$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa File: 3b4f080a-93ea-356c-9216-559219ab2f01.roa (raw, json) Hash identifier: E0Lq06VjvcDT9ntzfBgaF5rWs9bvWU3Xofbg1uLD9BA= Subject key identifier: 5D:DC:B6:11:BC:23:01:C1:47:45:87:48:22:2A:B2:9E:F5:4A:C9:22 Certificate issuer: /CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Certificate serial: 010D0C9F4328584B031691A0B764937BECD71780 Authority key identifier: 01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 8075 IP address blocks: 192.12.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:91:a0:b7:64:93:7b:ec:d7:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=e09cea09-7f56-4b94-8ad3-96ffe73aa89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:f7:4c:26:9b:a7:81:41:03:71:aa:b5:94: d2:7b:a9:32:85:74:3d:64:bd:c7:07:68:82:24:6d: 04:7e:9a:b6:76:3b:2f:58:3d:61:a0:9f:00:fc:2b: 90:34:9f:14:b9:29:a9:5f:04:6b:4a:8c:85:19:42: 96:1e:d1:43:44:48:a3:a1:bf:53:03:85:47:f5:56: fc:bf:6b:e5:6a:c7:38:5b:33:7b:5b:fe:4f:83:1e: fb:35:2b:e4:62:f0:c9:af:99:ab:7b:71:68:5e:cb: f9:4b:15:41:bb:f4:5f:d5:f7:60:d4:a7:df:22:fd: 9f:c7:4e:c5:f9:36:72:b6:a9:e6:35:e3:18:06:c7: 32:7c:d3:3c:4a:09:de:7f:78:60:5b:26:1d:fc:58: 0d:1f:d9:84:67:78:fd:12:69:a4:d2:2a:2f:5f:97: 65:12:71:6c:fb:58:4a:72:d7:0e:ed:9a:6d:8a:c4: b4:19:a2:f0:21:fe:6c:6f:f0:78:8f:76:18:89:19: eb:91:05:dd:11:32:a0:76:2a:5d:f0:a4:e5:35:af: 02:fd:10:b2:ef:aa:c9:3b:97:14:2a:f9:0c:6f:7d: ae:09:6e:bd:96:b7:16:e5:a2:a4:b4:4b:82:20:85: 97:41:49:27:af:7b:c2:5b:cd:3c:a0:d2:92:81:7e: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DC:B6:11:BC:23:01:C1:47:45:87:48:22:2A:B2:9E:F5:4A:C9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl X509v3 Authority Key Identifier: keyid:01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c4:d0:77:e3:ca:3b:32:13:52:15:e2:80:0e:4d:c6:0b:7c: c2:9a:22:57:7f:a6:74:64:8e:ba:ae:ca:5a:ad:61:16:f9:d5: b8:57:59:c9:ca:9a:61:65:c9:5a:47:a6:37:a9:89:b7:88:93: d4:1c:8f:cc:25:9e:bc:5d:3d:73:d6:ed:7a:28:29:f4:da:af: 65:59:ef:d9:0b:9d:b5:36:c0:c2:a2:37:57:22:c0:86:27:0e: 23:4e:2c:ae:33:c5:4d:b0:96:a1:0a:d5:94:27:79:49:d7:10: 19:85:5f:db:1d:b5:db:5c:91:82:29:4d:34:42:b7:a0:9e:fe: 02:72:3c:4c:58:0f:3a:8c:7a:7c:21:8b:98:65:fc:83:bb:0f: de:cb:b5:14:d0:9d:7d:29:f1:d7:34:f3:53:d7:6e:24:88:0e: a3:c8:66:f8:b5:86:1c:b0:63:7b:27:f6:f6:31:8e:ea:e2:84: 4d:7d:32:35:bc:03:02:40:8c:a9:66:63:fe:f0:7f:19:75:7c: 08:64:f7:7d:55:1d:4a:ae:93:e3:38:23:57:dd:60:fc:d4:7b: 6b:a3:e8:c2:37:e1:3e:ce:00:e2:e1:6b:3b:10:46:0b:2b:86: 71:68:33:c1:3e:6a:f6:63:3e:50:5b:a1:6c:26:4c:af:fa:89: 29:14:d2:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpGgt2STe+zXF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhmYmY4YjItZDJiYy00ZWQ4LWJkNTctMmE1ZTQzYTMw ZjNhMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk ZTA5Y2VhMDktN2Y1Ni00Yjk0LThhZDMtOTZmZmU3M2FhODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jv3TCabp4FBA3GqtZTSe6kyhXQ9ZL3HB2iC JG0Efpq2djsvWD1hoJ8A/CuQNJ8UuSmpXwRrSoyFGUKWHtFDREijob9TA4VH9Vb8 v2vlasc4WzN7W/5Pgx77NSvkYvDJr5mre3FoXsv5SxVBu/Rf1fdg1KffIv2fx07F +TZytqnmNeMYBscyfNM8Sgnef3hgWyYd/FgNH9mEZ3j9Emmk0iovX5dlEnFs+1hK ctcO7ZptisS0GaLwIf5sb/B4j3YYiRnrkQXdETKgdipd8KTlNa8C/RCy76rJO5cU KvkMb32uCW69lrcW5aKktEuCIIWXQUknr3vCW808oNKSgX5xyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3cthG8IwHBR0WHSCIqsp71SskiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGZi ZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVlNDNhMzBmM2EvM2I0ZjA4MGEtOTNlYS0z NTZjLTkyMTYtNTU5MjE5YWIyZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhmYmY4YjItZDJiYy00ZWQ4LWJk NTctMmE1ZTQzYTMwZjNhL2Q4ZmJmOGIyLWQyYmMtNGVkOC1iZDU3LTJhNWU0M2Ez MGYzYS5jcmwwHwYDVR0jBBgwFoAUAamV2enW0oeEHc6Nh2edpM3R/tQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGZiZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVl NDNhMzBmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfE0HfjyjsyE1IV4oAOTcYLfMKaIld/pnRkjrquylqtYRb51bhXWcnK mmFlyVpHpjepibeIk9Qcj8wlnrxdPXPW7XooKfTar2VZ79kLnbU2wMKiN1ciwIYn DiNOLK4zxU2wlqEK1ZQneUnXEBmFX9sdtdtckYIpTTRCt6Ce/gJyPExYDzqMenwh i5hl/IO7D97LtRTQnX0p8dc081PXbiSIDqPIZvi1hhywY3sn9vYxjurihE19MjW8 AwJAjKlmY/7wfxl1fAhk931VHUquk+M4I1fdYPzUe2uj6MI34T7OAOLhazsQRgsr hnFoM8E+avZjPlBboWwmTK/6iSkU0lg= -----END CERTIFICATE-----Generated at Wed Sep 3 23:49:21 2025 by rpki-client