$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa File: 31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa (raw, json) Hash identifier: PO8U0vytiGqy5d0umr+EoFuMGk4OT9KtwyVgwttUB50= Subject key identifier: EC:83:7F:13:CA:BD:94:6C:B1:57:77:B6:0C:A7:D3:06:2F:60:36:1E Certificate issuer: /CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55 Certificate serial: 010D0C9F4328584AD93652F957BDC3675F25CD00 Authority key identifier: 3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 204.17.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:52:f9:57:bd:c3:67:5f:25:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=4c5275b2-1931-4619-8259-80eeb94aa5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:14:33:ba:58:c7:59:b1:bd:dd:82:8c:6e: 57:3a:8c:6f:67:fa:af:51:ea:08:a2:4a:9f:ab:ee: 13:89:33:d2:7c:8d:c4:87:d1:14:37:4c:3c:d1:c6: c9:4d:34:89:4a:9b:ee:5e:84:ba:2a:80:72:81:a2: 1e:ec:b8:02:9f:6c:dc:a9:c7:0d:22:0a:6d:1a:41: 34:a1:43:35:9a:ef:c3:1e:c8:80:2d:5c:11:94:49: 19:5a:62:03:15:d3:91:b0:d1:34:4e:68:ed:09:8d: 4f:7d:6c:dc:d2:61:29:68:31:b4:a1:16:18:db:aa: 66:b5:6a:72:4d:f5:88:b9:23:10:0c:53:f8:35:a2: 13:88:70:85:a1:9a:d7:a9:e2:b1:e6:3b:e1:25:26: b7:a5:be:59:54:02:96:4a:a2:80:69:5e:aa:9b:f3: 4d:7e:53:e1:fd:8d:e3:5b:b1:80:23:79:ff:e9:6d: 21:f8:e3:53:e1:a3:85:9b:72:46:5d:6d:2c:24:54: 47:64:70:92:07:a5:87:82:53:51:29:35:b2:ee:97: 04:6b:95:d1:f6:6c:71:78:0a:d0:dd:ca:57:4a:fb: f8:1a:4f:0f:3d:ba:0b:30:c2:d9:cd:28:73:2f:64: 17:e7:c1:69:1b:b5:a8:7d:12:a9:a3:e9:56:f0:6d: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:83:7F:13:CA:BD:94:6C:B1:57:77:B6:0C:A7:D3:06:2F:60:36:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/31d025fd-7ea7-3f5f-a2ab-8ac37134b28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl X509v3 Authority Key Identifier: keyid:3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer sbgp-ipAddrBlock: critical IPv4: 204.17.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8e:75:5d:1f:29:75:54:60:4f:2b:0e:58:55:e8:9b:6c:28: db:e2:49:b4:02:a9:f4:43:f6:4f:88:8c:da:ee:9a:f7:8d:7f: 65:72:bf:60:af:62:55:c1:58:0b:4b:38:67:2b:90:20:6b:7c: 7e:da:d7:b5:50:94:de:c3:bc:3b:5f:81:ef:58:d9:f3:29:52: 17:9e:47:87:eb:88:74:61:b6:cf:51:c0:53:ee:47:6a:b0:2b: bf:b6:37:5f:0f:87:4a:51:14:04:cd:7d:27:c7:16:7e:ce:7b: d2:36:15:0c:5a:c5:0f:e8:de:85:14:d7:c8:c9:e1:42:c0:81: 00:ee:c5:88:35:38:8c:af:ec:74:81:aa:35:d8:d7:c4:da:54: c3:5e:3a:57:52:cb:56:c8:57:d9:7a:aa:ee:3f:f7:31:88:c3: db:93:6f:c7:a3:88:fb:4f:c5:12:45:cb:4f:b9:c2:91:22:e7: 11:ad:13:2f:ef:0d:59:f1:60:b0:46:98:25:42:65:67:d3:7f: c2:b4:3a:c6:98:61:09:a2:70:16:fb:70:01:37:fa:fe:64:3d: 96:2f:65:13:e4:c1:71:21:83:ed:ea:dc:2c:ea:84:8d:1a:29: 15:ec:c0:ba:11:03:1e:46:9a:d6:03:b0:14:b0:93:5c:be:75: a3:dc:8b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlL5V73DZ18lzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4MTM5YmEtMDZhNy00YjMxLWJhZjctZDQwYWY3MGZk YzU1MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk NGM1Mjc1YjItMTkzMS00NjE5LTgyNTktODBlZWI5NGFhNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/IUM7pYx1mxvd2CjG5XOoxvZ/qvUeoIokqf q+4TiTPSfI3Eh9EUN0w80cbJTTSJSpvuXoS6KoBygaIe7LgCn2zcqccNIgptGkE0 oUM1mu/DHsiALVwRlEkZWmIDFdORsNE0TmjtCY1PfWzc0mEpaDG0oRYY26pmtWpy TfWIuSMQDFP4NaITiHCFoZrXqeKx5jvhJSa3pb5ZVAKWSqKAaV6qm/NNflPh/Y3j W7GAI3n/6W0h+ONT4aOFm3JGXW0sJFRHZHCSB6WHglNRKTWy7pcEa5XR9mxxeArQ 3cpXSvv4Gk8PPboLMMLZzShzL2QX58FpG7WofRKpo+lW8G1p/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyDfxPKvZRssVd3tgyn0wYvYDYeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjgx MzliYS0wNmE3LTRiMzEtYmFmNy1kNDBhZjcwZmRjNTUvMzFkMDI1ZmQtN2VhNy0z ZjVmLWEyYWItOGFjMzcxMzRiMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4MTM5YmEtMDZhNy00YjMxLWJh ZjctZDQwYWY3MGZkYzU1LzNmODEzOWJhLTA2YTctNGIzMS1iYWY3LWQ0MGFmNzBm ZGM1NS5jcmwwHwYDVR0jBBgwFoAUPZmV4/+hejRvYSI8UPMQM9oeEUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjgxMzliYS0wNmE3LTRiMzEtYmFmNy1kNDBh ZjcwZmRjNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzBEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOOdV0fKXVUYE8rDlhV6JtsKNviSbQCqfRD9k+IjNrumveNf2Vyv2Cv YlXBWAtLOGcrkCBrfH7a17VQlN7DvDtfge9Y2fMpUheeR4friHRhts9RwFPuR2qw K7+2N18Ph0pRFATNfSfHFn7Oe9I2FQxaxQ/o3oUU18jJ4ULAgQDuxYg1OIyv7HSB qjXY18TaVMNeOldSy1bIV9l6qu4/9zGIw9uTb8ejiPtPxRJFy0+5wpEi5xGtEy/v DVnxYLBGmCVCZWfTf8K0OsaYYQmicBb7cAE3+v5kPZYvZRPkwXEhg+3q3CzqhI0a KRXswLoRAx5GmtYDsBSwk1y+daPci3Q= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:17 2025 by rpki-client