$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/248ff026-035f-3746-88ef-4fb028393c6e.roa File: 248ff026-035f-3746-88ef-4fb028393c6e.roa (raw, json) Hash identifier: aAyYBC/xTIY5UmaiFAhzqriQa1cIT6mPMLbdYSMrV38= Subject key identifier: 53:B8:2B:2F:AB:E5:11:7A:32:88:CB:30:AD:36:34:80:15:47:37:26 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584AC5AB922CB0DDA2C413699C80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/248ff026-035f-3746-88ef-4fb028393c6e.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 16696 IP address blocks: 209.59.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:92:2c:b0:dd:a2:c4:13:69:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=cdf0d978-107d-4867-91f1-dceda94be386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:71:e5:b9:eb:d6:6f:26:3f:f5:7b:45:ea: da:63:1f:4e:2c:3f:28:ae:e1:7c:4c:30:5e:85:9c: 90:db:f7:57:ad:51:df:0e:49:7d:10:2f:63:04:a4: 80:0c:02:65:88:37:61:cd:5d:4c:c4:ab:5f:7b:a1: ce:0b:59:33:a8:c0:4b:ae:f3:8d:eb:3c:dc:b6:e2: 79:93:e3:19:12:f4:4e:e7:ad:ef:fd:54:7b:ed:db: 9e:7b:df:3f:be:af:5d:76:16:a2:12:62:3f:25:f9: 0f:48:57:ed:e1:e0:ba:67:90:f3:6b:12:d0:59:da: 2d:46:f8:98:ea:be:49:2b:9b:e5:32:f2:6a:0f:81: 26:8f:be:0c:0b:1d:7b:0c:17:ea:f5:be:6e:2d:2d: b3:55:45:2e:28:30:d5:24:63:3f:2f:a3:5c:57:6a: d8:32:fb:4d:4a:e1:9f:db:2c:dd:b4:aa:21:a2:c4: 6b:56:21:de:a6:3a:aa:d9:77:54:e5:92:f1:bb:44: 4c:99:e5:c6:62:fd:2c:51:9c:3a:c6:af:ae:79:f1: 23:bb:73:37:08:ac:35:5e:01:6c:41:8e:fd:48:44: 88:8e:4c:64:6f:c1:32:31:95:1f:0b:70:f4:9f:46: dc:79:aa:38:f8:e6:3f:21:48:fe:e8:3c:72:39:9e: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B8:2B:2F:AB:E5:11:7A:32:88:CB:30:AD:36:34:80:15:47:37:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/248ff026-035f-3746-88ef-4fb028393c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 209.59.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a9:c4:6b:c2:94:da:ee:e4:70:8e:0c:57:d3:43:c3:e4:4e: c7:89:40:69:7d:6f:d8:5e:e9:ea:bc:42:af:dd:7f:80:e2:f1: e5:25:1d:f5:b6:03:03:5a:fc:e5:f2:21:e1:fd:d2:f1:34:38: f2:66:b2:60:ec:5c:c6:55:31:d7:14:1d:42:be:71:80:e0:01: 1e:9d:a9:6a:f8:7b:e9:86:77:9f:68:f8:b7:e6:8d:49:35:29: 41:ad:8e:b3:f0:61:8a:04:3f:c3:cc:3f:e4:99:ed:82:41:dd: ca:08:1a:5d:61:ed:7b:03:de:35:0e:08:32:3c:24:b0:db:a5: 36:4e:f9:f3:2c:5f:52:7c:52:4a:8f:f9:03:c3:7e:70:3e:13: 63:9b:7b:7a:7b:54:ab:61:6f:d4:78:97:f5:f7:d2:9e:2a:da: 94:32:dc:70:13:68:80:9d:f2:83:f9:d5:a4:1f:f0:7b:8a:0e: 09:17:c2:7d:0a:26:58:63:9b:7e:e9:b6:8c:39:0e:45:02:a3: 10:27:16:e3:6c:9b:a9:c5:bd:fa:cd:1e:3f:8c:93:d9:e7:06: 5c:2d:57:f2:43:75:76:95:a2:99:fb:64:a1:5a:89:5c:f9:c4: ad:6b:3b:8e:28:0d:85:fa:a9:5d:f5:6a:bd:6c:81:29:88:d1: e2:3d:56:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5IssN2ixBNpnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2RmMGQ5NzgtMTA3ZC00ODY3LTkxZjEtZGNlZGE5NGJlMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwhx5bnr1m8mP/V7ReraYx9OLD8oruF8TDBe hZyQ2/dXrVHfDkl9EC9jBKSADAJliDdhzV1MxKtfe6HOC1kzqMBLrvON6zzctuJ5 k+MZEvRO563v/VR77duee98/vq9ddhaiEmI/JfkPSFft4eC6Z5DzaxLQWdotRviY 6r5JK5vlMvJqD4Emj74MCx17DBfq9b5uLS2zVUUuKDDVJGM/L6NcV2rYMvtNSuGf 2yzdtKohosRrViHepjqq2XdU5ZLxu0RMmeXGYv0sUZw6xq+uefEju3M3CKw1XgFs QY79SESIjkxkb8EyMZUfC3D0n0bceao4+OY/IUj+6DxyOZ4f8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO4Ky+r5RF6MojLMK02NIAVRzcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjQ4ZmYwMjYtMDM1Zi0z NzQ2LTg4ZWYtNGZiMDI4MzkzYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Tv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6pxGvClNru5HCODFfTQ8PkTseJQGl9b9he6eq8Qq/df4Di8eUlHfW2 AwNa/OXyIeH90vE0OPJmsmDsXMZVMdcUHUK+cYDgAR6dqWr4e+mGd59o+LfmjUk1 KUGtjrPwYYoEP8PMP+SZ7YJB3coIGl1h7XsD3jUOCDI8JLDbpTZO+fMsX1J8UkqP +QPDfnA+E2Obe3p7VKthb9R4l/X30p4q2pQy3HATaICd8oP51aQf8HuKDgkXwn0K Jlhjm37ptow5DkUCoxAnFuNsm6nFvfrNHj+Mk9nnBlwtV/JDdXaVopn7ZKFaiVz5 xK1rO44oDYX6qV31ar1sgSmI0eI9Vj4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:35:33 2025 by rpki-client