$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa File: a5fe454b-deb7-37cf-bd66-6552718aa14d.roa (raw, json) Hash identifier: rjPmx69XQptyTtB8qqzC8gcoGFnlviflp7zEnft8Rm8= Subject key identifier: 55:50:1C:93:11:7D:F7:70:B3:06:11:66:92:8B:19:E6:F6:FF:AD:41 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584AB386273F664EB7E4534B9380 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 399244 IP address blocks: 208.92.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:27:3f:66:4e:b7:e4:53:4b:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=d5aa9c77-4ef5-4f60-a17c-92c91a391802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:a0:54:c6:02:ac:3e:eb:32:81:06:15:ed: f4:9a:9a:4f:eb:89:7e:29:b7:97:1a:43:d8:28:f6: c3:cf:00:be:ff:9b:41:11:2e:f4:77:f6:f7:58:be: d8:3f:1f:7c:25:14:8e:75:c0:2b:dc:ec:84:9e:ed: 77:99:7b:5a:42:a0:c9:0c:33:ca:0a:93:de:26:3c: 45:21:2d:e1:db:41:31:3f:35:d2:71:69:c7:3d:9d: 70:f6:2b:61:2e:ef:c3:06:d3:ba:10:08:bc:a7:3a: 74:a4:8c:03:3c:8b:d7:ab:b9:e4:88:9e:ad:de:86: 19:66:d7:b1:37:a9:62:01:00:bc:2b:03:60:2c:fb: 61:74:0f:6c:20:e0:c9:6b:9d:5c:6f:fc:6d:5a:8a: 9d:c8:78:c1:c4:91:65:a1:71:e9:c5:f0:20:65:21: 82:d9:66:db:b8:fa:44:e0:7b:7f:e3:68:59:6c:2c: 21:67:87:ce:1b:03:3e:07:7f:bd:fe:a6:fb:8b:7d: 01:3f:3a:7d:53:18:3e:fa:4d:d9:eb:01:20:92:39: fc:69:81:b8:b7:68:03:0d:ff:f5:32:23:40:5e:05: ec:a0:07:cd:33:bd:d3:15:9d:a3:a2:3d:aa:95:85: cb:d1:3f:04:ec:5a:a0:c7:dd:e8:7f:45:f9:23:10: 17:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:50:1C:93:11:7D:F7:70:B3:06:11:66:92:8B:19:E6:F6:FF:AD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 208.92.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:90:4f:f5:fb:58:2e:3d:13:04:75:17:47:71:cb:08:f8:3b: 67:84:8e:1b:24:88:a9:3f:3b:f6:f5:e4:19:75:28:d7:8f:dd: bc:18:53:c7:be:49:d5:7b:80:f5:cd:cf:aa:c9:bd:e1:44:ce: fd:96:45:3f:ab:3d:00:ef:ef:21:65:2c:1d:74:0c:09:40:4d: f8:96:8b:3c:d1:c9:9c:68:3b:22:77:86:9b:40:0b:84:fa:5f: 64:9b:0f:3a:61:f5:4f:8a:cf:f1:f5:ff:22:45:17:03:6f:eb: be:d0:cb:86:9e:45:c5:ef:47:1e:c1:ed:7e:2c:0b:ec:64:f1: a4:96:bb:6b:25:51:13:68:f0:25:24:cf:bd:1b:8a:f0:64:e6: 42:ed:76:11:99:03:dd:90:3b:35:07:02:82:3a:2d:14:bc:d2: 02:57:bc:0b:a2:9a:f2:2f:00:60:0b:a8:83:ab:e1:85:b3:5d: 68:e6:28:96:52:c3:df:50:c3:30:8e:1b:26:e2:1d:ff:63:5b: 3b:65:37:1c:b0:51:10:5a:a5:22:36:f0:c1:45:ee:81:fe:eb: b7:2f:1f:6f:e7:04:f8:24:8a:0b:1a:3c:f2:3c:1f:71:19:bc: e8:da:35:dd:10:c6:df:b4:b3:bf:97:ea:6a:7e:3d:11:5a:b1: 6e:e3:68:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhic/Zk635FNLk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDVhYTljNzctNGVmNS00ZjYwLWExN2MtOTJjOTFhMzkxODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNKgVMYCrD7rMoEGFe30mppP64l+KbeXGkPY KPbDzwC+/5tBES70d/b3WL7YPx98JRSOdcAr3OyEnu13mXtaQqDJDDPKCpPeJjxF IS3h20ExPzXScWnHPZ1w9ithLu/DBtO6EAi8pzp0pIwDPIvXq7nkiJ6t3oYZZtex N6liAQC8KwNgLPthdA9sIODJa51cb/xtWoqdyHjBxJFloXHpxfAgZSGC2WbbuPpE 4Ht/42hZbCwhZ4fOGwM+B3+9/qb7i30BPzp9Uxg++k3Z6wEgkjn8aYG4t2gDDf/1 MiNAXgXsoAfNM73TFZ2joj2qlYXL0T8E7Fqgx93of0X5IxAX8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVQHJMRffdwswYRZpKLGeb2/61BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYTVmZTQ1NGItZGViNy0z N2NmLWJkNjYtNjU1MjcxOGFhMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiQT/X7WC49EwR1F0dxywj4O2eEjhskiKk/O/b15Bl1KNeP3bwYU8e+ SdV7gPXNz6rJveFEzv2WRT+rPQDv7yFlLB10DAlATfiWizzRyZxoOyJ3hptAC4T6 X2SbDzph9U+Kz/H1/yJFFwNv677Qy4aeRcXvRx7B7X4sC+xk8aSWu2slURNo8CUk z70bivBk5kLtdhGZA92QOzUHAoI6LRS80gJXvAuimvIvAGALqIOr4YWzXWjmKJZS w99QwzCOGybiHf9jWztlNxywURBapSI28MFF7oH+67cvH2/nBPgkigsaPPI8H3EZ vOjaNd0Qxt+0s7+X6mp+PRFasW7jaI0= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:49 2025 by rpki-client