$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa File: 2d29c9cc-f352-359a-a680-78348c95a6e1.roa (raw, json) Hash identifier: 9Nk8tFj5kXDnpwRvz+LjvEsLU/QE/PSveI/a642jLJc= Subject key identifier: 7D:67:11:1B:B4:20:BC:F6:50:6B:52:8A:CA:0B:C2:34:8F:14:7D:4A Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584AE89124AFBF1B2E8887D92640 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 32788 IP address blocks: 208.88.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:24:af:bf:1b:2e:88:87:d9:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=5384102f-5d5a-4d21-8498-bc494df18633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:17:8f:2d:97:e3:be:c8:fe:be:52:5c:dd: 52:94:4b:d5:99:b2:e2:0d:4e:de:47:05:7e:09:52: ab:2c:f1:4f:8d:fe:b8:4b:bb:7c:b6:f8:8d:c6:01: 77:d1:c5:98:66:ed:e3:b0:91:2e:ca:ee:6a:2d:5e: 0a:dc:ed:98:28:d8:da:d0:f0:6a:8a:73:d7:ed:14: 2d:3d:f4:af:07:4a:36:c9:e4:7f:7c:c4:99:e3:15: de:3a:39:00:74:72:c2:c3:13:47:86:b1:45:70:0a: 54:c4:e3:3c:f1:e7:82:5f:70:8e:00:d0:0c:ca:dd: cb:4e:9a:9b:a9:da:2b:75:59:d2:fa:d8:cb:be:88: 88:92:f9:0b:6d:94:46:d9:24:7e:8a:58:f6:d0:f4: bc:af:4c:7d:2c:7d:a6:d4:eb:80:04:8d:f4:13:ce: 30:c7:d2:ce:3d:dd:e4:5c:2d:91:62:7e:6b:56:67: b7:64:bb:c3:b1:3f:59:9b:05:57:e5:37:83:b3:f8: bc:34:5d:35:ac:55:d3:63:24:3f:a6:ae:b6:52:5e: 85:3e:54:23:e9:8b:4b:3b:e6:f3:c5:9f:67:80:45: 63:d6:b6:46:df:8c:83:86:f7:b8:62:25:7a:d1:27: 38:a1:5e:fa:62:07:61:d0:c0:6e:cd:cb:32:f6:05: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:67:11:1B:B4:20:BC:F6:50:6B:52:8A:CA:0B:C2:34:8F:14:7D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:99:32:c1:68:e5:57:16:cb:d7:47:3f:b0:99:26:55:40:53: 7e:3f:83:fe:9b:2e:26:5c:1f:05:aa:e0:81:54:41:2b:44:f0: 5c:9c:75:76:53:b5:69:c5:2a:14:49:14:22:c5:b2:1b:20:77: 6b:87:99:53:ca:f5:9c:3d:82:74:f3:26:f1:f4:97:88:8e:c2: a1:63:68:7a:dd:82:25:61:32:f2:8e:2d:19:3f:64:52:7e:42: fa:3f:bb:1e:fa:74:3d:55:23:bd:10:ab:93:68:a3:05:4a:5c: c1:f8:6d:27:ff:1b:f3:73:6b:58:11:0e:8c:6a:56:86:89:d3: e0:72:ec:d7:53:d5:9b:0b:e2:8e:f5:5c:08:92:66:02:3a:b0: a6:2a:db:7b:af:d4:5d:78:99:61:d8:30:77:3b:31:1e:e3:fb: 33:9e:d6:10:8a:31:8c:b2:6f:b2:62:1c:74:91:75:4d:b0:7b: 5f:db:0c:91:8e:56:47:12:30:de:49:31:ef:1d:e9:83:dd:ce: fb:62:f0:6a:ba:de:b7:1b:77:50:25:ea:4e:ca:00:9c:93:a2: 69:8c:59:45:37:f5:de:d7:04:32:48:4c:b0:44:5e:8b:db:35: ab:ca:ac:59:df:7b:45:7a:8e:07:ad:d5:71:40:48:39:20:1a: 04:bc:76:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSSvvxsuiIfZJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NTM4NDEwMmYtNWQ1YS00ZDIxLTg0OTgtYmM0OTRkZjE4NjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxowXjy2X477I/r5SXN1SlEvVmbLiDU7eRwV+ CVKrLPFPjf64S7t8tviNxgF30cWYZu3jsJEuyu5qLV4K3O2YKNja0PBqinPX7RQt PfSvB0o2yeR/fMSZ4xXeOjkAdHLCwxNHhrFFcApUxOM88eeCX3COANAMyt3LTpqb qdordVnS+tjLvoiIkvkLbZRG2SR+ilj20PS8r0x9LH2m1OuABI30E84wx9LOPd3k XC2RYn5rVme3ZLvDsT9ZmwVX5TeDs/i8NF01rFXTYyQ/pq62Ul6FPlQj6YtLO+bz xZ9ngEVj1rZG34yDhve4YiV60Sc4oV76Ygdh0MBuzcsy9gVlewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1nERu0ILz2UGtSisoLwjSPFH1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMmQyOWM5Y2MtZjM1Mi0z NTlhLWE2ODAtNzgzNDhjOTVhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKZMsFo5VcWy9dHP7CZJlVAU34/g/6bLiZcHwWq4IFUQStE8FycdXZT tWnFKhRJFCLFshsgd2uHmVPK9Zw9gnTzJvH0l4iOwqFjaHrdgiVhMvKOLRk/ZFJ+ Qvo/ux76dD1VI70Qq5NoowVKXMH4bSf/G/Nza1gRDoxqVoaJ0+By7NdT1ZsL4o71 XAiSZgI6sKYq23uv1F14mWHYMHc7MR7j+zOe1hCKMYyyb7JiHHSRdU2we1/bDJGO VkcSMN5JMe8d6YPdzvti8Gq63rcbd1Al6k7KAJyTommMWUU39d7XBDJITLBEXovb NavKrFnfe0V6jget1XFASDkgGgS8dsY= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:07 2025 by rpki-client