$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa File: 4fb9524c-0027-3b38-a16e-a042538273be.roa (raw, json) Hash identifier: 3LQI8rSHzOY3nvA1ANu5Tx8YEDpE/wOEgi17mSXJ818= Subject key identifier: 1F:C1:AD:95:DB:3B:EB:19:5F:CD:65:86:05:78:64:05:C1:71:9E:DD Certificate issuer: /CN=e63efa95-ea3a-452d-a757-7aad9b62d5b7 Certificate serial: 010D0C9F4328584AB650F9358AE28D211DD25000 Authority key identifier: 32:46:51:DF:98:86:45:92:0C:90:D0:95:02:4D:56:73:B5:D8:4A:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 399036 IP address blocks: 208.52.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f9:35:8a:e2:8d:21:1d:d2:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e63efa95-ea3a-452d-a757-7aad9b62d5b7 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=89b1d563-ab5c-4bf9-99c7-8c283c584ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:aa:71:70:65:49:fd:36:df:38:46:7f:c3: 58:1f:11:09:2b:1e:91:35:6e:0a:68:48:fb:ec:b2: 61:e2:db:57:a4:be:85:d1:c1:93:2a:11:37:86:00: 7c:b2:31:29:2b:23:69:85:7e:47:20:23:f2:d9:31: 26:e4:e6:38:a3:7b:05:16:d1:30:1e:66:5f:f5:a6: 1d:fe:af:30:19:29:65:e0:9a:65:e4:f6:7d:40:85: 92:82:71:0c:8f:04:a2:db:43:d2:28:40:56:fe:aa: 73:e6:63:08:ef:08:6c:9f:54:ec:8a:95:e1:24:03: 47:d3:aa:28:38:9e:46:51:2d:8e:dd:8b:84:af:6e: 2c:a6:25:db:aa:5c:9f:3e:f8:25:49:7b:9d:20:df: 00:12:25:dc:1b:05:f0:25:30:03:97:2f:fa:ab:e9: 48:25:b8:97:13:2d:52:7c:8f:d2:8a:55:c3:1c:6f: f2:e1:04:33:1b:28:56:41:3a:5e:dc:be:45:e7:40: 14:84:9b:53:03:5c:5e:94:cf:e8:ee:8d:0c:70:d1: 9a:f0:b2:60:82:6c:1c:f1:87:3b:51:60:72:49:36: 9f:6b:3e:f3:25:22:9d:81:73:03:6b:ff:cf:60:a9: f1:8d:17:3f:43:b0:76:98:3c:b7:58:d5:f1:99:fd: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C1:AD:95:DB:3B:EB:19:5F:CD:65:86:05:78:64:05:C1:71:9E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.crl X509v3 Authority Key Identifier: keyid:32:46:51:DF:98:86:45:92:0C:90:D0:95:02:4D:56:73:B5:D8:4A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer sbgp-ipAddrBlock: critical IPv4: 208.52.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8f:eb:e7:78:e9:aa:a0:c8:69:c0:63:ef:93:85:50:5c:dc: 05:67:b8:08:a6:23:b4:55:cc:fc:13:62:73:2b:c1:7b:ea:61: f3:ae:e5:9b:64:54:45:26:b9:1d:c2:db:49:52:56:59:ef:4f: 76:b3:e7:76:cb:ee:eb:32:8b:dd:98:56:16:23:dd:b7:02:6e: 23:a4:1b:4e:68:43:fa:3d:34:d0:04:65:87:48:c3:93:46:11: 09:30:34:18:7c:7d:12:0d:8e:95:9b:14:fe:d3:62:97:ba:7b: 33:5f:4b:25:47:dd:7d:86:59:e5:50:30:32:ee:de:33:18:08: 3e:67:bf:e0:0f:2a:ff:9b:95:31:72:c1:dc:40:0f:50:d6:06: c6:8a:16:a0:05:82:a0:1b:11:09:ce:51:6b:d3:c1:d2:2f:85: e6:c4:c6:10:da:2f:fb:04:ca:dc:5e:96:c0:66:18:a4:6e:1e: a0:cd:c4:a5:32:9f:27:b7:76:e8:3b:b5:7a:65:a2:6e:af:92: 2d:75:b4:80:ef:c4:c6:62:32:99:11:32:ae:0e:38:38:29:20: 62:bb:ec:52:01:aa:66:25:1f:70:36:e3:6b:e8:7e:a4:0c:56: a6:b8:3f:ea:bb:5a:23:aa:65:52:5d:45:33:81:a4:35:65:7d: d2:fb:db:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPk1iuKNIR3SUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYzZWZhOTUtZWEzYS00NTJkLWE3NTctN2FhZDliNjJk NWI3MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ODliMWQ1NjMtYWI1Yy00YmY5LTk5YzctOGMyODNjNTg0ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms+qcXBlSf023zhGf8NYHxEJKx6RNW4KaEj7 7LJh4ttXpL6F0cGTKhE3hgB8sjEpKyNphX5HICPy2TEm5OY4o3sFFtEwHmZf9aYd /q8wGSll4Jpl5PZ9QIWSgnEMjwSi20PSKEBW/qpz5mMI7whsn1TsipXhJANH06oo OJ5GUS2O3YuEr24spiXbqlyfPvglSXudIN8AEiXcGwXwJTADly/6q+lIJbiXEy1S fI/SilXDHG/y4QQzGyhWQTpe3L5F50AUhJtTA1xelM/o7o0McNGa8LJggmwc8Yc7 UWBySTafaz7zJSKdgXMDa//PYKnxjRc/Q7B2mDy3WNXxmf3l9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/BrZXbO+sZX81lhgV4ZAXBcZ7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lNjNl ZmE5NS1lYTNhLTQ1MmQtYTc1Ny03YWFkOWI2MmQ1YjcvNGZiOTUyNGMtMDAyNy0z YjM4LWExNmUtYTA0MjUzODI3M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTYzZWZhOTUtZWEzYS00NTJkLWE3 NTctN2FhZDliNjJkNWI3L2U2M2VmYTk1LWVhM2EtNDUyZC1hNzU3LTdhYWQ5YjYy ZDViNy5jcmwwHwYDVR0jBBgwFoAUMkZR35iGRZIMkNCVAk1Wc7XYSi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lNjNlZmE5NS1lYTNhLTQ1MmQtYTc1Ny03YWFk OWI2MmQ1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGP6+d46aqgyGnAY++ThVBc3AVnuAimI7RVzPwTYnMrwXvqYfOu5Ztk VEUmuR3C20lSVlnvT3az53bL7usyi92YVhYj3bcCbiOkG05oQ/o9NNAEZYdIw5NG EQkwNBh8fRINjpWbFP7TYpe6ezNfSyVH3X2GWeVQMDLu3jMYCD5nv+APKv+blTFy wdxAD1DWBsaKFqAFgqAbEQnOUWvTwdIvhebExhDaL/sEytxelsBmGKRuHqDNxKUy nye3dug7tXplom6vki11tIDvxMZiMpkRMq4OODgpIGK77FIBqmYlH3A242vofqQM Vqa4P+q7WiOqZVJdRTOBpDVlfdL72yk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:30 2025 by rpki-client