c:bc:e8:52:ad:f5:d2:d0:2a:5b:59:11:4e:ea:4e:2a:64: 62:21:7f:e6:9b:79:1e:f6:db:01:43:0d:5f:78:37:74:16:71: 8f:4c:f2:3c:d0:05:08:1d:28:30:3c:3c:81:ab:91:78:cb:b4: 24:80:d7:6d:7e:52:fb:4e:9f:04:f7:37:72:03:22:dc:16:41: cd:bb:5b:c5:84:e1:d0:a6:a0:c9:df:ab:f3:fc:ae:b4:57:3d: 02:8d:fa:ef:72:94:9c:c6:97:bc:a0:23:f4:02:8c:f8:e3:9b: c4:66:6f:99:a1:56:b0:34:b9:e4:8a:88:fe:2c:83:9a:69:0b: ff:73:5c:80:19:24:24:f1:3b:ba:c3:da:0d:66:07:5e:67:3a: 63:8d:f9:7b:21:8c:28:b3:c8:8f:22:e2:23:f3:d0:6c:40:f7: 87:4b:05:81:8f:14:91:61:33:86:c4:fa:53:ad:71:1b:03:f5: d7:95:ee:81:d7:ca:e8:7c:99:1d:66:2a:19:f5:90:75:42:cb: 49:73:b8:7e:25:cc:46:22:0c:0d:21:bb:eb:41:1d:f5:99:b0: 0a:f6:6b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQOZ0fpoEsf9HDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDRiNzU4OTktYmEwMy00MDNmLThiMTYtZGI3MjE2OWM5MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+WqSaCHnZ+tPuJNQ6U7c0DTXo/NG38oPfrI eIz/NGnXGdwT114YYP3EFynyAQfXyoIjCeaFaupmwQoRXjjgoDWeFRwYRcLGfKMo Vr++M/rALcK8RryqEQZxL3P8epwUaPLt8Uf9BSqSmQBXAUiuEinBsr9puFGgqY85 Nj1izSV/Gb1cRhrDWzkCR6l2zIl8RN3WkmvrXZLKNhBno4j0IDmU/cuyjb950yau bquMe9+gCZPYHDeth7HteX+LjwTusGz3PcuNzVA0DM4/j5iS2qjF615M8iBsVEfy tDDFBDIKfrugz705da3Tc6FnL1unK1WYxEttJpB+UQf/rszXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCD5ByPo+OVhQh/X/QDI3F3+dmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvMzAwNmI3Y2YtZWM3OC0z ZmU2LTkyZTEtMDRiMDg0M2Y1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRj275D68BASXEqp7xPYCHNgg/vd+iZ8rdoOhcMplpX5gfae5wsvOhS rfXS0CpbWRFO6k4qZGIhf+abeR722wFDDV94N3QWcY9M8jzQBQgdKDA8PIGrkXjL tCSA121+UvtOnwT3N3IDItwWQc27W8WE4dCmoMnfq/P8rrRXPQKN+u9ylJzGl7yg I/QCjPjjm8Rmb5mhVrA0ueSKiP4sg5ppC/9zXIAZJCTxO7rD2g1mB15nOmON+Xsh jCizyI8i4iPz0GxA94dLBYGPFJFhM4bE+lOtcRsD9deV7oHXyuh8mR1mKhn1kHVC y0lzuH4lzEYiDA0hu+tBHfWZsAr2a5g= -----END CERTIFICATE-----Generated at Sun Aug 24 00:30:35 2025 by rpki-client