$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa File: 3e3631a7-6a34-3455-850a-0ec197b42195.roa (raw, json) Hash identifier: RT4O9JDqZDtjj/xzTAVisZXl1T95EFcgdC4Zzqe7ADE= Subject key identifier: 46:5D:86:1E:66:51:E8:63:63:29:D1:95:EE:9D:6A:23:C1:39:2B:CA Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584A6826010495C94FB1D947D380 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 800 IP address blocks: 207.32.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:01:04:95:c9:4f:b1:d9:47:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=6a2a23bf-622a-497b-a7bb-f54020efc782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:e1:3d:8a:18:b3:39:3e:91:47:4d:9b:61: 4e:da:c6:bc:5b:aa:5a:5a:de:e3:bd:f2:56:d6:39: c7:16:15:38:4e:52:1d:56:c5:42:1b:cb:0c:9a:cc: 52:a6:cb:6d:ef:f6:02:57:62:4d:99:13:d5:4c:13: 57:67:60:15:04:9c:2d:cc:8e:9c:c6:a3:65:e4:91: 32:78:da:8e:b7:7a:05:30:00:17:6c:47:2e:04:35: 18:57:fd:24:ab:ea:cb:ba:d8:83:fd:e5:2a:6b:9a: 48:74:77:f9:fb:fc:50:be:a8:57:f7:ea:16:90:ab: 3c:c9:e9:b4:a8:b6:3d:a6:f9:cd:5b:a0:82:30:3e: 84:06:18:d5:ab:e5:3a:18:81:0c:97:c8:53:d3:28: 24:98:3f:d5:68:24:de:9b:4f:3e:08:45:14:25:61: d6:82:de:54:17:1e:b6:75:af:5c:24:9a:41:50:57: ad:53:d0:62:96:ee:a7:ec:d4:83:25:91:7d:39:05: cb:72:85:2c:f8:27:bd:d6:00:fc:20:94:2b:5f:18: 5c:f0:c9:d4:22:ae:1e:87:df:75:a4:89:9b:1e:43: 2a:71:53:c6:be:a0:a8:b5:a3:39:e3:68:9a:92:65: 25:e3:1c:6e:c6:1c:ed:b7:a3:33:0f:46:b8:df:b5: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5D:86:1E:66:51:E8:63:63:29:D1:95:EE:9D:6A:23:C1:39:2B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 207.32.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:64:f3:27:3a:45:47:49:b7:1e:7a:2f:dc:da:50:72:6a:c0: f0:de:12:7f:34:74:4b:0b:b9:2a:e0:bf:08:39:47:ed:b2:a4: cc:83:ef:01:31:5a:df:21:a5:46:57:f1:a5:81:28:96:5e:62: 06:3e:06:80:5b:4c:4d:cc:6c:4c:2e:74:0e:66:17:cd:2a:79: 5e:4a:34:6a:52:8b:ec:f2:ca:5c:87:f7:c0:c7:50:a2:e7:a2: 7e:64:c9:93:54:19:6f:f8:df:b5:fd:5f:ff:ac:61:11:b0:55: 54:71:d9:a3:56:2c:14:fa:1d:51:99:40:18:f0:66:8e:e2:f4: ea:1b:38:33:b9:b5:11:4a:62:e6:25:6f:d6:b3:35:14:c0:8d: 8a:f4:12:41:23:96:43:25:b4:62:a5:9c:c5:9e:4f:55:58:22: 37:e2:1e:2c:1e:39:fb:a7:45:d0:5a:b4:ab:46:0c:1b:e6:42: 82:03:c1:db:76:e7:63:9e:21:db:c4:96:28:ee:81:94:77:dd: cd:71:03:c1:22:8c:f5:d0:a2:c3:3b:60:d3:87:b7:4c:92:51: b7:04:a1:39:77:4f:f6:07:bf:29:2f:04:f9:4f:f2:07:ba:6c: 3a:fd:68:b5:46:14:8b:fd:2a:7a:98:c8:13:0e:44:58:99:e1: b4:fe:b5:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgEElclPsdlH04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NmEyYTIzYmYtNjIyYS00OTdiLWE3YmItZjU0MDIwZWZjNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KHhPYoYszk+kUdNm2FO2sa8W6paWt7jvfJW 1jnHFhU4TlIdVsVCG8sMmsxSpstt7/YCV2JNmRPVTBNXZ2AVBJwtzI6cxqNl5JEy eNqOt3oFMAAXbEcuBDUYV/0kq+rLutiD/eUqa5pIdHf5+/xQvqhX9+oWkKs8yem0 qLY9pvnNW6CCMD6EBhjVq+U6GIEMl8hT0ygkmD/VaCTem08+CEUUJWHWgt5UFx62 da9cJJpBUFetU9Bilu6n7NSDJZF9OQXLcoUs+Ce91gD8IJQrXxhc8MnUIq4eh991 pImbHkMqcVPGvqCotaM542iakmUl4xxuxhztt6MzD0a437WoywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZdhh5mUehjYynRle6daiPBOSvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvM2UzNjMxYTctNmEzNC0z NDU1LTg1MGEtMGVjMTk3YjQyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpk8yc6RUdJtx56L9zaUHJqwPDeEn80dEsLuSrgvwg5R+2ypMyD7wEx Wt8hpUZX8aWBKJZeYgY+BoBbTE3MbEwudA5mF80qeV5KNGpSi+zyylyH98DHUKLn on5kyZNUGW/437X9X/+sYRGwVVRx2aNWLBT6HVGZQBjwZo7i9OobODO5tRFKYuYl b9azNRTAjYr0EkEjlkMltGKlnMWeT1VYIjfiHiweOfunRdBatKtGDBvmQoIDwdt2 52OeIdvElijugZR33c1xA8EijPXQosM7YNOHt0ySUbcEoTl3T/YHvykvBPlP8ge6 bDr9aLVGFIv9KnqYyBMORFiZ4bT+tQ0= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:11 2025 by rpki-client