$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa File: a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa (raw, json) Hash identifier: TWzWgtQWk1VXGVuPruXKPzzAjz60kMvuEg9cD+kkc1k= Subject key identifier: 9B:75:26:5B:24:84:41:17:06:D2:B7:9C:B2:65:14:67:00:C4:88:B5 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584B0746C536EF4BE8C2FD4F9180 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 16509 IP address blocks: 204.155.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c5:36:ef:4b:e8:c2:fd:4f:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=1d1cc351-e010-45b0-89c0-8df18e501df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:30:30:34:7a:7a:27:fe:19:63:3c:e3:81: e2:b1:21:66:9f:7c:a5:cb:7b:ac:f5:fd:db:d8:22: 01:07:9b:e7:c6:cf:8d:07:be:f7:f4:e0:14:03:98: f7:32:f7:2a:0f:43:87:c8:3e:93:d3:65:02:7d:51: f4:5e:c5:5b:e9:30:96:cb:b4:d1:67:f0:c5:29:7a: 83:76:62:1c:cc:70:18:30:58:04:ab:1a:6c:a4:80: 89:70:d7:24:3a:f5:91:69:72:9d:c2:ac:fe:9f:22: cb:d0:9d:99:72:a4:b9:4e:77:2a:3b:85:b7:a2:14: cd:38:87:e9:75:c3:8e:6c:08:b9:8b:8c:cd:2f:da: a5:b4:0b:7b:61:61:24:08:5a:aa:f6:94:d1:f8:8d: 0a:1e:2d:97:af:49:89:de:59:bb:be:e3:04:cd:ca: 09:27:b0:0f:3c:14:61:29:71:63:b1:8b:a0:a8:3f: 14:e8:c3:6b:d5:ee:a0:ce:0c:b5:47:df:c2:b3:e2: 9d:2d:6b:f1:01:20:44:43:d2:9c:e0:59:f6:38:a8: 13:ff:7b:ed:da:04:0e:ae:e0:7b:4f:34:49:42:5b: 1a:bf:74:d7:82:d5:c7:9a:ec:07:86:98:ea:8c:05: de:11:9e:1c:cf:23:c2:66:2d:df:46:35:b4:9c:95: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:75:26:5B:24:84:41:17:06:D2:B7:9C:B2:65:14:67:00:C4:88:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:4c:e0:61:9e:98:84:5b:70:f9:6a:b6:4b:fc:de:79:3d:07: f4:d1:e5:3a:4d:c2:cf:e9:3d:7e:ee:2d:a6:14:9e:fa:62:24: 1f:0d:cb:59:6e:29:22:1c:89:cb:7a:f2:e4:ae:26:6b:0c:03: 08:6f:03:e3:99:bd:59:41:c2:89:c4:ef:39:cc:f0:03:40:24: d1:47:3f:9d:3b:87:3f:14:21:11:8c:97:58:e7:80:91:56:95: ec:2e:02:70:a2:25:df:d0:37:3e:ba:1a:43:48:89:98:24:ec: c4:c6:85:6d:2a:bc:42:d3:80:cd:bd:2e:9d:6d:42:b2:40:78: 5b:0f:ef:36:1c:13:90:9d:bc:ce:2a:4a:84:e7:6c:d6:2b:eb: dd:47:60:22:71:88:5f:16:72:ac:a7:7b:a6:aa:60:c2:7f:b4: 75:86:1e:fa:7e:a3:ae:05:06:9b:97:db:69:f5:d9:0c:cf:bb: 91:38:0e:a2:e8:14:7a:26:36:f6:94:8b:c2:6a:8d:05:25:8e: a9:d8:72:20:bb:23:ca:cb:ee:8e:2d:86:98:b5:ae:65:03:bf: 2f:53:97:ce:e2:4b:7e:ae:8d:e5:b2:e2:e8:4c:2d:3b:b0:79: 88:f0:1f:a7:1b:18:87:7d:fb:ae:24:50:22:40:2b:13:34:49: e2:26:a2:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsU270vowv1PkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MWQxY2MzNTEtZTAxMC00NWIwLTg5YzAtOGRmMThlNTAxZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqEwMDR6eif+GWM844HisSFmn3yly3us9f3b 2CIBB5vnxs+NB7739OAUA5j3MvcqD0OHyD6T02UCfVH0XsVb6TCWy7TRZ/DFKXqD dmIczHAYMFgEqxpspICJcNckOvWRaXKdwqz+nyLL0J2ZcqS5TncqO4W3ohTNOIfp dcOObAi5i4zNL9qltAt7YWEkCFqq9pTR+I0KHi2Xr0mJ3lm7vuMEzcoJJ7APPBRh KXFjsYugqD8U6MNr1e6gzgy1R9/Cs+KdLWvxASBEQ9Kc4Fn2OKgT/3vt2gQOruB7 TzRJQlsav3TXgtXHmuwHhpjqjAXeEZ4czyPCZi3fRjW0nJWBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJt1JlskhEEXBtK3nLJlFGcAxIi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvYTNkYWIzYTktMWMzMy0z N2FjLTliMzctMWEyMTQzODllNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5M4GGemIRbcPlqtkv83nk9B/TR5TpNws/pPX7uLaYUnvpiJB8Ny1lu KSIcict68uSuJmsMAwhvA+OZvVlBwonE7znM8ANAJNFHP507hz8UIRGMl1jngJFW lewuAnCiJd/QNz66GkNIiZgk7MTGhW0qvELTgM29Lp1tQrJAeFsP7zYcE5CdvM4q SoTnbNYr691HYCJxiF8Wcqyne6aqYMJ/tHWGHvp+o64FBpuX22n12QzPu5E4DqLo FHomNvaUi8JqjQUljqnYciC7I8rL7o4thpi1rmUDvy9Tl87iS36ujeWy4uhMLTuw eYjwH6cbGId9+64kUCJAKxM0SeImohs= -----END CERTIFICATE-----Generated at Tue Sep 9 18:31:04 2025 by rpki-client