$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa File: d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (raw, json) Hash identifier: HaMgPs1cf8QUJ0TNHA44EkwG2rxjL2M8M+CF068nmKE= Subject key identifier: A7:8B:19:28:6A:77:5A:1D:7F:0E:82:6D:2D:E9:CF:40:FF:B2:88:33 Certificate issuer: /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Certificate serial: 010D0C9F4328584AD7D114791F07444951F78080 Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 400141 IP address blocks: 63.135.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:14:79:1f:07:44:49:51:f7:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=1944d993-f4e9-4e90-b294-defd1e6a370c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:a7:85:66:3a:b0:c2:a8:60:df:6f:0e:fa: 32:49:d4:76:04:4a:6a:05:4e:f9:c6:45:b3:74:6a: 50:07:35:a3:fe:3d:8f:7c:17:22:27:8a:4c:10:d7: 9c:46:9a:06:16:46:92:58:9c:34:c4:6a:7d:77:02: bd:1a:85:38:1d:9a:f8:c0:2c:6d:52:be:a0:71:7d: ca:4b:99:dc:d1:0e:c1:eb:f3:04:10:7e:fd:b0:15: 14:a5:ff:d7:ed:bb:c6:2b:0d:68:49:e7:3e:26:0e: a0:d9:78:0a:87:2b:6a:62:ff:ba:dd:b8:19:e5:a6: 79:6f:3e:86:61:dc:23:83:f8:b5:e0:de:99:f6:92: 25:47:f3:fe:ac:a4:01:e3:93:20:28:89:a6:c0:7f: ac:07:57:ce:35:22:0d:e7:87:0e:62:8d:11:e4:4d: cc:df:93:1c:a8:b0:2b:d2:bf:32:1d:20:14:ac:c1: 43:d5:02:3e:6a:b4:09:38:d8:23:95:08:0a:d0:86: 6a:21:7f:84:8e:b3:c5:92:fc:e8:83:d0:b8:6f:56: 15:84:d2:0d:66:a6:f0:4f:aa:6a:bb:b5:47:39:bf: 19:89:1d:85:40:2c:49:01:ed:4e:02:9a:e2:cd:77: 7b:3b:a0:95:66:18:e2:54:3f:7f:ab:38:ad:27:f9: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8B:19:28:6A:77:5A:1D:7F:0E:82:6D:2D:E9:CF:40:FF:B2:88:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl X509v3 Authority Key Identifier: keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer sbgp-ipAddrBlock: critical IPv4: 63.135.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c1:86:bd:f9:b7:e1:5c:7b:7a:ef:48:59:10:fb:88:56:66: 20:3b:c5:b5:c1:5f:b2:5d:e6:38:83:38:0a:7c:2d:b8:c5:01: b8:2e:92:ee:d5:25:ec:b6:ba:ff:88:84:bd:0e:87:5a:a2:cf: 80:07:46:ac:63:d6:97:9f:95:c7:99:d9:eb:ca:be:7a:92:d5: db:bf:40:72:bb:52:2e:2d:ee:ed:71:97:66:73:7e:e0:ee:03: 0d:b1:d3:50:5d:fe:b6:2b:6f:e2:bd:2f:3d:17:86:91:50:af: 38:83:1c:2a:68:9d:b5:70:4e:55:a9:92:e2:bd:94:4c:d9:3c: c5:5a:1d:c5:76:03:8d:70:ca:4c:0d:6d:a4:fd:58:ab:fd:38: b1:3b:45:3c:34:d9:21:25:e3:6c:09:34:36:32:57:84:46:9d: 07:54:68:4b:11:31:e7:70:fc:73:24:09:cf:3f:bf:1b:fe:fd: 67:e4:92:3c:54:95:52:08:69:ba:a2:38:dc:0e:85:42:5b:de: ee:f9:6b:d4:56:63:4d:fd:b4:1b:18:aa:7d:50:45:f9:84:48: aa:78:53:3a:f7:04:95:7f:f6:50:5e:14:dd:c7:27:42:ea:4d: 2b:ce:b6:b5:69:84:15:8b:e6:ff:80:32:7f:b7:54:bf:32:19: 7c:cb:fd:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0RR5HwdESVH3gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjOGU5Y2ItODhlZS00NTVlLWIwMTItMWIxYWJmY2E3 MmFiMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MTk0NGQ5OTMtZjRlOS00ZTkwLWIyOTQtZGVmZDFlNmEzNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib+nhWY6sMKoYN9vDvoySdR2BEpqBU75xkWz dGpQBzWj/j2PfBciJ4pMENecRpoGFkaSWJw0xGp9dwK9GoU4HZr4wCxtUr6gcX3K S5nc0Q7B6/MEEH79sBUUpf/X7bvGKw1oSec+Jg6g2XgKhytqYv+63bgZ5aZ5bz6G Ydwjg/i14N6Z9pIlR/P+rKQB45MgKImmwH+sB1fONSIN54cOYo0R5E3M35McqLAr 0r8yHSAUrMFD1QI+arQJONgjlQgK0IZqIX+EjrPFkvzog9C4b1YVhNINZqbwT6pq u7VHOb8ZiR2FQCxJAe1OAprizXd7O6CVZhjiVD9/qzitJ/lEKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeLGShqd1odfw6CbS3pz0D/sogzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4 ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFhYmZjYTcyYWIvZDllMWFlMjYtMjU3YS0z YTBiLWI0NmUtMDQ5YWEwMTRjYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjOGU5Y2ItODhlZS00NTVlLWIw MTItMWIxYWJmY2E3MmFiLzNiYzhlOWNiLTg4ZWUtNDU1ZS1iMDEyLTFiMWFiZmNh NzJhYi5jcmwwHwYDVR0jBBgwFoAUhK1pleXH9BRmIMjHaJa6x1IXDRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM4ZTljYi04OGVlLTQ1NWUtYjAxMi0xYjFh YmZjYTcyYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP4dGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfBhr35t+Fce3rvSFkQ+4hWZiA7xbXBX7Jd5jiDOAp8LbjFAbguku7V Jey2uv+IhL0Oh1qiz4AHRqxj1peflceZ2evKvnqS1du/QHK7Ui4t7u1xl2ZzfuDu Aw2x01Bd/rYrb+K9Lz0XhpFQrziDHCponbVwTlWpkuK9lEzZPMVaHcV2A41wykwN baT9WKv9OLE7RTw02SEl42wJNDYyV4RGnQdUaEsRMedw/HMkCc8/vxv+/WfkkjxU lVIIabqiONwOhUJb3u75a9RWY039tBsYqn1QRfmESKp4Uzr3BJV/9lBeFN3HJ0Lq TSvOtrVphBWL5v+AMn+3VL8yGXzL/cA= -----END CERTIFICATE-----Generated at Wed Aug 20 23:08:26 2025 by rpki-client