$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa File: 6088769e-3429-32bd-88b7-3ac8d54f15a8.roa (raw, json) Hash identifier: Cwud3fAqxi7zAyFC8C2JaikzxZTEY/pjG6S0ulcSG4Y= Subject key identifier: 9A:44:AD:56:3A:58:CF:09:A0:A7:4E:E0:31:9C:DD:C9:4F:D2:D6:2A Certificate issuer: /CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Certificate serial: 010D0C9F4328584A9A66309ED7B325269F977A80 Authority key identifier: F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 33359 IP address blocks: 208.89.28.0/24 maxlen: 24 208.89.29.0/24 maxlen: 24 208.89.30.0/24 maxlen: 24 208.89.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:30:9e:d7:b3:25:26:9f:97:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=f2928b18-0805-4ce5-ae86-3f2f3dbf0f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:2d:5f:02:0b:e8:41:c7:b8:2a:60:6e:76: 3e:fd:73:16:ec:5d:94:0d:56:9b:a6:7e:22:b9:34: 0b:19:81:09:2d:50:bb:9b:81:e8:44:a7:c8:18:0e: ef:57:3f:0b:f3:d1:80:7e:59:af:84:bc:31:83:32: 9d:07:c0:de:00:8b:da:05:75:ad:73:45:5d:12:b1: 79:b7:3f:9b:41:d6:fd:62:24:fc:ee:05:64:74:6f: 0b:00:06:c4:a4:71:8e:57:b8:cc:2e:98:74:30:78: 52:0e:81:20:de:5d:08:72:31:5b:0e:b9:f6:9e:7f: 3d:3b:e8:33:e0:b6:14:83:0b:63:49:85:0d:55:07: 18:75:3b:f6:aa:7e:1d:07:7e:ab:c7:49:7a:15:aa: 27:bf:a7:95:3d:a2:5b:79:6d:f6:ac:79:80:fa:d2: b0:d8:f4:d5:d7:f0:bb:0a:4e:4d:fb:c7:c3:23:5d: d4:d3:49:31:2d:17:97:2f:61:d2:ba:7e:c7:d8:87: 4e:0b:d5:57:10:de:5b:23:49:b0:8e:be:eb:0c:01: 8d:4e:be:79:9e:32:16:ac:b5:8d:e1:da:82:14:f9: 08:6d:d9:3f:09:2e:a1:5b:c7:e9:02:f1:7b:17:f2: 64:d1:59:65:c4:06:d0:64:35:4f:71:34:03:11:b0: 71:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:AD:56:3A:58:CF:09:A0:A7:4E:E0:31:9C:DD:C9:4F:D2:D6:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl X509v3 Authority Key Identifier: keyid:F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer sbgp-ipAddrBlock: critical IPv4: 208.89.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f8:d6:5d:f7:f3:30:a4:91:0a:0d:82:7d:a4:17:ac:cd:fd: a3:66:f4:30:ec:9c:2e:d4:ea:d2:96:94:30:db:24:04:43:3c: d8:4c:06:40:ce:37:b1:34:0e:1d:21:40:5c:29:c8:01:b9:f9: 91:3d:d7:7f:a0:68:9e:b9:de:1f:fa:80:95:c7:e9:68:78:59: 06:64:b0:3d:1f:88:94:b8:c6:77:6c:37:5b:44:c2:cb:06:70: 59:b7:85:f0:43:62:49:69:fe:c5:8d:3f:e6:80:69:da:fe:05: 9a:36:24:9d:ce:a1:af:a1:54:58:47:ba:56:13:5d:4e:bb:db: 69:1e:63:43:44:4c:e3:39:44:d5:23:ae:f6:a5:a2:6f:40:5e: dc:50:e5:ad:3c:e2:e3:b7:cd:f0:19:4c:2e:34:15:16:a8:79: 8b:95:c4:85:3f:0b:38:fa:5b:8f:0a:0d:fc:9c:c5:ba:10:0f: 63:e6:67:12:c5:10:6d:eb:5e:5b:de:27:56:12:42:51:cc:ea: 08:51:af:f2:f3:e5:dc:b6:99:b7:05:d4:99:e0:62:c8:8a:3a: 58:6c:02:9a:b6:1f:47:2c:01:60:8b:c7:8c:f5:08:3f:0f:91: ed:02:0c:c2:5a:00:f3:83:dd:eb:11:96:e5:15:30:58:c4:57: b0:f4:9b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjCe17MlJp+XeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU4ZjkyZjgtNGQ4ZC00MWRhLWFmOWQtZDhmZGVjMmUz MDI1MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjI5MjhiMTgtMDgwNS00Y2U1LWFlODYtM2YyZjNkYmYwZjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAItXwIL6EHHuCpgbnY+/XMW7F2UDVabpn4i uTQLGYEJLVC7m4HoRKfIGA7vVz8L89GAflmvhLwxgzKdB8DeAIvaBXWtc0VdErF5 tz+bQdb9YiT87gVkdG8LAAbEpHGOV7jMLph0MHhSDoEg3l0IcjFbDrn2nn89O+gz 4LYUgwtjSYUNVQcYdTv2qn4dB36rx0l6Faonv6eVPaJbeW32rHmA+tKw2PTV1/C7 Ck5N+8fDI13U00kxLReXL2HSun7H2IdOC9VXEN5bI0mwjr7rDAGNTr55njIWrLWN 4dqCFPkIbdk/CS6hW8fpAvF7F/Jk0VllxAbQZDVPcTQDEbBx4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpErVY6WM8JoKdO4DGc3clP0tYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThm OTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZkZWMyZTMwMjUvNjA4ODc2OWUtMzQyOS0z MmJkLTg4YjctM2FjOGQ1NGYxNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzU4ZjkyZjgtNGQ4ZC00MWRhLWFm OWQtZDhmZGVjMmUzMDI1L2M1OGY5MmY4LTRkOGQtNDFkYS1hZjlkLWQ4ZmRlYzJl MzAyNS5jcmwwHwYDVR0jBBgwFoAU9Sjz5U6mIGVXx3o+OKrQMZOGC5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThmOTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZk ZWMyZTMwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/41l338zCkkQoNgn2kF6zN/aNm9DDsnC7U6tKWlDDbJARDPNhMBkDO N7E0Dh0hQFwpyAG5+ZE913+gaJ653h/6gJXH6Wh4WQZksD0fiJS4xndsN1tEwssG cFm3hfBDYklp/sWNP+aAadr+BZo2JJ3Ooa+hVFhHulYTXU6722keY0NETOM5RNUj rvalom9AXtxQ5a084uO3zfAZTC40FRaoeYuVxIU/Czj6W48KDfycxboQD2PmZxLF EG3rXlveJ1YSQlHM6ghRr/Lz5dy2mbcF1JngYsiKOlhsApq2H0csAWCLx4z1CD8P ke0CDMJaAPOD3esRluUVMFjEV7D0m2E= -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:09 2025 by rpki-client