$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa File: 6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa (raw, json) Hash identifier: CZnXQB1P2x2vrjGcAixMjoru0MB6VD31DKmAd8i/HyA= Subject key identifier: 47:F7:53:D1:05:19:6F:17:2C:82:BA:1E:70:BE:56:91:5D:D9:1B:11 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584A305032DD6E1342F5D632EE80 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 46432 IP address blocks: 208.88.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:32:dd:6e:13:42:f5:d6:32:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=e1390d50-180c-47c0-8590-d5072a67a31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:84:87:fd:f4:12:4d:51:1e:9f:45:a3:dd: cb:73:67:7c:b0:9d:c0:2b:bc:12:b7:5e:14:86:9f: 09:29:ae:e6:59:5b:34:a3:71:bb:3e:3d:15:0b:66: aa:03:98:76:f8:9a:d0:52:b2:71:07:82:52:e4:80: 4e:56:80:82:45:fa:56:1e:2d:14:3c:1c:bf:52:07: d0:bb:e6:fe:54:89:21:1f:20:ad:44:60:68:eb:55: fb:7d:85:25:b4:99:02:c5:6e:aa:f7:ea:3a:3f:26: 63:86:d3:6e:89:99:ac:ab:bd:51:6b:01:37:49:b2: 55:79:a6:9a:9e:99:54:6e:87:4c:40:bf:1d:fd:17: 3f:d2:c9:33:ee:cb:6b:1a:a9:9b:2f:b9:b0:a9:a8: 02:75:b3:16:8a:d2:01:0c:ab:7b:ee:87:a7:63:bf: 05:e5:26:17:33:f9:cf:99:4b:bb:74:06:53:42:4a: 7e:ab:8b:bd:85:2e:cf:11:74:e1:b5:3e:04:6c:d2: 04:41:10:25:83:57:36:74:ec:45:5e:45:b2:2f:58: 71:8c:a1:dc:7e:d1:47:60:c5:3d:e2:76:bc:62:04: 75:dc:89:72:4d:e2:79:1d:36:25:43:87:2c:f1:8c: c9:a9:66:e2:60:6f:1c:31:79:1c:eb:ab:ab:b2:07: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F7:53:D1:05:19:6F:17:2C:82:BA:1E:70:BE:56:91:5D:D9:1B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6d:3f:63:5f:a0:90:ad:62:7a:46:13:97:2b:c3:5a:66:94: c4:da:b8:bb:df:0f:27:af:ff:86:06:78:92:a5:9f:27:33:9b: de:62:d8:6e:f2:56:94:ee:a8:a7:da:f2:04:20:1f:a2:15:64: f6:1c:de:2c:67:97:97:ed:43:db:e9:88:ea:dd:f9:70:ef:e9: 8b:ea:3d:6d:77:ef:d6:e3:b5:d4:2d:91:85:11:a2:c2:6a:20: b7:da:64:31:58:22:45:55:ea:ba:8b:69:97:92:bb:c0:5e:d7: 52:67:61:9e:d1:df:0a:26:32:c6:13:69:90:86:9c:b7:ff:42: 96:07:24:2f:cd:98:bf:33:bf:6c:e7:f6:4d:94:62:86:0f:3b: 1a:36:bb:2b:73:39:e9:1e:a1:48:1f:07:2b:c8:0c:4c:5c:9f: 95:e4:2f:17:19:6b:95:9a:6b:6a:7a:62:10:0f:f6:c0:87:16: 6b:25:b8:0c:82:77:60:1b:3a:c7:52:b0:f5:fd:f6:84:03:6d: bd:42:69:ac:ed:43:07:28:7d:ae:8f:46:79:3b:de:83:de:0b: a1:0b:5e:8e:b3:5f:68:7d:e1:17:47:52:ba:9f:95:8c:20:e6: cb:cc:43:52:ac:93:25:3c:ad:7c:45:b6:22:a9:12:62:d8:0a: 6b:f3:17:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDLdbhNC9dYy7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTEzOTBkNTAtMTgwYy00N2MwLTg1OTAtZDUwNzJhNjdhMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWCEh/30Ek1RHp9Fo93Lc2d8sJ3AK7wSt14U hp8JKa7mWVs0o3G7Pj0VC2aqA5h2+JrQUrJxB4JS5IBOVoCCRfpWHi0UPBy/UgfQ u+b+VIkhHyCtRGBo61X7fYUltJkCxW6q9+o6PyZjhtNuiZmsq71RawE3SbJVeaaa nplUbodMQL8d/Rc/0skz7strGqmbL7mwqagCdbMWitIBDKt77oenY78F5SYXM/nP mUu7dAZTQkp+q4u9hS7PEXThtT4EbNIEQRAlg1c2dOxFXkWyL1hxjKHcftFHYMU9 4na8YgR13IlyTeJ5HTYlQ4cs8YzJqWbiYG8cMXkc66ursgeNjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf3U9EFGW8XLIK6HnC+VpFd2RsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNjEwOWI5ZTktOWYxNC0z NDMyLWEzNTAtNGUyYmE3ZjQ5ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBtP2NfoJCtYnpGE5crw1pmlMTauLvfDyev/4YGeJKlnyczm95i2G7y VpTuqKfa8gQgH6IVZPYc3ixnl5ftQ9vpiOrd+XDv6YvqPW1379bjtdQtkYURosJq ILfaZDFYIkVV6rqLaZeSu8Be11JnYZ7R3womMsYTaZCGnLf/QpYHJC/NmL8zv2zn 9k2UYoYPOxo2uytzOekeoUgfByvIDExcn5XkLxcZa5Waa2p6YhAP9sCHFmsluAyC d2AbOsdSsPX99oQDbb1CaaztQwcofa6PRnk73oPeC6ELXo6zX2h94RdHUrqflYwg 5svMQ1KskyU8rXxFtiKpEmLYCmvzFxU= -----END CERTIFICATE-----Generated at Tue Jul 1 05:37:45 2025 by rpki-client