$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa File: f5ac55ac-f810-3544-90b5-8f6795c65f87.roa (raw, json) Hash identifier: mPYryobBLzEVi1niZVEo89y5LbhaDkculOJMKw0Lgmw= Subject key identifier: AC:6E:F2:B9:D6:ED:54:25:F3:FB:0D:F7:3D:E7:76:7D:C4:1B:73:BE Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584AD7D10D43D39209D556FB1400 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 262287 IP address blocks: 172.111.12.0/22 maxlen: 24 204.9.36.0/23 maxlen: 24 204.9.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0d:43:d3:92:09:d5:56:fb:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=308bebf2-1cd0-4c66-a516-472d9f3bbb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cf:a1:a6:26:f8:fd:86:5d:1f:68:fa:9a:a4: 5a:ac:67:2c:ee:c7:da:7f:01:ef:29:26:5c:be:98: dd:61:e7:08:41:6e:1e:5d:68:e2:27:6d:aa:3d:8b: 5c:65:f5:db:fa:67:62:3d:0c:36:3d:cc:e9:9e:c4: 84:ab:85:2c:d7:e6:5b:8f:30:a3:46:7a:37:5a:90: 07:a5:a5:95:80:2c:b2:71:48:e4:d0:2d:b4:5b:8f: 8d:0f:de:2e:79:2a:04:12:91:fa:9d:f2:0a:cc:bf: b6:fd:9a:d6:9c:6b:6a:da:55:16:29:4f:4d:a7:c9: 2e:3f:1f:68:b3:43:38:7c:0b:bd:74:c9:4a:46:dc: 77:9f:24:72:ab:72:a0:82:ba:e5:d5:e8:f6:c8:db: 21:d5:21:e1:54:fa:ba:37:a4:2d:7e:fe:a5:20:e5: d3:ec:fe:29:ad:8f:ca:16:e9:67:53:62:10:fd:21: 07:c2:33:59:7c:ff:94:71:05:5b:55:84:2d:a2:b2: d6:94:89:b9:75:f7:59:06:f3:e8:fc:50:69:8e:8a: a8:63:e1:25:a6:e8:75:0c:c8:8f:81:f8:45:97:17: 17:34:53:25:b5:d5:0c:55:f4:1d:f8:56:07:87:66: 35:ea:b5:df:d8:56:03:dc:1e:aa:4a:1b:1f:e6:9e: 5a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6E:F2:B9:D6:ED:54:25:F3:FB:0D:F7:3D:E7:76:7D:C4:1B:73:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 172.111.12.0/22 204.9.36.0-204.9.38.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c3:05:9e:32:1f:ab:e1:62:42:29:51:20:05:b9:5c:6b:03: 06:21:ef:0e:9e:a4:f0:42:7d:44:e0:b6:a5:6e:de:e3:a8:42: 3d:73:8e:a6:3a:05:e2:2f:da:f0:da:1a:bb:de:d5:da:ab:19: 8f:9c:92:c9:36:33:b2:b7:bc:39:a1:ae:a3:9c:6d:1b:46:95: 4e:c0:0b:c1:73:35:85:11:3f:4e:5f:0e:82:42:f3:7c:39:84: 9a:ab:90:f6:38:70:6d:28:ef:f0:24:b7:9a:08:1e:58:6e:ce: 6a:c0:35:11:f5:57:4d:2b:4b:54:c8:bd:5b:14:3c:5e:82:52: 4f:d8:a8:11:cd:5c:3a:83:4b:5f:a7:c0:33:82:20:e6:47:bf: e6:6c:ba:de:89:4c:5d:10:64:9e:76:17:aa:59:a3:bd:81:c3: 31:ab:db:1f:f7:33:f5:8b:bf:67:04:ca:1a:f6:a8:93:6d:0e: 8f:60:88:ea:fc:6d:aa:0b:6a:57:31:96:9d:16:93:93:06:2d: 4a:0b:d9:c7:a8:6a:6b:11:80:a3:0d:6f:f5:26:e0:49:e7:d5: 65:b0:df:56:93:fa:58:bc:8f:18:f9:93:b5:40:bc:d3:c9:ee: ab:a3:20:99:cd:7f:dd:9e:f6:77:5f:96:16:31:3e:90:70:be: ee:f8:ca:32 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWErX0Q1D05IJ1Vb7FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MzA4YmViZjItMWNkMC00YzY2LWE1MTYtNDcyZDlmM2JiYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M+hpib4/YZdH2j6mqRarGcs7sfafwHvKSZc vpjdYecIQW4eXWjiJ22qPYtcZfXb+mdiPQw2PczpnsSEq4Us1+ZbjzCjRno3WpAH paWVgCyycUjk0C20W4+ND94ueSoEEpH6nfIKzL+2/ZrWnGtq2lUWKU9Np8kuPx9o s0M4fAu9dMlKRtx3nyRyq3Kggrrl1ej2yNsh1SHhVPq6N6Qtfv6lIOXT7P4prY/K FulnU2IQ/SEHwjNZfP+UcQVbVYQtorLWlIm5dfdZBvPo/FBpjoqoY+Elpuh1DMiP gfhFlxcXNFMltdUMVfQd+FYHh2Y16rXf2FYD3B6qShsf5p5aHwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFKxu8rnW7VQl8/sN9z3ndn3EG3O+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvZjVhYzU1YWMtZjgxMC0z NTQ0LTkwYjUtOGY2Nzk1YzY1Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCrG8MMAwD BALMCSQDBADMCSYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEADMMFnjIfq+FiQilRIAW5XGsDBiHvDp6k8EJ9 ROC2pW7e46hCPXOOpjoF4i/a8Noau97V2qsZj5ySyTYzsre8OaGuo5xtG0aVTsAL wXM1hRE/Tl8OgkLzfDmEmquQ9jhwbSjv8CS3mggeWG7OasA1EfVXTStLVMi9WxQ8 XoJST9ioEc1cOoNLX6fAM4Ig5ke/5my63olMXRBknnYXqlmjvYHDMavbH/cz9Yu/ ZwTKGvaok20Oj2CI6vxtqgtqVzGWnRaTkwYtSgvZx6hqaxGAow1v9SbgSefVZbDf VpP6WLyPGPmTtUC808nuq6Mgmc1/3Z72d1+WFjE+kHC+7vjKMg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:00:46 2025 by rpki-client