$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa File: 8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa (raw, json) Hash identifier: 2WUGLkuuvRpBOJPy46YI/r9TSPhzy+xeYjdhkMTjZsk= Subject key identifier: 66:8D:88:14:E7:DA:3B:21:1F:3F:E7:FE:6E:82:F1:8C:8D:64:E2:60 Certificate issuer: /CN=5dc12714-5247-41c5-b244-d0edceb32982 Certificate serial: 010D0C9F4328584A86DB774311C0AB369CFAF600 Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 22856 IP address blocks: 209.237.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:77:43:11:c0:ab:36:9c:fa:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=52548ecb-f404-4755-93f6-5b63bbb69083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:f0:b8:4a:f3:07:61:3a:b2:f7:94:99:80: ba:0a:bb:4d:66:84:92:ed:a9:4a:0c:46:d4:bc:5f: e0:09:c5:ed:c3:ff:1f:00:0a:13:b5:7d:11:5f:6f: 01:64:b8:b0:98:6a:78:6e:f0:ba:d2:18:5f:9a:ba: 4d:ad:58:a1:bf:f1:84:b0:6b:91:69:44:9f:fb:a3: f8:d5:d1:f6:8f:9f:5a:c9:ef:eb:d4:22:48:e3:42: db:51:6c:75:e4:7d:2a:f4:9b:13:86:1a:a2:32:6a: 63:be:a2:f7:87:f6:2d:76:2a:86:f5:8c:8c:41:22: ba:d7:c0:e1:4e:4d:ab:44:b9:e0:d9:c0:4d:c1:e4: ce:06:d1:a0:91:74:a3:df:7d:d4:f1:03:46:fe:12: f7:83:4c:9b:bc:40:88:7d:81:b4:ad:4e:d6:f6:6f: ec:ff:a9:3b:33:ae:2f:20:f5:bc:2b:44:da:e2:e3: 6f:45:79:f7:2a:2d:8a:7a:ec:61:ab:24:a1:8f:17: 20:9f:cf:bc:39:c1:4b:c6:79:41:ae:d4:0d:3a:d7: 9f:05:97:4c:47:b4:f9:16:d2:f7:fa:49:91:62:16: ca:ac:0d:9c:66:fb:23:ea:fa:18:cb:b5:ed:7e:17: 12:50:b3:90:a9:47:3c:8f:4b:49:45:a0:dc:18:82: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8D:88:14:E7:DA:3B:21:1F:3F:E7:FE:6E:82:F1:8C:8D:64:E2:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl X509v3 Authority Key Identifier: keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer sbgp-ipAddrBlock: critical IPv4: 209.237.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7e:36:99:36:f5:a6:33:1a:f7:03:5d:6f:c2:51:22:01:03: 58:d9:ff:9c:2a:89:44:b4:a4:42:48:5e:5a:8e:0e:11:7f:31: cd:2e:ca:3a:3d:22:05:7f:43:67:84:ad:e3:df:8d:f9:a2:e8: 61:3d:2d:2a:06:9c:82:5e:f0:ad:e8:af:aa:66:43:5a:18:4c: 53:4a:e2:5e:3b:e7:61:dc:e6:27:a5:4f:83:f9:7b:f0:44:e2: d6:af:3d:ba:57:70:9f:f5:8f:38:2f:5c:ec:77:21:13:1f:40: c1:1a:19:59:1c:ca:80:b2:a4:5f:d9:22:57:7a:bd:d7:42:8a: b4:ee:e6:a4:1c:70:a6:53:20:88:29:80:b7:7c:d6:6d:b9:09: 1d:d8:ee:bc:32:0d:8e:a4:7c:7f:55:32:0b:4b:c8:4c:a8:ed: a1:1e:5d:1c:e6:2d:31:d4:ce:11:e9:0a:0c:eb:8b:a3:51:03: f6:4f:3d:3a:92:b1:d9:54:2e:fa:d1:d2:89:42:82:9e:55:d8: 1c:5c:1d:81:91:13:31:e3:25:91:8e:6d:76:6f:20:31:a3:e7: 84:6f:fd:44:06:0a:1f:4b:22:1e:23:c0:25:eb:75:f3:fb:b5: f4:35:b4:c3:ba:0b:02:4b:bd:3e:2f:85:71:d8:2d:13:01:fb: d8:07:23:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23dDEcCrNpz69gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMy OTgyMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NTI1NDhlY2ItZjQwNC00NzU1LTkzZjYtNWI2M2JiYjY5MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNbwuErzB2E6sveUmYC6CrtNZoSS7alKDEbU vF/gCcXtw/8fAAoTtX0RX28BZLiwmGp4bvC60hhfmrpNrVihv/GEsGuRaUSf+6P4 1dH2j59aye/r1CJI40LbUWx15H0q9JsThhqiMmpjvqL3h/YtdiqG9YyMQSK618Dh Tk2rRLng2cBNweTOBtGgkXSj333U8QNG/hL3g0ybvECIfYG0rU7W9m/s/6k7M64v IPW8K0Ta4uNvRXn3Ki2KeuxhqyShjxcgn8+8OcFLxnlBrtQNOtefBZdMR7T5FtL3 +kmRYhbKrA2cZvsj6voYy7XtfhcSULOQqUc8j0tJRaDcGIKU5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaNiBTn2jshHz/n/m6C8YyNZOJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZGMx MjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvOGU1YTA1YTItMGIwYS0z NGJiLTkyZTctOTZkMzhlMWY0MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWRjMTI3MTQtNTI0Ny00MWM1LWIy NDQtZDBlZGNlYjMyOTgyLzVkYzEyNzE0LTUyNDctNDFjNS1iMjQ0LWQwZWRjZWIz Mjk4Mi5jcmwwHwYDVR0jBBgwFoAUHfJlXfqmlOL4XwL9Qx2u11OXGlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVk Y2ViMzI5ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1+Npk29aYzGvcDXW/CUSIBA1jZ/5wqiUS0pEJIXlqODhF/Mc0uyjo9 IgV/Q2eErePfjfmi6GE9LSoGnIJe8K3or6pmQ1oYTFNK4l4752Hc5ielT4P5e/BE 4tavPbpXcJ/1jzgvXOx3IRMfQMEaGVkcyoCypF/ZIld6vddCirTu5qQccKZTIIgp gLd81m25CR3Y7rwyDY6kfH9VMgtLyEyo7aEeXRzmLTHUzhHpCgzri6NRA/ZPPTqS sdlULvrR0olCgp5V2BxcHYGREzHjJZGObXZvIDGj54Rv/UQGCh9LIh4jwCXrdfP7 tfQ1tMO6CwJLvT4vhXHYLRMB+9gHI10= -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:41 2025 by rpki-client