$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa File: 88ea6281-809c-3c51-8957-69ac4b778b8b.roa (raw, json) Hash identifier: eDjK5598d7Dm6vn+/Ly/Eg/mm0wS+ZqigMQTDYlOheQ= Subject key identifier: 1B:67:15:93:A5:07:3F:B5:20:9B:B9:91:FA:DF:3C:23:2C:61:3A:C3 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AD7D11C2639387E91C0242020 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13576 IP address blocks: 209.151.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:1c:26:39:38:7e:91:c0:24:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=f05bd83b-3c5d-4d99-ae46-d0657701fcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:42:6d:67:03:f2:8c:4c:ff:d2:d8:8b:f0: 27:20:65:fa:60:2a:f2:31:58:85:b4:ee:d1:54:ea: 5e:43:93:f4:7e:3d:aa:11:5a:87:b3:b3:12:7e:bc: 20:b8:f4:fb:5e:59:ea:f2:03:94:fb:d3:00:d6:3c: 7d:93:16:86:98:c2:9e:a3:80:65:18:f7:09:2d:46: 99:7f:ad:e1:4a:25:31:a4:bc:2a:a0:4b:f1:3d:00: cf:95:11:c1:d0:ee:94:b3:97:95:e3:e5:f6:51:9b: 42:a5:bd:e9:c8:28:bb:57:9c:26:00:43:18:59:a9: 0a:c1:05:eb:71:89:41:5d:7a:14:f4:aa:76:7b:70: f0:65:a1:18:c2:14:16:5b:a2:87:80:e3:61:e8:f5: dd:8f:4c:c0:1e:98:b5:a1:b7:7e:2d:98:81:22:b8: 17:0b:92:83:9a:da:72:f6:83:d8:18:22:b3:fb:d7: 09:9c:fa:e1:9e:57:21:05:ed:fb:99:ea:f3:dd:58: a9:5a:de:62:b9:20:e7:99:66:2f:33:6d:ed:fe:6a: 9b:73:89:0a:b6:55:64:dd:3c:8c:93:2a:87:f8:40: 29:dd:3c:4b:03:7f:fb:d0:b6:40:48:1a:d6:2a:f9: 0b:96:70:5c:5f:75:20:38:23:cd:92:1f:30:d5:3c: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:67:15:93:A5:07:3F:B5:20:9B:B9:91:FA:DF:3C:23:2C:61:3A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fc:1c:8a:68:6d:26:e3:b1:65:f5:dc:7d:7a:1a:0c:68:d6: 42:ef:47:b4:e1:b1:f3:5e:4d:d2:36:cc:eb:0f:d3:13:83:b2: 19:33:68:51:4f:56:d4:5e:0b:af:a5:24:7b:a2:be:81:9c:5e: 27:7a:e7:74:72:6b:2d:c5:ce:0e:99:fa:a5:93:91:a3:cc:85: 2f:37:d5:38:60:25:09:3a:c9:49:fd:50:7b:db:b8:c8:fd:d4: 8f:7c:1c:bf:02:bd:8c:f7:37:e8:6e:20:58:10:c3:68:f3:b2: f9:6e:dc:76:28:ea:ce:e9:5f:66:5b:0f:5d:66:65:c2:23:74: 77:13:89:2a:6f:be:e0:76:a7:19:60:49:0f:01:88:34:2b:47: 46:3a:28:4c:66:75:13:db:85:24:5c:2b:e4:34:f0:d7:8c:67: 23:52:9c:24:05:ba:c9:85:eb:64:47:48:ca:96:d3:9c:b9:e6: fb:cd:85:5b:3f:3c:43:8f:be:36:af:09:cd:3c:b3:bc:2b:16: e9:4e:fb:50:e8:19:5c:c7:b3:ab:33:b9:ff:1e:89:e3:e4:cf: 22:21:de:9a:cf:79:0b:62:12:93:72:51:91:1d:e8:2f:30:ef: 53:a7:d9:56:93:20:a5:c0:30:ec:69:c3:69:5c:cf:07:28:85: f3:76:68:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RwmOTh+kcAkICAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZjA1YmQ4M2ItM2M1ZC00ZDk5LWFlNDYtZDA2NTc3MDFmY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+9CbWcD8oxM/9LYi/AnIGX6YCryMViFtO7R VOpeQ5P0fj2qEVqHs7MSfrwguPT7Xlnq8gOU+9MA1jx9kxaGmMKeo4BlGPcJLUaZ f63hSiUxpLwqoEvxPQDPlRHB0O6Us5eV4+X2UZtCpb3pyCi7V5wmAEMYWakKwQXr cYlBXXoU9Kp2e3DwZaEYwhQWW6KHgONh6PXdj0zAHpi1obd+LZiBIrgXC5KDmtpy 9oPYGCKz+9cJnPrhnlchBe37merz3VipWt5iuSDnmWYvM23t/mqbc4kKtlVk3TyM kyqH+EAp3TxLA3/70LZASBrWKvkLlnBcX3UgOCPNkh8w1Tz59wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtnFZOlBz+1IJu5kfrfPCMsYTrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODhlYTYyODEtODA5Yy0z YzUxLTg5NTctNjlhYzRiNzc4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Ze8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD8HIpobSbjsWX13H16Ggxo1kLvR7ThsfNeTdI2zOsP0xODshkzaFFP VtReC6+lJHuivoGcXid653Ryay3Fzg6Z+qWTkaPMhS831ThgJQk6yUn9UHvbuMj9 1I98HL8CvYz3N+huIFgQw2jzsvlu3HYo6s7pX2ZbD11mZcIjdHcTiSpvvuB2pxlg SQ8BiDQrR0Y6KExmdRPbhSRcK+Q08NeMZyNSnCQFusmF62RHSMqW05y55vvNhVs/ PEOPvjavCc08s7wrFulO+1DoGVzHs6szuf8eiePkzyIh3prPeQtiEpNyUZEd6C8w 71On2VaTIKXAMOxpw2lczwcohfN2aMY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:53:35 2025 by rpki-client