$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa File: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (raw, json) Hash identifier: HJhzQHcV4PoaB9rqL2cSXVZxk+peubAM6O7TcfoGOKI= Subject key identifier: 2B:83:32:A0:5A:4F:5F:0C:DC:AF:99:35:2D:AA:8F:A2:AF:A4:FD:7F Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F4328584B004BEC585F22607995407940 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 30691 IP address blocks: 65.111.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ec:58:5f:22:60:79:95:40:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=af2a6d8d-991a-43e2-bbeb-7e4a66423a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:6b:92:62:c2:9f:8d:9a:50:b2:a7:20:f6: 6f:a3:cb:23:14:77:aa:a9:e6:c8:71:ff:5d:08:da: d6:1d:4d:d6:4f:49:29:94:78:92:ff:f1:cc:1a:9b: 13:6d:04:ba:06:1e:81:a5:97:88:bc:38:4a:de:ce: eb:c9:ff:06:09:1c:eb:3a:ed:3d:88:9e:3e:85:c1: d6:9e:95:47:19:f6:b6:39:94:1f:7a:e5:5d:46:2c: 4e:1c:52:bc:cf:a3:6e:76:d2:e8:d0:2c:c0:a2:23: 18:7b:03:b8:19:b5:07:6f:b2:5b:c1:7b:fd:52:42: 8f:f2:ab:43:91:96:f5:ff:c5:c0:36:f6:7a:c7:a8: b4:3c:5c:33:0b:44:24:3d:b9:68:30:87:f1:7b:e2: 99:8c:f6:ec:74:0c:fe:7c:43:85:f7:5b:f8:c5:b1: 92:76:26:9b:56:f9:93:1f:83:1b:b5:22:83:68:c6: 77:d7:fb:3b:1e:f3:da:48:0d:f6:11:85:7f:5b:07: 10:57:69:d5:04:db:29:aa:6b:b3:25:49:a9:f7:17: 20:90:54:cc:4e:6e:94:9f:0d:a1:8d:c0:dd:a8:b9: f3:2e:85:4b:ef:bd:2b:4c:fd:52:bb:3a:1f:56:2d: 07:81:d6:7c:4c:eb:0e:cb:a0:3e:93:3c:e3:ab:4f: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:83:32:A0:5A:4F:5F:0C:DC:AF:99:35:2D:AA:8F:A2:AF:A4:FD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/7dae22f8-939a-3a54-b81c-8890233bc71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: 65.111.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8d:ef:8c:65:56:0d:a3:13:75:4a:60:aa:48:ee:e0:e2:77: dc:78:1b:36:0c:bb:3b:97:73:fa:96:1e:21:f9:bd:12:66:c3: 9a:57:a1:f5:8b:1f:94:e7:a8:f9:f4:62:62:d7:d9:7e:68:4a: 58:75:56:c0:06:0f:f8:ae:07:3f:6e:1b:94:c0:91:b5:fb:02: 56:8b:f9:d7:40:4e:fb:cc:80:fd:7e:92:a5:61:30:11:22:10: 68:83:77:bd:da:02:e7:e6:58:96:d7:f5:e3:cd:34:7c:6f:0a: 00:7c:be:81:dc:67:bd:e8:ba:72:ae:da:c6:a7:1d:74:13:63: 29:85:17:10:18:cb:27:4d:72:15:51:d5:86:c2:6d:de:a7:64: 05:bb:e6:5e:eb:e3:3e:31:d6:e9:8e:26:72:db:ca:94:61:18: 87:79:01:9d:de:d5:a0:8b:36:b5:9a:95:8d:36:11:f3:b6:dc: b7:09:c0:f3:25:40:b4:50:ec:53:4d:4a:25:57:58:82:44:43: 86:2e:87:d4:29:69:66:d7:eb:1f:a0:f8:89:c5:fc:c8:d3:28: 0a:27:6e:64:32:17:61:30:dd:c6:01:77:a4:06:d3:80:7c:61: 1e:87:7a:b4:e6:4b:bc:61:94:fd:6b:78:b7:aa:86:27:42:1f: 71:ba:6b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+xYXyJgeZVAeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YWYyYTZkOGQtOTkxYS00M2UyLWJiZWItN2U0YTY2NDIzYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8FrkmLCn42aULKnIPZvo8sjFHeqqebIcf9d CNrWHU3WT0kplHiS//HMGpsTbQS6Bh6BpZeIvDhK3s7ryf8GCRzrOu09iJ4+hcHW npVHGfa2OZQfeuVdRixOHFK8z6NudtLo0CzAoiMYewO4GbUHb7JbwXv9UkKP8qtD kZb1/8XANvZ6x6i0PFwzC0QkPbloMIfxe+KZjPbsdAz+fEOF91v4xbGSdiabVvmT H4MbtSKDaMZ31/s7HvPaSA32EYV/WwcQV2nVBNspqmuzJUmp9xcgkFTMTm6Unw2h jcDdqLnzLoVL770rTP1SuzofVi0HgdZ8TOsOy6A+kzzjq0+TAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuDMqBaT18M3K+ZNS2qj6KvpP1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvN2RhZTIyZjgtOTM5YS0z YTU0LWI4MWMtODg5MDIzM2JjNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQW/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyN74xlVg2jE3VKYKpI7uDid9x4GzYMuzuXc/qWHiH5vRJmw5pXofWL H5TnqPn0YmLX2X5oSlh1VsAGD/iuBz9uG5TAkbX7AlaL+ddATvvMgP1+kqVhMBEi EGiDd73aAufmWJbX9ePNNHxvCgB8voHcZ73ounKu2sanHXQTYymFFxAYyydNchVR 1YbCbd6nZAW75l7r4z4x1umOJnLbypRhGId5AZ3e1aCLNrWalY02EfO23LcJwPMl QLRQ7FNNSiVXWIJEQ4Yuh9QpaWbX6x+g+InF/MjTKAonbmQyF2Ew3cYBd6QG04B8 YR6HerTmS7xhlP1reLeqhidCH3G6axY= -----END CERTIFICATE-----Generated at Fri Sep 19 01:16:26 2025 by rpki-client