$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/123dd18b-15b1-3162-83a2-93f72c2d595e.roa File: 123dd18b-15b1-3162-83a2-93f72c2d595e.roa (raw, json) Hash identifier: VrCw/7bjD9TEX5XzjIWL6xFRUp2PPYD/eoTLH4aV+0k= Subject key identifier: 80:80:93:9B:BA:D1:7B:0A:1C:EC:3F:18:A9:A3:A9:5A:81:78:6F:01 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AFC1C08D30468EE91C8A84C80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/123dd18b-15b1-3162-83a2-93f72c2d595e.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 15204 IP address blocks: 64.33.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:08:d3:04:68:ee:91:c8:a8:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=4d48cb69-5e31-43a4-aeb4-a8cd963162ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:df:cb:02:06:3c:15:6e:03:61:ae:ec:f7: 53:61:14:82:16:bf:6c:ad:52:f0:a6:f5:4a:3b:37: 45:92:08:c8:d3:5e:e6:a5:f0:09:79:c8:6a:1f:5a: 81:4e:b9:a5:f4:ad:16:0c:82:03:ea:8e:44:7f:07: 9d:d5:56:78:c8:74:a8:c5:46:c5:6f:b7:e5:7c:6e: d3:8c:89:59:21:a5:9d:38:d2:df:25:8b:3e:33:97: da:f9:24:51:49:56:00:1f:a8:f0:da:8d:eb:a7:4a: 6f:53:d2:fa:42:f3:fb:48:b0:c7:36:85:b9:28:24: 52:d2:ee:3c:d1:ef:9b:31:ef:db:e0:33:96:67:48: 37:a0:d4:74:ef:40:cd:21:a7:c3:57:3b:b3:60:90: f3:ce:0a:9b:28:3e:41:9c:bc:4b:f5:45:51:2f:bc: fb:56:3f:cc:f7:28:08:cb:77:f2:be:8d:02:84:0d: 1d:2c:ac:75:a5:87:cd:69:1b:d0:e4:22:24:11:6b: f7:62:84:ac:49:1d:13:df:16:ca:71:b8:a6:e7:28: 3f:72:27:d0:d9:51:66:9e:6e:67:24:d3:1f:f6:23: 22:e5:f4:fc:f9:7a:6f:e0:74:0a:c4:f3:ac:67:6c: e4:5e:fd:fd:0b:70:07:9c:a6:a3:69:7c:3f:71:f3: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:80:93:9B:BA:D1:7B:0A:1C:EC:3F:18:A9:A3:A9:5A:81:78:6F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/123dd18b-15b1-3162-83a2-93f72c2d595e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:2e:97:c8:5e:a4:9c:4e:d0:bd:aa:bb:8e:a1:d3:d3:c8:86: 23:65:ee:32:7f:46:5b:71:65:77:b0:be:07:0e:8e:69:e5:33: c9:39:6e:fc:72:b6:7c:67:9f:59:1c:87:31:a8:82:a6:ec:b5: 5a:ca:26:93:39:2d:ff:84:16:15:90:ef:03:30:ce:6e:41:e0: 66:7f:69:4b:82:bb:83:14:48:0a:00:dc:9c:15:75:22:0f:7b: b2:3b:94:ee:02:41:d9:ae:d1:df:50:c3:e0:be:92:68:87:f6: 74:20:e2:a5:40:8e:85:b7:32:e3:dc:16:83:d7:ab:8b:84:f5: 1b:24:c1:81:2d:58:1e:37:cc:12:86:c5:6c:c3:a2:e8:a7:03: 7c:02:01:4b:b8:ce:ee:7a:3a:8a:4b:ab:2d:73:f6:98:b8:93: e9:8f:1b:33:81:73:4f:f8:4f:98:3c:b9:fd:ff:92:bf:0e:80: b3:04:18:ca:95:fd:f9:83:2d:15:e0:ad:16:6e:ce:02:cb:5a: a9:f7:37:73:83:ee:6a:c6:fc:85:5d:f6:42:8e:4b:93:cb:2f: 3e:fe:79:62:07:7b:54:4d:65:82:5f:46:9f:26:12:11:94:85: 93:08:3a:bf:d4:71:4c:25:3e:a1:0e:33:f5:2c:17:96:76:b5: a5:9a:c1:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAjTBGjukcioTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NGQ0OGNiNjktNWUzMS00M2E0LWFlYjQtYThjZDk2MzE2MmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiezfywIGPBVuA2Gu7PdTYRSCFr9srVLwpvVK OzdFkgjI017mpfAJechqH1qBTrml9K0WDIID6o5Efwed1VZ4yHSoxUbFb7flfG7T jIlZIaWdONLfJYs+M5fa+SRRSVYAH6jw2o3rp0pvU9L6QvP7SLDHNoW5KCRS0u48 0e+bMe/b4DOWZ0g3oNR070DNIafDVzuzYJDzzgqbKD5BnLxL9UVRL7z7Vj/M9ygI y3fyvo0ChA0dLKx1pYfNaRvQ5CIkEWv3YoSsSR0T3xbKcbim5yg/cifQ2VFmnm5n JNMf9iMi5fT8+Xpv4HQKxPOsZ2zkXv39C3AHnKajaXw/cfNsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICAk5u60XsKHOw/GKmjqVqBeG8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTIzZGQxOGItMTViMS0z MTYyLTgzYTItOTNmNzJjMmQ1OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANMul8hepJxO0L2qu46h09PIhiNl7jJ/RltxZXewvgcOjmnlM8k5bvxy tnxnn1kchzGogqbstVrKJpM5Lf+EFhWQ7wMwzm5B4GZ/aUuCu4MUSAoA3JwVdSIP e7I7lO4CQdmu0d9Qw+C+kmiH9nQg4qVAjoW3MuPcFoPXq4uE9RskwYEtWB43zBKG xWzDouinA3wCAUu4zu56OopLqy1z9pi4k+mPGzOBc0/4T5g8uf3/kr8OgLMEGMqV /fmDLRXgrRZuzgLLWqn3N3OD7mrG/IVd9kKOS5PLLz7+eWIHe1RNZYJfRp8mEhGU hZMIOr/UcUwlPqEOM/UsF5Z2taWawb4= -----END CERTIFICATE-----Generated at Fri Oct 10 14:06:46 2025 by rpki-client