$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/5260488b-3dc9-3883-8d68-3d6c2ef502f4.roa File: 5260488b-3dc9-3883-8d68-3d6c2ef502f4.roa (raw, json) Hash identifier: J58pr/iAl4leEE5lVhxMqZn/WQNrJ8PEOOLNgCDs3NQ= Subject key identifier: 87:CD:03:4A:4C:A5:9E:D5:B3:25:E2:8A:EC:B8:30:FB:43:53:C6:17 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584ADD66787B2535FD2E22D8D800 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/5260488b-3dc9-3883-8d68-3d6c2ef502f4.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 208.81.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:78:7b:25:35:fd:2e:22:d8:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=3c5cd4f8-fc8f-4f95-b6ed-a9ca1ccf6f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:bb:ef:5c:d3:36:18:70:70:d4:fc:0f:47: 09:03:b2:6e:ef:1b:8d:10:d0:ed:22:60:f0:6f:ea: 9c:0e:72:54:5b:ed:60:75:49:c0:1e:9b:e6:42:87: d8:7f:c7:ca:30:e0:04:e2:c1:5d:c3:52:c5:1a:b1: 94:dd:27:49:6a:e4:86:c5:3c:b2:e6:66:31:49:2b: 94:88:d9:89:bc:17:3f:0f:9e:3f:ec:06:2a:6d:6f: a5:67:9a:41:0d:70:d6:a3:5a:93:3d:71:66:23:25: a9:d0:9a:f6:99:ac:ec:b0:ea:3a:c6:58:c6:0b:f9: e0:f6:4b:53:ac:c3:c1:49:27:f0:6c:6d:40:30:ec: c5:c2:dd:22:fc:e8:99:fd:dd:55:cf:11:b5:8a:df: 63:27:00:95:44:1d:e3:0f:9f:ce:df:f2:31:a5:6c: 53:9c:74:d9:cb:0f:5a:37:cf:2a:ab:78:1b:6c:95: b2:d7:3a:b9:84:a0:84:42:e6:97:f4:ba:c9:5a:d3: 54:49:14:3d:3a:ce:d3:fa:ce:8a:13:3e:a1:df:0d: 1a:b7:f7:00:71:c4:c0:9e:5a:7d:55:d9:d7:06:3b: 5d:45:4e:82:68:90:fe:fe:8f:f4:35:3a:6f:b2:43: 08:51:3f:97:18:d1:52:01:68:d5:a0:d7:33:81:bf: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:03:4A:4C:A5:9E:D5:B3:25:E2:8A:EC:B8:30:FB:43:53:C6:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/5260488b-3dc9-3883-8d68-3d6c2ef502f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6a:f6:df:0e:0a:51:4b:56:c6:b4:f6:b3:91:6c:41:92:e2: 14:9b:24:36:89:c0:19:ea:f5:51:bc:d3:d1:00:57:72:11:c6: 65:a4:37:df:b6:12:60:5b:fa:36:76:d0:c5:e9:a7:c6:42:08: da:24:bb:54:58:c9:d7:ff:da:12:8c:a6:0f:d2:fb:18:df:41: 7d:1e:d2:b6:42:03:8a:e2:5d:03:c4:d5:0d:e3:30:64:e8:6e: e9:71:5e:f2:41:b1:09:f1:12:24:23:5d:33:71:a9:ee:7d:c0: 30:55:99:1b:68:eb:0b:04:f3:f5:31:2e:8f:68:91:58:31:71: 43:d8:e9:dd:61:66:22:41:9b:5f:07:f8:86:83:a3:14:53:21: 6a:0b:44:9b:c3:c8:fa:96:15:28:9a:e1:13:76:97:de:d8:b7: a0:99:6e:35:0d:5c:4b:7d:56:d3:54:a3:70:73:5d:ed:aa:98: 83:c0:d1:39:45:b3:d6:5b:90:f8:da:06:24:1d:be:af:d0:fc: d1:5e:34:41:bb:fb:79:fc:91:98:11:94:79:96:2a:da:d1:d8: 95:59:2b:19:ed:b7:09:d0:8a:89:a8:55:91:17:03:18:4b:ed: bb:cc:0c:22:9c:3a:70:cc:af:a6:f7:72:0b:74:6e:27:e1:76: 54:9d:67:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnh7JTX9LiLY2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk M2M1Y2Q0ZjgtZmM4Zi00Zjk1LWI2ZWQtYTljYTFjY2Y2ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSy771zTNhhwcNT8D0cJA7Ju7xuNENDtImDw b+qcDnJUW+1gdUnAHpvmQofYf8fKMOAE4sFdw1LFGrGU3SdJauSGxTyy5mYxSSuU iNmJvBc/D54/7AYqbW+lZ5pBDXDWo1qTPXFmIyWp0Jr2mazssOo6xljGC/ng9ktT rMPBSSfwbG1AMOzFwt0i/OiZ/d1VzxG1it9jJwCVRB3jD5/O3/IxpWxTnHTZyw9a N88qq3gbbJWy1zq5hKCEQuaX9LrJWtNUSRQ9Os7T+s6KEz6h3w0at/cAccTAnlp9 VdnXBjtdRU6CaJD+/o/0NTpvskMIUT+XGNFSAWjVoNczgb/YrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfNA0pMpZ7VsyXiiuy4MPtDU8YXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvNTI2MDQ4OGItM2RjOS0z ODgzLThkNjgtM2Q2YzJlZjUwMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpq9t8OClFLVsa09rORbEGS4hSbJDaJwBnq9VG809EAV3IRxmWkN9+2 EmBb+jZ20MXpp8ZCCNoku1RYydf/2hKMpg/S+xjfQX0e0rZCA4riXQPE1Q3jMGTo bulxXvJBsQnxEiQjXTNxqe59wDBVmRto6wsE8/UxLo9okVgxcUPY6d1hZiJBm18H +IaDoxRTIWoLRJvDyPqWFSia4RN2l97Yt6CZbjUNXEt9VtNUo3BzXe2qmIPA0TlF s9ZbkPjaBiQdvq/Q/NFeNEG7+3n8kZgRlHmWKtrR2JVZKxnttwnQiomoVZEXAxhL 7bvMDCKcOnDMr6b3cgt0bifhdlSdZ30= -----END CERTIFICATE-----Generated at Sat Aug 23 11:09:50 2025 by rpki-client