$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3dffc443-44e3-38a4-b7c1-d886a3339950.roa File: 3dffc443-44e3-38a4-b7c1-d886a3339950.roa (raw, json) Hash identifier: Z5sisVT0jlr1Q2M+0vCZmwkyhTA0qGU9l8Zqt0Fx2/s= Subject key identifier: 34:81:9E:F7:CE:47:40:D6:FF:9F:D4:2A:10:3E:06:34:BB:FF:B8:58 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584B0CDC1AA96E445EF06125E900 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3dffc443-44e3-38a4-b7c1-d886a3339950.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 33307 IP address blocks: 172.84.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1a:a9:6e:44:5e:f0:61:25:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=3fbcd4db-5d13-4537-9c71-a4e0be6b1747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:6e:5a:d6:b0:0b:e8:53:45:e9:28:f9:9c: 78:4f:9b:0d:94:52:ff:ab:d5:65:db:d6:40:34:83: 96:1d:67:4c:aa:14:2e:94:76:10:dd:b5:30:12:0e: 08:c7:f8:bd:9f:c6:1f:01:69:6c:bc:c0:d8:c5:f0: 08:72:c5:d6:0a:ea:60:be:d5:72:a1:3d:a5:ab:5f: 4f:7f:98:2c:e2:11:41:77:bc:06:ef:66:cd:59:d7: 8d:9b:28:51:7d:d7:ef:fe:7c:88:b9:1f:79:17:c6: 0f:10:08:bd:4b:9f:dd:f1:8b:1a:e0:f9:bd:d0:bc: 78:56:8a:ef:78:c0:ba:e9:37:d5:80:90:46:42:ec: d9:3d:26:fc:fc:55:16:c8:e5:9a:14:3a:9a:8b:b9: 3a:e6:2f:a5:8b:2c:f7:d2:ac:99:6e:bd:58:57:56: f9:96:20:ca:e5:d5:f0:f2:de:1a:a5:7d:0f:6b:c4: f5:8d:bf:f4:cb:95:95:2e:08:84:15:94:c8:83:c3: f7:45:88:94:e8:7d:7c:e2:9c:c6:eb:de:2a:e0:a5: 42:6e:44:0e:ef:d6:ea:51:24:ee:d0:52:f1:c8:5f: 04:86:df:81:3d:dc:07:3d:25:80:92:10:48:ad:44: f5:a9:86:e1:20:6e:40:c6:c8:f8:22:6e:51:74:fd: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:81:9E:F7:CE:47:40:D6:FF:9F:D4:2A:10:3E:06:34:BB:FF:B8:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/3dffc443-44e3-38a4-b7c1-d886a3339950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:50:ad:d7:bd:90:46:1e:94:65:ea:c4:67:b7:a8:2a:3e:a6: ae:f7:0b:cc:95:00:7b:f1:2d:ac:32:8a:da:f9:d3:3b:08:93: 51:a0:51:3c:06:7f:34:b2:1d:0f:c8:13:69:60:e4:8e:76:dc: 91:9b:5d:64:de:d5:45:c0:91:43:68:20:01:a7:c9:d6:f0:f8: 18:3b:90:10:58:3b:de:32:98:b4:32:d9:80:39:87:aa:4c:d4: 71:f5:44:eb:98:41:7b:a2:3f:c4:18:96:49:8b:81:35:94:cc: 99:e8:19:33:35:bf:68:b8:77:ba:6c:af:79:99:d6:67:65:a4: c7:0a:ec:38:62:ea:4a:f0:52:60:e3:9b:84:ca:ed:ea:e1:82: e3:24:57:b4:52:37:7b:61:87:85:37:8b:04:a8:b3:10:b7:66: 11:86:e2:20:9d:29:ac:1f:7b:42:2f:c8:47:20:a2:22:67:d6: e3:1c:31:9f:01:2e:bf:ef:34:54:e7:7c:9f:ad:ba:66:f5:7d: 80:4f:44:34:28:1d:38:42:4e:81:c2:35:f8:40:86:db:6c:c7: 1d:5f:b9:11:d4:4d:8d:9e:df:c7:21:a4:26:4f:69:4b:3a:b6: 18:20:29:1b:b8:91:40:4b:66:45:33:d4:fd:64:e3:10:2c:52: ff:e4:af:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BqpbkRe8GEl6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk M2ZiY2Q0ZGItNWQxMy00NTM3LTljNzEtYTRlMGJlNmIxNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQNuWtawC+hTReko+Zx4T5sNlFL/q9Vl29ZA NIOWHWdMqhQulHYQ3bUwEg4Ix/i9n8YfAWlsvMDYxfAIcsXWCupgvtVyoT2lq19P f5gs4hFBd7wG72bNWdeNmyhRfdfv/nyIuR95F8YPEAi9S5/d8Ysa4Pm90Lx4Vorv eMC66TfVgJBGQuzZPSb8/FUWyOWaFDqai7k65i+liyz30qyZbr1YV1b5liDK5dXw 8t4apX0Pa8T1jb/0y5WVLgiEFZTIg8P3RYiU6H184pzG694q4KVCbkQO79bqUSTu 0FLxyF8Eht+BPdwHPSWAkhBIrUT1qYbhIG5Axsj4Im5RdP1N8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSBnvfOR0DW/5/UKhA+BjS7/7hYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvM2RmZmM0NDMtNDRlMy0z OGE0LWI3YzEtZDg4NmEzMzM5OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJQrde9kEYelGXqxGe3qCo+pq73C8yVAHvxLawyitr50zsIk1GgUTwG fzSyHQ/IE2lg5I523JGbXWTe1UXAkUNoIAGnydbw+Bg7kBBYO94ymLQy2YA5h6pM 1HH1ROuYQXuiP8QYlkmLgTWUzJnoGTM1v2i4d7psr3mZ1mdlpMcK7Dhi6krwUmDj m4TK7erhguMkV7RSN3thh4U3iwSosxC3ZhGG4iCdKawfe0IvyEcgoiJn1uMcMZ8B Lr/vNFTnfJ+tumb1fYBPRDQoHThCToHCNfhAhttsxx1fuRHUTY2e38chpCZPaUs6 thggKRu4kUBLZkUz1P1k4xAsUv/kr18= -----END CERTIFICATE-----Generated at Sat Oct 11 14:58:04 2025 by rpki-client