$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa File: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (raw, json) Hash identifier: E8TlieaLLOJNu0kLONmIKFcVoz9CYGrE3iH3c3i+JKs= Subject key identifier: F3:1A:54:3E:06:4C:29:90:63:0D:AF:34:5D:0C:05:A9:3B:0E:0B:8E Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F4328584A7D15E2977F7AB51584105B40 Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 394911 IP address blocks: 208.90.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e2:97:7f:7a:b5:15:84:10:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=f8c053af-df34-4a97-a822-2e1055f7d6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:4b:83:1c:9f:2a:07:fb:4e:e6:ef:b7:0f: 22:a4:4f:ff:95:4a:dd:6b:20:d0:2d:08:55:fd:b6: 92:fb:9a:1f:69:60:e4:f5:a9:42:8a:05:5a:a9:3d: 2e:a9:71:dd:9d:dd:d3:0c:08:07:a0:6b:8b:4f:fd: 05:06:e5:d0:7b:16:b1:a9:3e:a3:97:b8:25:a1:97: 00:df:cc:58:8c:9f:34:91:dd:f8:e7:6a:09:dd:b3: c1:e9:05:3c:b2:88:20:48:b6:39:7f:7d:ab:f0:8e: b5:61:65:8f:a1:27:85:dc:2d:1d:96:6a:1d:56:10: 0b:72:da:a9:c8:22:cc:c1:0a:89:79:9a:3f:c2:99: 88:14:d3:ec:29:a8:90:e2:b4:69:94:d9:33:77:c7: 4f:0a:f6:5f:af:fe:78:3b:41:db:9e:b7:af:59:56: 45:df:63:81:0c:3a:03:4e:f9:b7:c0:97:b9:02:aa: e0:ac:46:23:47:a5:17:26:7d:4f:56:05:06:d5:ae: a1:6d:9c:34:dd:13:80:31:a7:44:3c:40:63:9b:fd: 73:15:c6:cc:d6:f0:f5:d3:0e:93:4f:6c:ff:b4:71: 2c:3f:c4:cd:54:54:5c:dd:b9:24:34:13:7a:01:1e: 13:f0:21:02:06:2c:73:07:41:5e:37:8e:d8:85:f6: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1A:54:3E:06:4C:29:90:63:0D:AF:34:5D:0C:05:A9:3B:0E:0B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: 208.90.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b3:82:b8:32:be:6f:18:86:bf:1b:1c:b2:27:fa:4d:48:18: a7:27:ee:b9:cc:8b:4f:57:56:c2:d0:75:f1:7c:1f:67:2e:a8: d6:10:32:2b:53:f5:29:b3:a1:4b:a9:a5:92:a1:7b:56:70:d4: 9b:79:40:1d:90:b2:e6:3a:4e:65:f4:9e:b6:a1:3a:3c:bf:19: a1:4d:83:02:ae:af:7a:dd:71:86:ed:18:63:6a:4e:61:ca:8d: b7:64:00:cc:c3:1f:62:6d:64:45:06:16:32:32:7e:22:d2:a5: a5:25:71:dd:83:9b:37:31:ec:c8:e6:b2:ea:4a:76:27:3d:ae: 60:c8:7d:3b:d3:5a:4f:b7:46:1c:8d:20:12:99:ef:f6:9e:22: b1:c4:c6:47:43:12:32:0f:8c:76:91:b5:04:cb:05:79:41:15: 8a:60:64:e8:d4:06:d8:6d:9e:4b:c2:e2:87:cc:61:00:53:ce: 7e:68:9e:42:e8:3a:f3:d3:a4:0c:10:8c:05:88:1b:1a:13:d0: 19:13:03:08:8c:fd:1c:9a:d5:19:a6:31:c3:f7:ee:b1:01:f1: 8c:9e:ff:6f:a9:fa:1b:91:bd:2a:a9:5d:67:5c:29:61:e4:10: d8:1d:84:d8:c3:38:c0:2e:57:88:c3:be:41:47:c0:b2:6b:81: 89:64:55:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FeKXf3q1FYQQW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk ZjhjMDUzYWYtZGYzNC00YTk3LWE4MjItMmUxMDU1ZjdkNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBxLgxyfKgf7Tubvtw8ipE//lUrdayDQLQhV /baS+5ofaWDk9alCigVaqT0uqXHdnd3TDAgHoGuLT/0FBuXQexaxqT6jl7gloZcA 38xYjJ80kd3452oJ3bPB6QU8soggSLY5f32r8I61YWWPoSeF3C0dlmodVhALctqp yCLMwQqJeZo/wpmIFNPsKaiQ4rRplNkzd8dPCvZfr/54O0HbnrevWVZF32OBDDoD Tvm3wJe5AqrgrEYjR6UXJn1PVgUG1a6hbZw03ROAMadEPEBjm/1zFcbM1vD10w6T T2z/tHEsP8TNVFRc3bkkNBN6AR4T8CECBixzB0FeN47YhfZdowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMaVD4GTCmQYw2vNF0MBak7DguOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvZTU1MDlkOTgtYzhlYS0z OGUwLTg4YTgtOTliZTI4Y2QyODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOzgrgyvm8Yhr8bHLIn+k1IGKcn7rnMi09XVsLQdfF8H2cuqNYQMitT 9SmzoUuppZKhe1Zw1Jt5QB2QsuY6TmX0nrahOjy/GaFNgwKur3rdcYbtGGNqTmHK jbdkAMzDH2JtZEUGFjIyfiLSpaUlcd2Dmzcx7MjmsupKdic9rmDIfTvTWk+3RhyN IBKZ7/aeIrHExkdDEjIPjHaRtQTLBXlBFYpgZOjUBthtnkvC4ofMYQBTzn5onkLo OvPTpAwQjAWIGxoT0BkTAwiM/Rya1RmmMcP37rEB8Yye/2+p+huRvSqpXWdcKWHk ENgdhNjDOMAuV4jDvkFHwLJrgYlkVW0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:15:23 2025 by rpki-client