$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa File: c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa (raw, json) Hash identifier: 5MtDq9zJoib8mHQQLyXnxtlwDjHmxDlwxsHIpVyLt7Q= Subject key identifier: 3F:50:B9:AF:49:38:12:0D:C1:FD:E4:14:47:33:F5:90:E9:D9:CF:B9 Certificate issuer: /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Certificate serial: 010D0C9F4328584AA1621D57417DEB4B4E7F2480 Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 69.52.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:62:1d:57:41:7d:eb:4b:4e:7f:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=4335a2b8-5599-4cc9-a12a-f284c19b03b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:52:13:b0:d0:a5:34:bd:20:f5:11:45:ea: b7:95:12:ad:76:b0:d6:1a:14:9a:d5:b8:9b:41:36: 64:e4:f0:8b:a9:02:ee:ca:45:ae:62:5e:bc:86:b1: a9:65:02:fe:30:ab:9e:f9:fd:ff:ed:a1:19:cd:5a: 6a:4f:2b:7d:43:8b:23:71:2e:dd:b4:a2:b2:4e:c2: f4:31:bd:56:91:d7:58:cb:c0:58:72:26:94:fb:c1: 5e:45:e8:9a:a8:f4:05:c3:61:22:75:cf:d6:6e:b0: 88:b4:6a:ed:ef:63:2c:db:cd:a2:ea:55:42:29:ba: 47:61:77:a0:ea:42:02:8a:3b:31:99:b2:b4:b7:c2: c4:c6:1a:31:fb:2d:ae:b8:c9:41:6c:d2:40:e6:1f: 65:20:a7:48:7d:59:e8:8c:15:d5:07:94:d7:c8:17: 72:d6:7b:cc:5c:ad:bf:a8:e3:0b:41:1d:c4:38:f3: 07:0d:ac:1e:43:f4:19:50:ce:cb:b4:8b:db:e7:df: 29:47:77:69:61:23:79:20:a1:3d:56:bf:0c:87:58: c4:9e:bb:71:7a:ee:ae:3d:19:a9:b7:00:84:1e:c2: e5:9f:25:2f:03:98:1f:b0:68:81:92:0c:cd:08:4e: a8:e7:b5:0c:b1:f9:4b:3d:91:20:16:63:d6:79:22: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:50:B9:AF:49:38:12:0D:C1:FD:E4:14:47:33:F5:90:E9:D9:CF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl X509v3 Authority Key Identifier: keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer sbgp-ipAddrBlock: critical IPv4: 69.52.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:dd:ab:5f:c0:51:ce:41:b4:8f:fa:83:77:f8:f8:c2:2a:05: fe:c8:ab:45:ab:ac:14:cc:1f:bd:91:eb:48:f3:6f:62:ca:b9: 40:95:30:67:f6:af:e9:40:94:4f:1d:6c:41:e6:39:02:cb:da: 34:51:5d:ca:a2:e7:8d:72:8b:8e:4b:75:79:03:85:8e:a3:fd: ca:d5:68:71:07:12:7b:a0:4e:e8:62:b5:c4:e1:02:33:a6:29: 5e:1f:82:20:72:08:f8:50:48:d8:31:95:90:1f:61:d5:89:3c: ab:61:4c:28:37:6e:7f:de:bd:12:9e:29:3c:05:81:11:dd:27: 5b:e4:dc:13:0e:b3:4f:66:af:07:9a:95:66:15:ab:dd:3e:93: e9:9d:87:40:f9:c7:09:67:96:e1:b7:ac:26:86:47:1f:06:85: d1:af:7d:c3:d0:15:ac:53:16:74:1f:3d:07:fb:a0:68:bf:1d: 08:fa:82:36:b3:a5:7b:00:37:63:9c:6b:0e:10:83:bf:f9:7b: 3e:0f:98:ec:33:11:16:4e:bc:bb:f2:2b:b8:4c:38:c4:1a:67: 4e:83:8d:ae:fe:c5:b7:d4:60:09:4f:d9:23:bd:85:ac:f8:cd: e4:f5:ce:b5:c9:78:34:56:68:9c:fc:7f:7a:82:01:0e:a2:d9: f0:c8:a0:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYh1XQX3rS05/JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZi MjYxMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NDMzNWEyYjgtNTU5OS00Y2M5LWExMmEtZjI4NGMxOWIwM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkdSE7DQpTS9IPURReq3lRKtdrDWGhSa1bib QTZk5PCLqQLuykWuYl68hrGpZQL+MKue+f3/7aEZzVpqTyt9Q4sjcS7dtKKyTsL0 Mb1WkddYy8BYciaU+8FeReiaqPQFw2Eidc/WbrCItGrt72Ms282i6lVCKbpHYXeg 6kICijsxmbK0t8LExhox+y2uuMlBbNJA5h9lIKdIfVnojBXVB5TXyBdy1nvMXK2/ qOMLQR3EOPMHDaweQ/QZUM7LtIvb598pR3dpYSN5IKE9Vr8Mh1jEnrtxeu6uPRmp twCEHsLlnyUvA5gfsGiBkgzNCE6o57UMsflLPZEgFmPWeSK6ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9Qua9JOBINwf3kFEcz9ZDp2c+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3 YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvYzMyNzAxYTYtZjBhNy0z NmUyLWIzYWEtMTFmZTQ0Yzc3YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk5N2IxZmItYzFjYy00NWRkLWE3 ZWMtMzI3NWE1MjZiMjYxL2U5OTdiMWZiLWMxY2MtNDVkZC1hN2VjLTMyNzVhNTI2 YjI2MS5jcmwwHwYDVR0jBBgwFoAUCRmfFSCtJze3gSqlW6Hy7/s1W10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1 YTUyNmIyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrdq1/AUc5BtI/6g3f4+MIqBf7Iq0WrrBTMH72R60jzb2LKuUCVMGf2 r+lAlE8dbEHmOQLL2jRRXcqi541yi45LdXkDhY6j/crVaHEHEnugTuhitcThAjOm KV4fgiByCPhQSNgxlZAfYdWJPKthTCg3bn/evRKeKTwFgRHdJ1vk3BMOs09mrwea lWYVq90+k+mdh0D5xwlnluG3rCaGRx8GhdGvfcPQFaxTFnQfPQf7oGi/HQj6gjaz pXsAN2Ocaw4Qg7/5ez4PmOwzERZOvLvyK7hMOMQaZ06Dja7+xbfUYAlP2SO9haz4 zeT1zrXJeDRWaJz8f3qCAQ6i2fDIoL8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:29 2025 by rpki-client