$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa File: 3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa (raw, json) Hash identifier: nBfdk5FwAxBBq2B3WuR687zGF6OEiydXcMZTH6Z5698= Subject key identifier: A1:A8:35:5E:74:AA:70:F2:6D:F2:2E:11:6C:FD:2F:4E:65:39:8D:A4 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B0CDC23B889AEBB2D5729D980 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 11232 IP address blocks: 137.22.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:23:b8:89:ae:bb:2d:57:29:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=995e1e75-1b06-4455-b4fd-1b80dcacea3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:70:32:14:32:bb:1f:83:57:2e:35:03:a3: 73:36:d1:ce:3e:b4:e3:60:0f:fe:3d:d1:29:ac:e9: 77:83:90:e3:bd:b8:e5:9a:34:e6:56:1c:a9:e3:49: b6:33:fa:37:b7:1c:80:6c:d4:13:13:6b:8b:0b:9e: 18:ad:90:11:fa:40:ec:5c:5e:72:94:7e:08:86:02: 0d:06:c0:4c:53:d0:94:f7:6b:e1:6a:35:9e:ee:55: a5:7c:7c:c0:34:3c:12:c2:89:2f:c7:7d:63:70:5f: 23:4d:01:a1:46:cd:02:c6:59:26:fd:ea:f5:bc:90: b3:dc:c9:15:1a:37:06:fa:0d:1a:59:b0:a5:98:fb: f7:46:85:7f:54:f0:16:cc:e2:1a:9c:26:77:c8:47: 26:f0:02:0c:5c:25:c3:51:08:1a:e5:30:54:37:3e: 96:b7:8d:ee:69:31:00:aa:ca:e4:4c:87:b3:98:de: 23:c5:86:5c:8f:5d:c3:43:8c:b4:eb:ea:b1:70:88: d0:e5:63:87:58:4e:44:84:c5:ae:06:2f:74:92:0a: 90:09:f0:bb:31:4a:ec:00:46:8a:b0:54:1c:ee:ff: e4:d9:c1:cd:c4:77:2b:3c:8f:21:2d:90:99:a2:a4: 3e:62:8d:5f:a3:e8:fd:8a:31:08:71:7c:92:5d:33: 22:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A8:35:5E:74:AA:70:F2:6D:F2:2E:11:6C:FD:2F:4E:65:39:8D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 137.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:85:f6:fe:16:6d:80:fa:ed:32:34:fb:83:d3:8c:37:96:64: 6f:4a:55:77:45:ed:51:e6:31:c2:e7:4c:c2:fa:ad:c3:7c:20: 9b:37:53:36:01:36:f0:0d:44:09:f0:53:08:41:93:63:70:eb: 7f:f9:08:24:5c:dc:b0:c7:00:4f:ac:65:f8:34:07:5f:7d:94: de:83:3a:4f:d3:08:7a:41:2c:91:e4:e4:5d:31:de:b0:59:28: e2:f4:3f:ca:f7:78:68:d0:d0:59:12:28:92:58:45:02:62:02: cd:df:32:0a:7d:d3:c5:a9:9d:be:09:43:c2:99:ef:72:d8:0b: d0:b7:c2:e4:53:3b:5e:21:34:60:03:3d:91:18:e5:54:6e:86: ef:e4:83:be:73:df:6b:24:71:cc:71:b6:37:cf:89:12:d6:52: 0c:23:55:41:5d:39:cb:bc:6c:ef:73:af:6b:c0:47:f5:46:c1: 34:d8:20:99:62:c4:ab:36:05:97:30:4b:66:e2:42:96:ec:2e: d9:b1:bd:09:d9:79:61:e9:b6:d5:7c:34:ff:ec:14:32:c4:71: 02:f6:33:18:2f:39:5f:6a:95:6a:b2:da:41:60:c9:1a:7e:a4: 1c:3c:fa:47:2b:f2:0a:d0:66:df:cb:1f:39:f0:0c:07:6d:98: 7d:54:f9:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CO4ia67LVcp2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OTk1ZTFlNzUtMWIwNi00NDU1LWI0ZmQtMWI4MGRjYWNlYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM9wMhQyux+DVy41A6NzNtHOPrTjYA/+PdEp rOl3g5DjvbjlmjTmVhyp40m2M/o3txyAbNQTE2uLC54YrZAR+kDsXF5ylH4IhgIN BsBMU9CU92vhajWe7lWlfHzANDwSwokvx31jcF8jTQGhRs0Cxlkm/er1vJCz3MkV GjcG+g0aWbClmPv3RoV/VPAWzOIanCZ3yEcm8AIMXCXDUQga5TBUNz6Wt43uaTEA qsrkTIezmN4jxYZcj13DQ4y06+qxcIjQ5WOHWE5EhMWuBi90kgqQCfC7MUrsAEaK sFQc7v/k2cHNxHcrPI8hLZCZoqQ+Yo1fo+j9ijEIcXySXTMiMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGoNV50qnDybfIuEWz9L05lOY2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvM2ZmZTgzZjctY2QyNC0z NDQ2LThjNTMtMmJmZjhkOGRlOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiRYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImF9v4WbYD67TI0+4PTjDeWZG9KVXdF7VHmMcLnTML6rcN8IJs3UzYB NvANRAnwUwhBk2Nw63/5CCRc3LDHAE+sZfg0B199lN6DOk/TCHpBLJHk5F0x3rBZ KOL0P8r3eGjQ0FkSKJJYRQJiAs3fMgp908Wpnb4JQ8KZ73LYC9C3wuRTO14hNGAD PZEY5VRuhu/kg75z32skccxxtjfPiRLWUgwjVUFdOcu8bO9zr2vAR/VGwTTYIJli xKs2BZcwS2biQpbsLtmxvQnZeWHpttV8NP/sFDLEcQL2MxgvOV9qlWqy2kFgyRp+ pBw8+kcr8grQZt/LHznwDAdtmH1U+dQ= -----END CERTIFICATE-----Generated at Sat Sep 20 02:29:03 2025 by rpki-client