$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa File: cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa (raw, json) Hash identifier: tkWcnXw3ORUaDnPFXuYvB8GV4LeRI/90yKwg5UDou6M= Subject key identifier: 69:C4:3F:79:C1:15:CA:8D:83:50:9E:EA:6D:9E:44:DC:D7:11:20:B1 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AD7D11BFEA49075997AD03060 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 13576 IP address blocks: 209.151.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:1b:fe:a4:90:75:99:7a:d0:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=5c0baef0-b42e-4c38-b313-de2b7dd862ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:b5:8a:ff:4e:b9:b4:21:b2:8f:c2:a1:4b: 15:99:32:c0:51:7c:58:ea:80:68:ab:5a:c9:35:cc: df:6c:b4:44:b8:91:99:f8:cd:dd:8d:ee:f3:9a:55: 4f:32:4f:07:66:da:f7:12:65:1b:0d:03:ad:e4:ac: 20:da:60:96:a2:fb:2f:e9:70:28:f0:be:33:7e:31: ba:4f:14:58:8b:b5:55:bb:84:70:7f:86:b8:53:43: 39:da:9e:d3:61:0a:0e:a4:a0:1b:43:b0:55:87:f2: ae:4c:f8:85:92:a3:11:22:53:a4:f2:91:69:9b:a5: 1d:f2:da:d6:11:06:a1:8e:7b:6f:5e:34:89:b7:39: 13:9a:40:a4:bb:fd:8d:54:f8:89:ed:f2:42:46:6e: 45:c2:66:3b:be:57:cf:b7:6d:c9:ea:5e:de:a7:8d: 72:25:90:0c:3c:a7:8c:b6:7b:6e:f8:0e:81:c9:8b: f5:56:9c:6e:10:62:2d:5e:41:46:52:7d:be:7e:fa: 33:2c:cf:09:f2:a3:25:87:ba:49:2c:33:39:ac:94: d6:cc:bd:7a:bc:49:bb:80:39:6c:71:d4:30:30:fc: 69:5d:67:a6:a0:01:17:10:c6:82:00:01:e9:7d:1b: 89:e4:99:a0:06:6d:da:5f:9a:7f:eb:bb:91:3a:46: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C4:3F:79:C1:15:CA:8D:83:50:9E:EA:6D:9E:44:DC:D7:11:20:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/cfb25938-1fe8-3fef-8d37-b7d1cddafc15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:84:b6:b8:8a:f9:90:d8:1c:9e:f3:50:71:c5:88:6d:60:9e: c7:48:fe:f1:99:8c:40:e6:fd:df:14:42:ee:4d:c6:a1:27:ff: ed:78:76:a5:65:32:12:71:48:f1:51:c1:17:07:e4:13:8c:21: 84:51:47:5a:67:bb:55:1e:90:5a:6e:97:fe:29:bd:f5:79:a7: b7:0a:05:0b:79:be:28:f5:92:ee:f6:5a:a9:97:46:bb:90:60: 26:a5:3d:3e:1b:df:0b:94:8a:c5:8d:ab:96:b7:e9:5f:df:0a: 6a:2b:f1:91:03:c0:74:1e:a9:38:e7:bc:06:94:ee:33:0d:d6: 18:a5:6d:72:1d:0c:b3:7c:5c:70:79:33:e3:5f:43:9e:95:bc: 6d:73:4e:b9:44:eb:cd:6b:5f:d0:9c:50:85:3c:05:f8:4c:ac: 92:58:ce:12:7d:4f:ab:14:48:d6:06:37:c4:8e:a7:ee:99:ff: 23:11:09:ce:7e:ca:45:4b:26:7e:f6:b3:6d:6b:33:ec:b3:1f: e6:0d:32:c4:4b:5e:7e:8f:61:c7:bd:fd:2a:37:e5:f5:b7:2c: 93:a4:dd:2e:be:c8:1e:a7:b8:dc:dd:c0:08:d2:92:2d:94:0e: 25:92:ec:5a:e0:a8:fc:6a:fb:50:b5:e4:e1:f5:9e:7c:b0:b7: 21:bd:22:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Rv+pJB1mXrQMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NWMwYmFlZjAtYjQyZS00YzM4LWIzMTMtZGUyYjdkZDg2MmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc61iv9OubQhso/CoUsVmTLAUXxY6oBoq1rJ NczfbLREuJGZ+M3dje7zmlVPMk8HZtr3EmUbDQOt5Kwg2mCWovsv6XAo8L4zfjG6 TxRYi7VVu4Rwf4a4U0M52p7TYQoOpKAbQ7BVh/KuTPiFkqMRIlOk8pFpm6Ud8trW EQahjntvXjSJtzkTmkCku/2NVPiJ7fJCRm5FwmY7vlfPt23J6l7ep41yJZAMPKeM tntu+A6ByYv1VpxuEGItXkFGUn2+fvozLM8J8qMlh7pJLDM5rJTWzL16vEm7gDls cdQwMPxpXWemoAEXEMaCAAHpfRuJ5JmgBm3aX5p/67uROkb89QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnEP3nBFcqNg1Ce6m2eRNzXESCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2ZiMjU5MzgtMWZlOC0z ZmVmLThkMzctYjdkMWNkZGFmYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ze1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSEtriK+ZDYHJ7zUHHFiG1gnsdI/vGZjEDm/d8UQu5NxqEn/+14dqVl MhJxSPFRwRcH5BOMIYRRR1pnu1UekFpul/4pvfV5p7cKBQt5vij1ku72WqmXRruQ YCalPT4b3wuUisWNq5a36V/fCmor8ZEDwHQeqTjnvAaU7jMN1hilbXIdDLN8XHB5 M+NfQ56VvG1zTrlE681rX9CcUIU8BfhMrJJYzhJ9T6sUSNYGN8SOp+6Z/yMRCc5+ ykVLJn72s21rM+yzH+YNMsRLXn6PYce9/So35fW3LJOk3S6+yB6nuNzdwAjSki2U DiWS7FrgqPxq+1C15OH1nnywtyG9InY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:46:50 2025 by rpki-client