$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa File: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (raw, json) Hash identifier: bXoBZeo1rx/B+bbKvjIrj8QkUgDOPYt0iIJo9Jz2BZI= Subject key identifier: 22:C2:AF:0D:E6:C7:0A:C4:55:3D:D9:F9:26:AC:32:38:2B:05:55:7A Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584ABBE630011D05C673F1FCD420 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 16437 IP address blocks: 208.88.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:30:01:1d:05:c6:73:f1:fc:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=46895d06-675b-450d-ae7a-6b6325e7357f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:17:f7:3b:2d:26:6d:fc:bc:61:90:30:c5: 74:de:73:5a:51:1a:da:29:e9:a9:66:12:f4:32:a4: 88:52:ec:78:f2:f3:ba:4e:c4:60:b0:54:0b:ef:01: 1a:94:0e:62:2d:ba:35:cd:14:c9:f9:d1:7a:2d:a6: 66:41:b1:fc:92:03:71:bd:f5:60:21:21:e6:51:64: 21:f1:32:0c:00:62:4f:d5:6e:ca:e2:27:00:b5:c4: 44:4c:76:2c:7f:56:3c:e1:c0:5f:36:74:e2:b9:01: d1:e3:63:0c:b8:bf:ee:44:a1:0d:88:67:f3:59:22: c9:ea:a3:3d:7c:6b:e4:c9:bb:2d:fa:0f:c0:40:00: c5:a4:f0:df:26:26:68:37:38:15:b2:b6:51:35:c8: 0c:8e:4d:85:09:a3:b3:d5:d2:d4:9b:ba:09:d0:28: 59:2a:e9:ed:09:05:cc:4a:75:2f:73:02:31:10:b3: e2:f1:26:4a:5d:67:75:b6:41:bc:1f:20:a9:5f:12: d5:59:53:92:25:13:60:9e:9c:4d:02:a5:5b:ec:4c: 13:66:41:c5:e8:73:58:81:af:69:2f:06:83:d1:2c: a1:c0:52:76:8e:f6:32:c6:ff:7b:e8:36:4a:0a:c9: e5:9a:70:6b:9a:00:38:13:71:1a:f1:b5:34:04:41: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C2:AF:0D:E6:C7:0A:C4:55:3D:D9:F9:26:AC:32:38:2B:05:55:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cd:dd:92:96:a4:b9:7d:44:f6:c1:a1:b0:ea:da:b3:9b:86: 5e:41:b1:2d:c3:48:b7:04:a0:4b:0f:27:a2:3c:91:5e:ce:6a: 06:f7:84:21:5d:84:e3:82:da:08:6d:41:f6:05:66:d2:19:79: 5a:c8:c5:d3:64:24:b3:55:0a:9a:3c:0a:21:77:d6:23:c5:97: 00:b5:bf:c6:4a:b6:a9:db:99:f7:d6:ef:58:bb:94:16:9d:e9: fe:4b:dc:54:9e:cc:69:22:7c:68:4e:2b:de:f3:86:8f:a0:9f: f2:05:90:59:13:b2:d1:4a:1b:7a:99:86:d5:01:29:94:aa:1f: f1:45:41:52:98:1a:ad:9d:60:ec:37:0a:2f:23:57:6c:a8:68: de:1c:c0:2f:8a:f5:2c:91:18:94:67:90:7f:da:aa:d6:47:39: 2d:ef:1e:43:cc:40:43:4c:6b:ab:ff:9d:d0:f1:51:a2:b4:82: ef:95:d4:cd:9a:ac:b5:40:03:93:53:49:02:88:5b:a6:bf:ba: 17:84:e7:5a:48:96:20:4a:86:29:e8:a0:43:bc:54:90:49:90: 54:e2:59:48:9d:02:70:e3:96:3c:68:c9:97:a7:56:71:35:c4: 38:07:08:5e:cd:bd:fe:3c:45:a4:05:32:e7:49:97:40:a0:f8: b1:43:e2:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75jABHQXGc/H81CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk NDY4OTVkMDYtNjc1Yi00NTBkLWFlN2EtNmI2MzI1ZTczNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg8X9zstJm38vGGQMMV03nNaURraKempZhL0 MqSIUux48vO6TsRgsFQL7wEalA5iLbo1zRTJ+dF6LaZmQbH8kgNxvfVgISHmUWQh 8TIMAGJP1W7K4icAtcRETHYsf1Y84cBfNnTiuQHR42MMuL/uRKENiGfzWSLJ6qM9 fGvkybst+g/AQADFpPDfJiZoNzgVsrZRNcgMjk2FCaOz1dLUm7oJ0ChZKuntCQXM SnUvcwIxELPi8SZKXWd1tkG8HyCpXxLVWVOSJRNgnpxNAqVb7EwTZkHF6HNYga9p LwaD0SyhwFJ2jvYyxv976DZKCsnlmnBrmgA4E3Ea8bU0BEG/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLCrw3mxwrEVT3Z+SasMjgrBVV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNGE3ZTFkYmQtNDcwNC0z NDJiLWI3NDEtNTZiMGM4ZTc1OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbN3ZKWpLl9RPbBobDq2rObhl5BsS3DSLcEoEsPJ6I8kV7Oagb3hCFd hOOC2ghtQfYFZtIZeVrIxdNkJLNVCpo8CiF31iPFlwC1v8ZKtqnbmffW71i7lBad 6f5L3FSezGkifGhOK97zho+gn/IFkFkTstFKG3qZhtUBKZSqH/FFQVKYGq2dYOw3 Ci8jV2yoaN4cwC+K9SyRGJRnkH/aqtZHOS3vHkPMQENMa6v/ndDxUaK0gu+V1M2a rLVAA5NTSQKIW6a/uheE51pIliBKhinooEO8VJBJkFTiWUidAnDjljxoyZenVnE1 xDgHCF7Nvf48RaQFMudJl0Cg+LFD4iw= -----END CERTIFICATE-----Generated at Sat Aug 9 05:39:51 2025 by rpki-client