$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa File: 2d29c9cc-f352-359a-a680-78348c95a6e1.roa (raw, json) Hash identifier: VmOZhz0d4dHUZH6Cf77ayAv3u1o3YMnA2suiTPo62+0= Subject key identifier: 64:C4:FD:7A:ED:16:5A:B3:6F:A7:7A:D9:0A:96:F9:2C:FB:F1:D3:85 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584A07D52AA7A155E73804319680 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 32788 IP address blocks: 208.88.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2a:a7:a1:55:e7:38:04:31:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=79f75e96-dc8b-4bb4-8572-0cc2ab855770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:8d:f6:90:43:e9:cd:7b:c2:c5:b5:d2:58: 5c:31:ee:3d:bd:0e:6d:a9:3c:bb:50:18:78:19:2d: 37:e1:3b:f0:ef:37:61:ec:42:ed:3d:ef:c4:13:4a: 2e:19:0c:53:3c:5d:0a:59:a9:95:61:33:ff:93:bc: 87:63:78:f6:ee:5d:21:cd:ae:1a:5a:e0:b5:61:33: 32:4f:db:dc:81:59:d3:48:62:c8:e3:64:45:1d:33: 2a:1c:19:ed:9c:aa:a5:d1:f4:df:f5:62:60:df:02: 73:ce:cf:82:bd:f8:ec:bc:09:de:e3:df:a3:60:13: 85:c6:f9:22:15:f2:ca:e5:80:4a:aa:88:51:95:e7: 33:e4:84:c9:f2:a9:ef:56:73:ce:1f:6e:72:36:de: ca:68:b7:26:09:d7:24:6e:78:a3:6e:3d:56:42:c4: 67:c5:83:76:42:39:26:69:c2:66:47:e3:2e:de:70: 2a:ee:18:ba:9c:1a:c9:1f:12:13:fb:99:81:c1:ec: ff:b9:58:35:27:ff:56:16:4a:99:d9:4e:05:6c:03: 3f:b6:cd:f7:c1:a1:ab:2c:fa:e3:91:6f:65:5c:ec: 5f:14:7b:0b:fc:0c:64:2b:60:a9:cc:75:97:fa:32: 2e:4d:0d:67:7f:aa:a5:38:57:38:58:58:97:f7:6b: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C4:FD:7A:ED:16:5A:B3:6F:A7:7A:D9:0A:96:F9:2C:FB:F1:D3:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e4:2d:ff:d6:31:7f:75:07:c7:53:cc:e2:36:ef:8b:48:d4: de:fa:27:94:e9:47:c4:2f:d4:66:f6:28:20:41:7d:5e:6e:9b: b8:df:7f:dc:3f:61:af:ab:b2:eb:f0:96:1f:58:6b:67:3d:ed: 84:f2:b5:48:7b:c4:4c:3a:00:5c:f0:d4:27:ec:a5:29:6c:23: 4d:b4:2b:a8:2b:0f:77:83:06:2d:cd:8c:cd:13:b4:13:4f:24: 6a:31:09:84:fc:d0:0a:00:8d:a1:65:20:eb:27:93:b2:42:95: 13:41:35:14:62:05:10:85:a5:26:c5:81:73:45:5e:51:a8:10: 37:d8:d7:19:22:ee:6e:4e:28:9a:a9:85:c6:a4:70:31:1f:93: 29:02:21:d6:5f:7f:15:03:02:47:76:26:c5:df:fb:8c:bc:c5: 63:2b:e4:e1:8d:92:23:fe:e4:76:92:3a:f4:02:7c:c6:cb:8f: 7c:1d:a8:3f:34:62:b7:44:1d:94:18:c1:b2:7d:2d:46:f6:c9: 3e:ac:78:37:95:15:67:f5:d3:f2:3c:46:19:42:6e:10:5e:5b: 1b:1f:51:75:b7:17:4b:12:0c:ea:66:21:8d:d6:06:7d:e0:6f: 81:15:5a:66:79:75:ad:e6:30:a0:fc:7d:a2:57:77:a7:3f:5a: 97:9c:af:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1SqnoVXnOAQxloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NzlmNzVlOTYtZGM4Yi00YmI0LTg1NzItMGNjMmFiODU1NzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApauN9pBD6c17wsW10lhcMe49vQ5tqTy7UBh4 GS034Tvw7zdh7ELtPe/EE0ouGQxTPF0KWamVYTP/k7yHY3j27l0hza4aWuC1YTMy T9vcgVnTSGLI42RFHTMqHBntnKql0fTf9WJg3wJzzs+CvfjsvAne49+jYBOFxvki FfLK5YBKqohRlecz5ITJ8qnvVnPOH25yNt7KaLcmCdckbnijbj1WQsRnxYN2Qjkm acJmR+Mu3nAq7hi6nBrJHxIT+5mBwez/uVg1J/9WFkqZ2U4FbAM/ts33waGrLPrj kW9lXOxfFHsL/AxkK2CpzHWX+jIuTQ1nf6qlOFc4WFiX92vqzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTE/XrtFlqzb6d62QqW+Sz78dOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMmQyOWM5Y2MtZjM1Mi0z NTlhLWE2ODAtNzgzNDhjOTVhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPkLf/WMX91B8dTzOI274tI1N76J5TpR8Qv1Gb2KCBBfV5um7jff9w/ Ya+rsuvwlh9Ya2c97YTytUh7xEw6AFzw1CfspSlsI020K6grD3eDBi3NjM0TtBNP JGoxCYT80AoAjaFlIOsnk7JClRNBNRRiBRCFpSbFgXNFXlGoEDfY1xki7m5OKJqp hcakcDEfkykCIdZffxUDAkd2JsXf+4y8xWMr5OGNkiP+5HaSOvQCfMbLj3wdqD80 YrdEHZQYwbJ9LUb2yT6seDeVFWf10/I8RhlCbhBeWxsfUXW3F0sSDOpmIY3WBn3g b4EVWmZ5da3mMKD8faJXd6c/Wpecr/8= -----END CERTIFICATE-----Generated at Tue Jul 1 20:02:05 2025 by rpki-client