$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa File: 868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa (raw, json) Hash identifier: t9/6Az5g8aHAY8y7FmblG/nIt9gwy8GYYnHRnxjtOtY= Subject key identifier: E0:19:06:A1:61:06:1C:7E:57:5E:6D:32:C2:A3:10:AF:EC:06:32:FF Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584A07D52F149C43A722547A2A00 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16671 IP address blocks: 208.88.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2f:14:9c:43:a7:22:54:7a:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=439ec681-9265-4467-9fa7-9ca023bb507b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:91:5c:03:61:04:7a:e4:3d:2b:9e:50:6e:e1: 7a:67:d9:ea:a9:5c:98:48:e1:f8:52:b3:ab:a4:e1: 78:cd:6f:43:f4:a0:28:35:57:41:8c:96:46:14:f2: 50:56:e8:d1:3e:8f:a2:e6:dd:12:cf:53:c1:15:c5: 9f:d8:1b:60:01:2b:a8:e3:9e:8c:0b:75:b8:48:f3: a6:b7:0a:c3:c9:2c:2a:58:7a:bb:26:68:fa:4d:a3: 83:bf:01:62:1c:9e:81:fa:fa:76:e8:7a:e9:9a:31: 13:57:24:32:a1:c8:76:62:cd:d0:cf:75:72:fc:3f: ad:bb:7d:34:16:62:20:ff:c8:46:62:55:1e:9a:aa: 11:35:41:3e:98:5e:54:f6:fd:d0:a3:70:41:95:5f: 86:c6:e2:dc:90:58:cd:aa:ee:fc:9c:b5:3d:e7:fb: ff:e9:77:f8:ac:7c:9e:08:80:ca:6b:27:72:de:76: 6a:bf:b1:a6:c9:a2:e3:19:00:46:36:69:59:ac:91: b3:c9:64:48:60:7b:7c:25:c5:48:84:45:1d:17:6d: c3:c6:78:c8:77:4f:6c:07:3c:d5:7e:64:95:fc:3a: 5b:f0:c7:f8:be:cb:51:42:0c:8d:dc:d2:74:ac:91: bf:dc:ef:5b:87:5f:35:5f:11:91:ba:0d:7d:4f:bd: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:19:06:A1:61:06:1C:7E:57:5E:6D:32:C2:A3:10:AF:EC:06:32:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:70:d6:8a:f7:fc:80:04:60:04:cc:8a:a7:a1:30:01:37:96: b4:ff:ad:26:3a:7e:18:a2:ce:c3:45:46:37:a8:24:86:ee:e0: 4f:e6:fb:1e:cd:1e:07:25:4d:60:7d:31:e1:e2:94:76:01:00: 0f:9c:2e:3c:54:b1:7d:fe:85:c3:65:8e:8f:b5:ab:e1:0c:19: 06:ea:48:bf:aa:e4:1e:fc:35:64:5c:d6:73:ef:41:c2:5c:7f: da:02:04:85:d6:dc:20:e7:24:db:b0:c2:ad:b4:1f:e7:8e:61: 90:55:be:eb:64:27:0a:30:17:73:52:ad:d1:96:b8:85:4b:2e: 13:06:1c:ee:c4:81:a0:b6:68:1e:bb:1e:11:1f:a7:16:02:f7: ae:5f:a6:b8:9f:c8:01:f9:b6:fd:74:9e:c7:2d:5a:5e:29:fb: 99:d0:b4:35:ea:b9:bf:97:13:7d:e6:dc:17:fc:1c:aa:78:51: 72:90:41:b2:dd:6c:14:d7:3e:1f:58:78:4c:57:c2:a9:d4:ff: 44:3d:94:a4:90:8c:ef:b1:22:a7:50:46:ba:25:80:bb:d3:8e: 01:7c:3f:d5:b7:e9:9c:69:61:a6:c0:f7:04:65:d3:0c:e4:d8: 2c:eb:ad:27:97:be:84:2b:9d:9e:8c:2d:ad:b1:15:71:8c:3b: 7a:8a:47:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1S8UnEOnIlR6KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk NDM5ZWM2ODEtOTI2NS00NDY3LTlmYTctOWNhMDIzYmI1MDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZFcA2EEeuQ9K55QbuF6Z9nqqVyYSOH4UrOr pOF4zW9D9KAoNVdBjJZGFPJQVujRPo+i5t0Sz1PBFcWf2BtgASuo456MC3W4SPOm twrDySwqWHq7Jmj6TaODvwFiHJ6B+vp26HrpmjETVyQyoch2Ys3Qz3Vy/D+tu300 FmIg/8hGYlUemqoRNUE+mF5U9v3Qo3BBlV+GxuLckFjNqu78nLU95/v/6Xf4rHye CIDKaydy3nZqv7GmyaLjGQBGNmlZrJGzyWRIYHt8JcVIhEUdF23DxnjId09sBzzV fmSV/Dpb8Mf4vstRQgyN3NJ0rJG/3O9bh181XxGRug19T7268wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAZBqFhBhx+V15tMsKjEK/sBjL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvODY4YWE1NDctY2M5My0z MjJmLTlmZDgtOGQ0NTlmMGE4YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5w1or3/IAEYATMiqehMAE3lrT/rSY6fhiizsNFRjeoJIbu4E/m+x7N HgclTWB9MeHilHYBAA+cLjxUsX3+hcNljo+1q+EMGQbqSL+q5B78NWRc1nPvQcJc f9oCBIXW3CDnJNuwwq20H+eOYZBVvutkJwowF3NSrdGWuIVLLhMGHO7EgaC2aB67 HhEfpxYC965fprifyAH5tv10nsctWl4p+5nQtDXqub+XE33m3Bf8HKp4UXKQQbLd bBTXPh9YeExXwqnU/0Q9lKSQjO+xIqdQRrolgLvTjgF8P9W36ZxpYabA9wRl0wzk 2CzrrSeXvoQrnZ6MLa2xFXGMO3qKR1A= -----END CERTIFICATE-----Generated at Wed Jul 2 11:09:09 2025 by rpki-client