$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa File: 255f27c3-b702-3202-96f5-5f1614a9bd0c.roa (raw, json) Hash identifier: i6CggFGf9TMjofNcOXn/rOiJ5wp2AwlevQ8HZT2PDhE= Subject key identifier: 42:EE:2E:F0:51:23:1A:13:DD:01:AD:63:80:DA:0A:AB:4F:13:40:B8 Certificate issuer: /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb Certificate serial: 010D0C9F4328584AE8912C2D2C881FFE18016500 Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 19528 IP address blocks: 208.89.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:2c:2d:2c:88:1f:fe:18:01:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=ac0903e8-d983-4766-8e0d-74d2cfa22ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:00:a0:6d:68:c5:cf:b8:e1:a8:69:eb:d7:1c: 7d:1e:40:2d:9a:98:4b:6c:7d:45:72:d0:52:ae:a1: 13:b5:51:01:16:fb:f9:de:ce:a4:76:15:d8:94:3d: 95:1a:6d:56:32:17:db:0b:43:6b:ab:59:a6:7a:08: 2b:34:fe:69:2c:8f:60:1f:df:22:ac:6a:ad:31:47: a1:f8:7b:a0:05:75:fe:a5:71:d8:96:10:a7:ed:a9: 4e:06:17:aa:72:1e:76:5f:6c:91:7c:6e:c7:e1:8a: 98:2d:77:74:02:4d:47:d0:ff:0b:1b:fa:6e:de:41: 81:fd:18:f2:4b:43:30:ca:27:1d:20:79:7e:78:fd: 49:d9:fa:d3:ac:85:b3:62:b2:f5:94:30:88:6c:2b: ab:55:13:52:ca:64:bc:5b:18:92:77:7f:29:00:03: f4:b8:80:ac:6c:66:dc:9e:1f:c0:81:1a:72:8d:ef: 5c:a0:b7:fc:f8:2a:3f:6b:fd:f7:ca:bf:f9:97:71: b4:a5:81:c2:0b:bd:fa:85:f9:5d:b0:ab:d5:14:d5: b6:e5:81:77:f2:b7:6e:28:1a:b2:73:8d:99:c8:c5: 6e:8e:c0:a1:cd:b7:58:74:05:ea:3c:73:4d:c4:b0: d8:81:d2:0e:1d:19:cf:44:41:1a:9d:47:10:92:67: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EE:2E:F0:51:23:1A:13:DD:01:AD:63:80:DA:0A:AB:4F:13:40:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl X509v3 Authority Key Identifier: keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer sbgp-ipAddrBlock: critical IPv4: 208.89.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:02:85:c5:68:34:cd:8b:1e:44:2b:2e:89:26:89:b1:c5:27: 33:5c:f8:3e:d1:30:e1:c9:58:59:08:56:7b:48:72:1e:25:e8: 8a:d0:31:0d:c2:a6:55:14:57:9e:64:74:c6:bc:56:48:0b:21: 62:b7:87:04:9f:58:da:23:56:be:a1:69:e6:ef:f2:2b:8f:cb: 9f:96:03:97:44:b9:05:54:e8:01:9f:ec:83:23:e9:e5:47:ae: 24:00:e4:97:d8:47:d5:77:72:6f:fc:a4:f5:68:0d:64:fe:19: 3f:6e:33:86:5a:be:e6:96:1e:d6:db:94:f2:fc:2a:2b:89:43: 8c:53:64:52:26:8f:09:83:55:7d:5f:22:8f:30:3d:ee:81:94: 0a:da:ed:a1:c2:ac:c8:34:4d:15:b6:6e:20:1b:98:ef:03:a6: 46:15:a4:ae:c1:ef:be:42:31:6f:69:d9:84:06:84:47:00:7e: 1b:58:e8:84:2c:07:29:f6:97:72:f8:6e:99:9d:51:19:1c:a5: ee:de:e5:e9:45:1c:19:1f:04:a8:4d:67:47:93:41:0e:75:fd: 12:3f:7e:ef:3c:16:80:a8:82:39:04:c6:0b:fa:0b:33:86:05: 7b:0c:8b:83:09:bf:a5:f5:b7:2b:ca:11:1f:e3:ff:63:0f:52: 4a:1b:87:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSwtLIgf/hgBZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1ZWRmZjEtMzYwZC00YWUyLWEwNDUtY2NmN2RiYzRi ZWViMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YWMwOTAzZTgtZDk4My00NzY2LThlMGQtNzRkMmNmYTIyZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gCgbWjFz7jhqGnr1xx9HkAtmphLbH1FctBS rqETtVEBFvv53s6kdhXYlD2VGm1WMhfbC0Nrq1mmeggrNP5pLI9gH98irGqtMUeh +HugBXX+pXHYlhCn7alOBheqch52X2yRfG7H4YqYLXd0Ak1H0P8LG/pu3kGB/Rjy S0MwyicdIHl+eP1J2frTrIWzYrL1lDCIbCurVRNSymS8WxiSd38pAAP0uICsbGbc nh/AgRpyje9coLf8+Co/a/33yr/5l3G0pYHCC736hfldsKvVFNW25YF38rduKBqy c42ZyMVujsChzbdYdAXqPHNNxLDYgdIOHRnPREEanUcQkmdDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELuLvBRIxoT3QGtY4DaCqtPE0C4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVl ZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3ZGJjNGJlZWIvMjU1ZjI3YzMtYjcwMi0z MjAyLTk2ZjUtNWYxNjE0YTliZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDQ1ZWRmZjEtMzYwZC00YWUyLWEw NDUtY2NmN2RiYzRiZWViLzQ0NWVkZmYxLTM2MGQtNGFlMi1hMDQ1LWNjZjdkYmM0 YmVlYi5jcmwwHwYDVR0jBBgwFoAUALfGp0iKEmAtlAFMsF6IiFiwUZ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVlZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3 ZGJjNGJlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQChcVoNM2LHkQrLokmibHFJzNc+D7RMOHJWFkIVntIch4l6IrQMQ3C plUUV55kdMa8VkgLIWK3hwSfWNojVr6haebv8iuPy5+WA5dEuQVU6AGf7IMj6eVH riQA5JfYR9V3cm/8pPVoDWT+GT9uM4ZavuaWHtbblPL8KiuJQ4xTZFImjwmDVX1f Io8wPe6BlAra7aHCrMg0TRW2biAbmO8DpkYVpK7B775CMW9p2YQGhEcAfhtY6IQs Byn2l3L4bpmdURkcpe7e5elFHBkfBKhNZ0eTQQ51/RI/fu88FoCogjkExgv6CzOG BXsMi4MJv6X1tyvKER/j/2MPUkobh2o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:49:36 2025 by rpki-client