$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa File: 3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa (raw, json) Hash identifier: 6qRina4sV5FkVlOgzt25+kJxR3TXEEAFDJ0hSCx/OJ0= Subject key identifier: 27:3A:AE:30:94:F6:AA:36:BB:4F:D1:CB:40:90:14:63:71:2C:D8:FF Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584A9A66364F75E929A1D71F4680 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 198949 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:36:4f:75:e9:29:a1:d7:1f:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=a2791d8e-f009-40ee-94f8-0445206d81f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:8d:88:67:cf:98:4e:0d:20:9d:69:2d:f1: 11:90:e2:08:d5:81:6e:79:1a:0f:23:23:71:25:ff: 9c:cc:b1:8e:d0:4f:1f:63:b7:43:4b:ed:df:21:36: b6:e5:99:3a:53:b1:27:dc:0c:27:f8:2e:82:f8:5a: 52:c2:cd:73:a8:9a:94:a5:b5:89:3e:af:5c:17:a6: ab:6a:3a:ed:6d:14:4c:52:f1:c0:64:43:46:6e:9b: a5:32:14:b0:e5:24:81:37:06:a1:d8:25:d3:f3:29: c4:a9:6c:18:4c:38:10:e7:af:b0:24:ab:04:9b:bb: 23:92:39:41:de:18:b9:38:e2:a6:54:ee:75:a9:13: df:16:2e:b9:36:f2:f0:16:f0:fc:db:bd:ee:cb:37: 26:c7:f5:ca:9f:1c:b5:b3:2d:17:e9:2b:7f:51:df: 88:1f:bb:3d:3d:4d:63:a3:bb:97:31:02:a4:1e:cb: 7a:89:b3:6e:0a:12:65:9e:c7:bc:b0:5f:8c:3b:fb: 5a:af:65:49:8b:43:df:e3:74:f4:12:52:17:ee:b7: 92:43:22:d4:4c:52:08:2a:94:bf:f5:e8:81:35:76: 41:0a:cd:8c:11:34:44:26:ac:f8:aa:0c:14:5c:a5: 41:17:d8:4e:0c:fc:19:fc:f8:c0:8d:9b:3b:f9:33: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3A:AE:30:94:F6:AA:36:BB:4F:D1:CB:40:90:14:63:71:2C:D8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a5:34:44:60:9d:4d:d2:2b:ab:c4:42:d7:64:43:20:3d:07: d3:a3:29:1c:60:13:81:db:31:d5:13:83:04:17:0d:a2:4f:d9: 8a:78:94:f9:84:7d:80:07:34:dd:91:db:b8:e2:7a:55:01:b7: d8:6b:0a:c3:2a:9f:02:c3:1b:5c:b3:33:9e:a7:59:33:65:b9: 34:4a:ea:b5:6c:aa:8a:40:02:5a:bd:17:9b:cd:48:59:28:16: 6b:7f:ec:e5:5c:83:c9:b8:94:94:0e:33:72:5d:05:c0:a7:cc: 8c:e4:a8:94:63:ce:c5:f7:81:7a:fe:79:80:c9:d9:5b:91:63: 81:fa:65:77:e1:c8:fb:01:6d:79:19:ae:2f:f7:c3:65:44:5a: e1:d7:72:99:19:bf:d5:22:2a:0d:72:27:cf:43:28:2b:35:1d: 91:f8:07:a0:b4:94:d1:ba:87:56:22:f1:3f:cb:da:8b:56:41: ef:a9:91:57:bc:b0:31:30:db:ed:5d:ad:92:cc:2f:b0:e0:60: a6:c9:09:20:33:89:b9:50:37:cd:cd:d2:47:57:90:5d:e6:38: 4c:d2:5a:c0:12:09:56:a8:71:cf:15:8f:9b:d6:8c:9d:88:a9: a4:aa:b0:60:50:8e:d8:2f:60:a2:0c:38:4a:de:c3:b6:62:50: f6:85:2f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjZPdekpodcfRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YTI3OTFkOGUtZjAwOS00MGVlLTk0ZjgtMDQ0NTIwNmQ4MWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9yNiGfPmE4NIJ1pLfERkOII1YFueRoPIyNx Jf+czLGO0E8fY7dDS+3fITa25Zk6U7En3Awn+C6C+FpSws1zqJqUpbWJPq9cF6ar ajrtbRRMUvHAZENGbpulMhSw5SSBNwah2CXT8ynEqWwYTDgQ56+wJKsEm7sjkjlB 3hi5OOKmVO51qRPfFi65NvLwFvD8273uyzcmx/XKnxy1sy0X6St/Ud+IH7s9PU1j o7uXMQKkHst6ibNuChJlnse8sF+MO/tar2VJi0Pf43T0ElIX7reSQyLUTFIIKpS/ 9eiBNXZBCs2METREJqz4qgwUXKVBF9hODPwZ/PjAjZs7+TOobQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc6rjCU9qo2u0/Ry0CQFGNxLNj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvM2ZjMTM5NmEtOWQwMS0z YmM0LTliYzMtNjdmMzE1OWVmOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADilNERgnU3SK6vEQtdkQyA9B9OjKRxgE4HbMdUTgwQXDaJP2Yp4lPmE fYAHNN2R27jielUBt9hrCsMqnwLDG1yzM56nWTNluTRK6rVsqopAAlq9F5vNSFko Fmt/7OVcg8m4lJQOM3JdBcCnzIzkqJRjzsX3gXr+eYDJ2VuRY4H6ZXfhyPsBbXkZ ri/3w2VEWuHXcpkZv9UiKg1yJ89DKCs1HZH4B6C0lNG6h1Yi8T/L2otWQe+pkVe8 sDEw2+1drZLML7DgYKbJCSAziblQN83N0kdXkF3mOEzSWsASCVaocc8Vj5vWjJ2I qaSqsGBQjtgvYKIMOErew7ZiUPaFL04= -----END CERTIFICATE-----Generated at Sat Aug 2 05:33:05 2025 by rpki-client