$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa87909-a301-3d3c-9840-757e7ba6f688.roa File: 3fa87909-a301-3d3c-9840-757e7ba6f688.roa (raw, json) Hash identifier: 6J72RsO3pB3UtQ4cOAa07iKFut9WZkDmCr2pWNEJ66Y= Subject key identifier: 1E:C6:C2:A2:52:D6:9B:0E:B3:7C:C8:43:92:E2:1A:1B:A8:1A:F1:E9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0E9B4EB007E220EC6E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa87909-a301-3d3c-9840-757e7ba6f688.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 100.4.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0e:9b:4e:b0:07:e2:20:ec:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=87e4989e-62ed-45df-bfa4-ed822437d24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3b:49:16:56:89:67:01:a4:55:ac:e3:e0:ef: 29:f3:ff:eb:f2:50:23:01:c0:2a:c5:69:cd:66:58: 6e:f0:2a:bb:b9:7c:f3:32:f5:a1:15:0a:51:91:25: e0:1c:13:99:eb:68:ae:54:d4:71:f2:29:65:51:39: 39:84:fb:5c:0b:d2:e1:2b:d0:09:c7:b4:d5:e7:9a: 20:37:6b:0b:76:93:49:de:a7:ef:19:a3:6a:95:95: 16:de:55:dc:92:6e:e6:03:53:58:ff:59:6e:0a:2a: bd:21:eb:3e:7b:98:9e:9e:43:b3:57:3f:64:2c:44: b5:fd:72:00:db:fe:f0:10:d5:3d:fc:28:d0:3e:6d: 4b:42:68:dc:64:88:8a:2b:24:84:19:6b:91:25:3d: c4:6c:0f:9f:0a:a4:70:8f:e7:77:99:ce:55:8b:c5: ce:14:81:e6:8f:ad:29:ad:aa:58:7e:59:6e:83:e3: 7d:b9:73:a3:6a:21:20:17:3a:2c:17:1b:16:97:d3: ea:b2:ac:ef:86:aa:02:43:3e:a0:fd:20:de:ca:b9: ce:27:69:38:26:57:f0:d2:48:ec:13:91:54:a3:b5: 4f:c8:0d:96:56:c2:97:a2:a3:8e:6b:51:fe:e3:7a: a5:69:dd:79:0c:78:fb:e1:76:16:9a:a5:30:6c:11: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C6:C2:A2:52:D6:9B:0E:B3:7C:C8:43:92:E2:1A:1B:A8:1A:F1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa87909-a301-3d3c-9840-757e7ba6f688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.4.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:31:2b:6d:01:df:84:3c:ab:95:a7:47:04:fd:80:75:be:00: a3:f1:d1:e6:4f:54:9f:2f:41:6a:76:fa:46:0e:dd:ad:a9:9f: 0c:57:b0:63:19:3d:ee:76:34:1f:14:cb:f8:62:46:8d:0c:08: 48:96:1e:c8:7f:f2:cf:4b:64:e0:a3:f3:d7:5a:ed:54:d7:8c: 89:9d:57:05:d1:b0:06:8a:86:f7:11:96:4f:62:59:75:e0:35: 17:60:73:89:eb:05:a7:9e:66:d6:59:96:e4:be:04:3d:42:88: 9b:88:0c:4f:17:36:98:48:af:48:d9:68:46:f0:be:03:ab:c0: f3:b2:df:98:05:99:0d:0a:e1:42:e4:c0:24:f2:76:2f:6f:c5: 00:3a:2e:7d:86:a4:08:ff:c7:5b:a3:d1:a4:a4:07:bf:4d:5d: 7d:83:3d:b9:91:2f:f2:43:e5:bf:c9:69:17:73:72:c2:1a:37: 0d:90:fd:3d:ad:d1:ab:03:66:98:c8:03:e8:f5:20:81:83:27: 21:4c:2c:df:42:a9:74:08:84:0a:a2:a7:b9:ff:16:65:43:e8: 08:19:91:18:89:4d:cc:b1:ea:6c:7a:4b:a6:b0:87:db:a7:90: 8b:c4:85:4e:63:01:39:ba:ca:57:7f:36:3a:c1:5a:7c:81:34: 99:ce:6e:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPA6bTrAH4iDsboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ODdlNDk4OWUtNjJlZC00NWRmLWJmYTQtZWQ4MjI0MzdkMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjtJFlaJZwGkVazj4O8p8//r8lAjAcAqxWnN Zlhu8Cq7uXzzMvWhFQpRkSXgHBOZ62iuVNRx8illUTk5hPtcC9LhK9AJx7TV55og N2sLdpNJ3qfvGaNqlZUW3lXckm7mA1NY/1luCiq9Ies+e5ienkOzVz9kLES1/XIA 2/7wENU9/CjQPm1LQmjcZIiKKySEGWuRJT3EbA+fCqRwj+d3mc5Vi8XOFIHmj60p rapYfllug+N9uXOjaiEgFzosFxsWl9PqsqzvhqoCQz6g/SDeyrnOJ2k4Jlfw0kjs E5FUo7VPyA2WVsKXoqOOa1H+43qlad15DHj74XYWmqUwbBE1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7GwqJS1psOs3zIQ5LiGhuoGvHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZhODc5MDktYTMwMS0z ZDNjLTk4NDAtNzU3ZTdiYTZmNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZAQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgxK20B34Q8q5WnRwT9gHW+AKPx0eZPVJ8vQWp2+kYO3a2pnwxXsGMZ Pe52NB8Uy/hiRo0MCEiWHsh/8s9LZOCj89da7VTXjImdVwXRsAaKhvcRlk9iWXXg NRdgc4nrBaeeZtZZluS+BD1CiJuIDE8XNphIr0jZaEbwvgOrwPOy35gFmQ0K4ULk wCTydi9vxQA6Ln2GpAj/x1uj0aSkB79NXX2DPbmRL/JD5b/JaRdzcsIaNw2Q/T2t 0asDZpjIA+j1IIGDJyFMLN9CqXQIhAqip7n/FmVD6AgZkRiJTcyx6mx6S6awh9un kIvEhU5jATm6yld/NjrBWnyBNJnObvY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:11 2025 by rpki-client