$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/02b38f0e-76e2-3423-ba4d-236a425975b9.roa File: 02b38f0e-76e2-3423-ba4d-236a425975b9.roa (raw, json) Hash identifier: 8QKA/+tfUCPBo0AEeiFhyQCgQFsSbpOYyqpkkh4Yc64= Subject key identifier: D6:74:F1:3C:19:B2:B3:96:61:F9:A4:C1:A8:CB:89:7B:96:2F:AC:E3 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584B12C619EE62BA3A111BD04E80 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/02b38f0e-76e2-3423-ba4d-236a425975b9.roa Signing time: Wed 03 Sep 2025 15:51:24 +0000 ROA not before: Wed 03 Sep 2025 15:51:24 +0000 ROA not after: Tue 02 Dec 2025 16:51:24 +0000 asID: 5650 IP address blocks: 216.75.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:c6:19:ee:62:ba:3a:11:1b:d0:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Sep 3 15:51:24 2025 GMT Not After : Dec 2 16:51:24 2025 GMT Subject: CN=5a0ad691-50c0-4d6a-86d9-6c279cda6b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:dd:96:c7:99:c2:f3:1a:d2:d9:33:db:ec: 1c:ae:0e:5b:69:df:f8:5a:df:30:a9:9a:85:74:a6: bd:db:70:70:1a:7b:37:b5:35:97:6d:46:74:7d:68: 93:c3:d8:1c:e3:38:53:01:20:ad:e3:7d:1e:fa:f8: 48:76:2f:c8:c6:00:3c:45:bd:94:e2:46:1d:88:a4: 1a:23:2b:65:11:5d:69:8d:2f:07:5d:7e:a2:e7:b5: ce:88:7d:fa:af:22:56:c6:51:d2:a7:5e:6b:4d:48: 66:58:92:a9:b9:c8:76:76:d8:00:02:dc:c0:21:b5: d5:a7:d5:25:5f:ce:2f:f9:2d:6e:df:f1:95:4c:d0: e4:50:e8:80:52:bb:86:06:75:16:ec:46:13:a8:87: f5:b6:4e:21:36:99:6f:b6:8d:ff:2f:4e:0b:03:29: 17:0f:d6:6e:0f:00:2b:66:2f:5e:cc:c8:7b:7a:4c: 3b:02:b7:3b:47:4d:39:d7:fe:19:c2:28:3c:b8:0b: a7:4c:02:6a:db:bf:88:e2:b2:81:45:30:e8:df:09: 44:c4:dd:37:66:4f:5f:8f:2c:75:78:aa:ec:d8:de: c8:79:39:b4:a3:ad:6a:93:47:56:f4:0b:dd:d2:a0: 2d:42:8c:2d:b8:e0:13:dc:8e:f0:42:96:c6:94:99: 3b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:74:F1:3C:19:B2:B3:96:61:F9:A4:C1:A8:CB:89:7B:96:2F:AC:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/02b38f0e-76e2-3423-ba4d-236a425975b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:08:20:6b:d3:38:57:f8:92:3c:49:24:5a:5d:0f:c9:c3:83: 9c:0b:c7:9e:e8:70:26:ad:c5:3f:35:b1:1b:a3:9b:b5:f9:fb: c1:4e:10:0b:92:a3:ee:4e:9a:00:6f:fd:c9:69:3a:5d:e1:31: e8:dd:21:54:f4:5c:b2:4f:dd:e1:de:72:5c:47:91:e6:1f:de: 42:67:31:26:36:22:0c:15:7c:7a:2e:fe:aa:7f:16:8b:ef:1f: dc:c8:5e:bd:3e:c0:9f:ea:1c:c2:61:28:20:d9:61:4a:a3:45: 4f:00:0c:2b:c2:1f:b2:2b:70:4b:fa:9a:af:e3:c7:81:bd:28: c9:95:76:a3:4b:28:6d:73:62:e4:7d:6b:a4:81:15:be:1f:c4: bb:25:3a:fe:b3:a5:25:81:4d:21:1f:c1:8e:20:df:43:84:f2: 5e:7c:49:ab:4f:51:f5:ac:0e:5e:12:5d:af:99:8e:c0:5f:09: 77:22:e5:2d:53:a9:e9:35:c8:fc:8d:84:ba:d1:3a:e6:3e:45: 2d:6d:02:2a:60:22:5f:87:59:37:a3:74:2d:af:95:d1:4c:13: e3:2e:6f:79:bd:8f:c3:56:3d:7e:1a:8d:a8:85:54:44:28:10: 24:de:22:63:88:96:22:39:0a:73:f1:b1:75:2c:6d:36:84:55: 09:0e:8e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsSxhnuYro6ERvQToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MDkwMzE1NTEyNFoXDTI1MTIwMjE2NTEyNFowLzEtMCsGA1UEAxMk NWEwYWQ2OTEtNTBjMC00ZDZhLTg2ZDktNmMyNzljZGE2YjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wvdlseZwvMa0tkz2+wcrg5bad/4Wt8wqZqF dKa923BwGns3tTWXbUZ0fWiTw9gc4zhTASCt430e+vhIdi/IxgA8Rb2U4kYdiKQa IytlEV1pjS8HXX6i57XOiH36ryJWxlHSp15rTUhmWJKpuch2dtgAAtzAIbXVp9Ul X84v+S1u3/GVTNDkUOiAUruGBnUW7EYTqIf1tk4hNplvto3/L04LAykXD9ZuDwAr Zi9ezMh7ekw7Arc7R0051/4Zwig8uAunTAJq27+I4rKBRTDo3wlExN03Zk9fjyx1 eKrs2N7IeTm0o61qk0dW9Avd0qAtQowtuOAT3I7wQpbGlJk7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ08TwZsrOWYfmkwajLiXuWL6zjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMDJiMzhmMGUtNzZlMi0z NDIzLWJhNGQtMjM2YTQyNTk3NWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2EuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEIIGvTOFf4kjxJJFpdD8nDg5wLx57ocCatxT81sRujm7X5+8FOEAuS o+5OmgBv/clpOl3hMejdIVT0XLJP3eHeclxHkeYf3kJnMSY2IgwVfHou/qp/Fovv H9zIXr0+wJ/qHMJhKCDZYUqjRU8ADCvCH7IrcEv6mq/jx4G9KMmVdqNLKG1zYuR9 a6SBFb4fxLslOv6zpSWBTSEfwY4g30OE8l58SatPUfWsDl4SXa+ZjsBfCXci5S1T qek1yPyNhLrROuY+RS1tAipgIl+HWTejdC2vldFME+Mub3m9j8NWPX4ajaiFVEQo ECTeImOIliI5CnPxsXUsbTaEVQkOjrY= -----END CERTIFICATE-----Generated at Sat Sep 6 18:59:42 2025 by rpki-client