$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa File: 571b8118-104e-3581-a5fe-51b7936e3a4e.roa (raw, json) Hash identifier: CkdEkMLE/DX/S4dGvxbV/w/1xX4rw2AcljXaLBpyU9k= Subject key identifier: A5:D7:F1:20:75:F4:1A:35:B5:19:29:B1:47:84:5B:C1:59:0D:7B:15 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584A8B0B5D07139D4D3CF3B26680 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 16509 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:5d:07:13:9d:4d:3c:f3:b2:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=a01302de-57d4-4e72-aa21-b740eb0ec5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:6e:db:90:e3:50:5d:85:9a:68:1b:78:10: 6f:88:5d:fd:d5:5c:b6:6e:01:42:82:6e:c1:53:0c: 03:56:e2:78:d4:b0:38:49:c7:02:93:81:ca:47:b0: 5e:e8:7b:47:9d:cf:57:82:7c:bc:3a:03:5a:4d:38: 83:a2:47:3f:6d:c2:18:74:96:b5:23:75:91:a4:64: d2:d5:a2:2d:41:4f:18:ca:45:1f:a1:b2:10:6f:ab: b5:2d:24:6d:be:cb:3b:32:a6:a9:45:4c:11:57:8f: e4:35:bb:bc:21:31:5f:f0:88:c6:cb:24:b6:55:13: 79:f5:a1:e2:26:b7:5a:91:73:4d:95:3f:98:89:70: 82:c1:74:26:0e:26:a5:44:8e:4f:56:84:6c:97:08: d7:e3:af:74:ba:cb:84:68:52:2a:11:7c:eb:d5:33: a5:46:9a:cb:d8:ee:36:a5:10:36:8a:c2:71:c9:f1: fe:0e:34:d3:da:e4:4f:b6:00:e9:f1:12:e3:a7:76: a2:c9:5d:a2:6b:b1:09:17:ad:8a:da:f4:d4:3d:ee: 4a:ff:0f:17:eb:bf:0c:75:b4:9e:8d:d1:2f:56:88: c2:d3:14:1c:f4:a6:2d:9c:de:4e:1f:8c:65:29:bd: d8:e2:19:bc:98:97:80:0c:c0:80:74:2c:fc:53:77: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:F1:20:75:F4:1A:35:B5:19:29:B1:47:84:5B:C1:59:0D:7B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:97:f4:c8:f4:9a:7d:7b:69:78:d8:0e:96:3c:66:fe:1b:d0: 78:83:a3:b5:c5:0e:12:dc:ba:dd:ba:37:72:d1:1e:9d:04:1e: 30:71:fc:7b:1f:96:28:6e:9f:f2:a5:fd:d6:e1:76:3b:72:76: b5:4d:c3:d5:2b:3c:da:f4:b0:bd:d1:9f:66:de:10:85:e5:f2: 6b:79:9a:b8:27:63:6b:b4:67:ba:b3:de:d7:5d:a7:d9:04:f8: 51:55:3b:99:42:53:ce:82:93:94:82:fa:b0:96:fe:cb:13:cb: 4b:52:cf:78:f9:bb:e9:4d:a3:9b:11:a2:ae:1e:cb:76:9f:1f: 00:05:ef:74:a5:a8:78:aa:1f:0b:2a:89:13:49:6c:9d:d5:06: 70:e1:3a:50:73:7f:03:f3:d1:b7:f2:df:2e:05:a5:0f:20:10: aa:ce:21:84:58:86:7c:73:48:60:b6:0b:1c:32:67:1e:e6:93: d2:91:62:38:66:26:73:40:cc:b5:69:18:85:79:4c:85:c5:06: 7d:fd:a3:31:33:bc:fe:24:6e:65:de:87:a6:39:b9:d0:2b:36: 69:6b:c5:c9:e0:86:ee:9a:70:82:b3:bc:23:2e:15:cc:cb:2d: b8:bc:8f:49:b7:dc:05:5c:16:e7:d1:8d:20:cc:03:4a:8e:d7: e0:94:e0:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC10HE51NPPOyZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk YTAxMzAyZGUtNTdkNC00ZTcyLWFhMjEtYjc0MGViMGVjNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCNu25DjUF2FmmgbeBBviF391Vy2bgFCgm7B UwwDVuJ41LA4SccCk4HKR7Be6HtHnc9Xgny8OgNaTTiDokc/bcIYdJa1I3WRpGTS 1aItQU8YykUfobIQb6u1LSRtvss7MqapRUwRV4/kNbu8ITFf8IjGyyS2VRN59aHi JrdakXNNlT+YiXCCwXQmDialRI5PVoRslwjX4690usuEaFIqEXzr1TOlRprL2O42 pRA2isJxyfH+DjTT2uRPtgDp8RLjp3aiyV2ia7EJF62K2vTUPe5K/w8X678MdbSe jdEvVojC0xQc9KYtnN5OH4xlKb3Y4hm8mJeADMCAdCz8U3elnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXX8SB19Bo1tRkpsUeEW8FZDXsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvNTcxYjgxMTgtMTA0ZS0z NTgxLWE1ZmUtNTFiNzkzNmUzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+X9Mj0mn17aXjYDpY8Zv4b0HiDo7XFDhLcut26N3LRHp0EHjBx/Hsf lihun/Kl/dbhdjtydrVNw9UrPNr0sL3Rn2beEIXl8mt5mrgnY2u0Z7qz3tddp9kE +FFVO5lCU86Ck5SC+rCW/ssTy0tSz3j5u+lNo5sRoq4ey3afHwAF73SlqHiqHwsq iRNJbJ3VBnDhOlBzfwPz0bfy3y4FpQ8gEKrOIYRYhnxzSGC2CxwyZx7mk9KRYjhm JnNAzLVpGIV5TIXFBn39ozEzvP4kbmXeh6Y5udArNmlrxcnghu6acIKzvCMuFczL Lbi8j0m33AVcFufRjSDMA0qO1+CU4Hw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:24 2025 by rpki-client