$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa File: f2bf5543-269c-3fbb-bb59-b3484366fb78.roa (raw, json) Hash identifier: VzQkGMTIh3fMl9hHNj6eX9pkLxZDVqf7KGU6FirgJfc= Subject key identifier: 8C:A9:E7:46:50:A1:29:92:B1:FA:FB:11:D0:FC:9B:30:AF:7C:E0:07 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A88409CFA0C8D85443E877800 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 398420 IP address blocks: 208.89.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9c:fa:0c:8d:85:44:3e:87:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=40954808-d784-49c4-901c-cdc151a59f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:a4:57:40:e2:85:96:42:7f:13:e7:36:e9: da:70:6f:93:4b:7c:34:87:a8:6d:c8:ca:4d:86:52: c7:f6:48:2a:0e:18:5a:f9:ce:91:f1:f2:dc:bf:b3: d0:ec:e7:11:d5:c5:93:6a:d2:b9:d3:07:e2:8f:2c: e2:18:4f:57:c4:0f:d9:9a:f0:6a:11:c3:ea:92:fd: 5e:70:54:a8:d5:3c:95:9f:8e:d1:ef:55:c5:d3:dd: 40:d5:3a:c2:ce:a8:35:b7:2f:e2:ae:69:66:e2:da: 71:b1:53:d0:af:25:32:79:90:11:32:c4:b4:6d:fc: 00:e6:30:14:22:77:c4:42:bd:2b:eb:b7:59:7d:16: 1b:b6:31:1c:df:40:95:a7:4c:05:bb:f8:2f:07:a8: c1:e4:42:b5:ea:4e:ed:44:18:1c:b2:3f:ef:3e:52: 5f:a9:1d:d0:6b:86:51:84:04:b6:21:76:3b:ed:ca: 1e:13:e0:6e:49:fc:eb:e0:a1:40:c8:27:f6:3b:d6: fe:81:fb:73:6c:d6:9e:76:e8:e2:48:62:15:3c:1e: 30:35:e7:31:d3:e6:9d:2a:4b:bb:e6:3d:88:99:18: 17:74:68:65:c1:81:54:3b:6e:99:3f:d0:3a:ea:ca: df:bf:d5:69:9c:c6:56:c4:4d:54:1b:c8:07:c3:b3: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A9:E7:46:50:A1:29:92:B1:FA:FB:11:D0:FC:9B:30:AF:7C:E0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a3:8d:93:a7:cb:28:1b:10:ba:8f:1a:c1:2a:08:31:d0:53: a5:82:ee:16:4f:7f:a4:d7:80:83:c5:97:a7:eb:80:3b:62:16: 19:94:67:20:c8:30:84:e4:6f:3b:c8:81:10:4f:14:59:3a:a1: 19:81:a3:b5:a7:6b:d7:89:04:2c:b6:63:14:e9:00:91:7b:fb: 8c:ff:93:30:e6:2a:59:71:df:68:8c:00:9a:57:51:4b:1f:e8: e9:64:e5:b3:9c:89:a3:e7:e0:96:63:5f:b8:8e:84:28:6d:56: 76:f7:c0:5d:34:d0:59:41:64:59:f7:dd:f5:05:1a:68:8e:41: 2c:89:a6:fe:b4:d4:ab:3b:62:5a:89:15:d4:24:c6:c6:f1:e7: cc:3b:26:49:6c:da:ae:56:c0:39:b7:a4:35:86:8b:b4:2f:b5: a9:24:c1:2c:68:d5:4c:ca:8c:29:6c:41:0b:91:45:7d:11:e2: 87:49:cd:6a:2c:d7:8e:55:cb:8a:e4:d1:e2:9a:f6:1d:1f:51: ac:56:82:a9:94:89:81:70:c2:4b:a1:ac:01:0d:06:39:3d:b1: f1:4e:b9:76:e9:c3:b2:e5:f7:f8:ed:e8:64:b1:d7:ce:b3:5f: 5e:4f:da:ba:e4:92:d3:aa:55:ed:d0:6a:08:4f:eb:4e:03:81: 6e:e0:b8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJz6DI2FRD6HeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk NDA5NTQ4MDgtZDc4NC00OWM0LTkwMWMtY2RjMTUxYTU5ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuSkV0DihZZCfxPnNunacG+TS3w0h6htyMpN hlLH9kgqDhha+c6R8fLcv7PQ7OcR1cWTatK50wfijyziGE9XxA/ZmvBqEcPqkv1e cFSo1TyVn47R71XF091A1TrCzqg1ty/irmlm4tpxsVPQryUyeZARMsS0bfwA5jAU InfEQr0r67dZfRYbtjEc30CVp0wFu/gvB6jB5EK16k7tRBgcsj/vPlJfqR3Qa4ZR hAS2IXY77coeE+BuSfzr4KFAyCf2O9b+gftzbNaedujiSGIVPB4wNecx0+adKku7 5j2ImRgXdGhlwYFUO26ZP9A66srfv9VpnMZWxE1UG8gHw7PUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyp50ZQoSmSsfr7EdD8mzCvfOAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjJiZjU1NDMtMjY5Yy0z ZmJiLWJiNTktYjM0ODQzNjZmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSjjZOnyygbELqPGsEqCDHQU6WC7hZPf6TXgIPFl6frgDtiFhmUZyDI MITkbzvIgRBPFFk6oRmBo7Wna9eJBCy2YxTpAJF7+4z/kzDmKllx32iMAJpXUUsf 6Olk5bOciaPn4JZjX7iOhChtVnb3wF000FlBZFn33fUFGmiOQSyJpv601Ks7YlqJ FdQkxsbx58w7Jkls2q5WwDm3pDWGi7QvtakkwSxo1UzKjClsQQuRRX0R4odJzWos 145Vy4rk0eKa9h0fUaxWgqmUiYFwwkuhrAENBjk9sfFOuXbpw7Ll9/jt6GSx186z X15P2rrkktOqVe3QaghP604DgW7guME= -----END CERTIFICATE-----Generated at Sun Aug 10 13:47:41 2025 by rpki-client