$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa File: 20508438-3f62-3e58-a0ad-1794d09922eb.roa (raw, json) Hash identifier: pUkx+srjKNUWnYl4lwZ+CoflWX4ORRQK7M3uv8v7Uc4= Subject key identifier: 02:34:CD:AE:AB:F7:66:82:43:9B:40:71:52:84:E7:81:DB:97:DD:D9 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE5C673945487AB4EDCCE4800 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 13576 IP address blocks: 208.53.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:73:94:54:87:ab:4e:dc:ce:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=01cd2218-8806-44b5-9848-ffdeadb47aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:32:2c:71:75:ba:97:65:15:e9:4d:ad:ba: a6:16:7c:48:8d:f3:92:66:7c:87:d8:c9:26:2a:ee: dc:9a:99:96:f4:35:aa:49:a5:85:e9:3d:81:d9:1b: 2c:d3:54:a8:ac:18:37:6c:8e:75:a3:7f:52:4d:91: 4e:5b:dc:05:65:c7:ff:4b:4f:c7:51:46:fb:4c:92: c4:d8:ab:7f:ea:ae:61:4a:a3:6d:bf:bf:b5:7e:b2: a6:96:cf:78:fe:e3:f4:e2:f7:82:ec:7e:1d:9f:06: 27:b7:e6:16:75:5e:98:98:83:27:04:20:e9:a7:c8: cd:3b:b6:f0:1d:e2:9c:e4:d2:89:ab:ff:9f:d8:d2: 21:b9:e3:3b:44:6e:39:34:73:ab:b3:e1:46:ee:19: 54:d8:49:2a:2e:42:45:fa:39:81:43:23:5e:27:b6: 4f:d8:30:d8:ba:a5:ca:bd:30:d3:05:81:9d:cd:c4: ed:5c:79:59:78:ec:25:0e:5d:03:c6:02:1d:86:68: af:ed:4b:cc:67:d8:8b:e8:1f:e4:62:c5:39:4c:57: 7c:58:0b:f3:09:24:40:b6:ae:39:f4:a5:63:17:31: 55:bf:a8:f4:97:a4:00:80:5e:f0:9f:46:33:60:e7: 25:da:29:63:8c:78:42:a9:5d:7a:e3:b9:0d:fd:86: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:34:CD:AE:AB:F7:66:82:43:9B:40:71:52:84:E7:81:DB:97:DD:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/20508438-3f62-3e58-a0ad-1794d09922eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:81:a5:cd:d0:38:8a:1c:69:db:25:9e:7b:dd:39:c5:22:e0: ec:33:e6:5b:d0:e5:bf:75:e1:5e:4a:d5:c0:6d:ab:18:38:f6: 7e:fd:b6:a8:ee:26:61:d9:b0:b9:d5:da:40:98:41:1a:33:ea: 69:e1:bb:b8:3e:dd:62:a9:89:59:bc:17:e9:84:a8:18:2c:89: 0f:6f:93:bd:05:89:ae:1b:aa:a9:b3:07:ac:1d:e1:03:c5:c4: 32:b0:67:dd:f1:be:df:d5:2f:7f:04:c8:c2:b8:fa:5d:33:e6: 2e:0e:dd:fd:fa:fb:b4:a8:01:e6:ee:b3:83:14:1d:43:21:78: e5:9f:d9:83:fe:75:dc:b6:46:15:4c:2f:06:5f:02:ee:39:33: 14:b6:53:fb:de:63:04:63:95:59:4d:67:42:6d:47:13:b0:87: 7c:3b:ec:cc:ff:3e:26:d2:dc:87:19:f7:89:29:5a:92:3c:bd: 1e:07:b1:01:3a:ee:96:2c:05:93:20:bd:94:14:bc:14:1c:61: 6c:92:1e:f0:13:fd:06:d0:bc:d1:5e:ea:88:eb:9d:91:86:a3: e3:bb:b5:06:8c:32:cd:3f:3d:46:d4:16:a3:86:14:32:24:02: 91:32:39:ef:f0:07:5e:e3:21:6d:d0:45:71:4c:d2:8c:4c:99: e0:1d:a4:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnOUVIerTtzOSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk MDFjZDIyMTgtODgwNi00NGI1LTk4NDgtZmZkZWFkYjQ3YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUYyLHF1updlFelNrbqmFnxIjfOSZnyH2Mkm Ku7cmpmW9DWqSaWF6T2B2Rss01SorBg3bI51o39STZFOW9wFZcf/S0/HUUb7TJLE 2Kt/6q5hSqNtv7+1frKmls94/uP04veC7H4dnwYnt+YWdV6YmIMnBCDpp8jNO7bw HeKc5NKJq/+f2NIhueM7RG45NHOrs+FG7hlU2EkqLkJF+jmBQyNeJ7ZP2DDYuqXK vTDTBYGdzcTtXHlZeOwlDl0DxgIdhmiv7UvMZ9iL6B/kYsU5TFd8WAvzCSRAtq45 9KVjFzFVv6j0l6QAgF7wn0YzYOcl2iljjHhCqV1647kN/Yab2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI0za6r92aCQ5tAcVKE54Hbl93ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMjA1MDg0MzgtM2Y2Mi0z ZTU4LWEwYWQtMTc5NGQwOTkyMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOBpc3QOIocadslnnvdOcUi4Owz5lvQ5b914V5K1cBtqxg49n79tqju JmHZsLnV2kCYQRoz6mnhu7g+3WKpiVm8F+mEqBgsiQ9vk70Fia4bqqmzB6wd4QPF xDKwZ93xvt/VL38EyMK4+l0z5i4O3f36+7SoAebus4MUHUMheOWf2YP+ddy2RhVM LwZfAu45MxS2U/veYwRjlVlNZ0JtRxOwh3w77Mz/PibS3IcZ94kpWpI8vR4HsQE6 7pYsBZMgvZQUvBQcYWySHvAT/QbQvNFe6ojrnZGGo+O7tQaMMs0/PUbUFqOGFDIk ApEyOe/wB17jIW3QRXFM0oxMmeAdpCQ= -----END CERTIFICATE-----Generated at Thu Aug 21 00:53:44 2025 by rpki-client