$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa File: a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa (raw, json) Hash identifier: rALF9am6kKvXU4ZGxBHvod4TEDX4qcQ04P5qJzGrYz0= Subject key identifier: C7:D2:8A:2C:E9:31:39:E9:5F:7A:C8:A8:DA:66:8A:E0:C1:14:F8:34 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A3FAADD9C95F27AD12AF9B700 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 22652 IP address blocks: 208.88.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:dd:9c:95:f2:7a:d1:2a:f9:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=0e2a03ad-2c7c-4507-bf8b-1d944b5aaf74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:73:e6:f2:bc:a2:57:15:27:53:91:aa:da: 24:f1:88:00:6a:45:ae:1d:f9:90:8a:5d:ac:d9:77: e6:96:b0:71:0e:75:b5:ec:fa:fe:12:c4:f9:9c:15: fc:66:20:98:d2:04:b0:ef:40:13:fa:c1:e1:b7:ba: b5:67:9e:fb:ff:9f:9e:54:ec:bb:88:5a:4c:03:3f: 02:30:75:89:63:f0:55:74:e6:50:80:29:07:2d:51: da:a5:df:18:e4:32:2d:89:dd:49:39:a9:bb:2f:67: 53:30:c6:22:63:68:a3:3c:63:8c:52:09:e6:8d:82: b5:e8:4d:a9:9d:07:b5:3e:c3:a8:8d:52:27:c7:00: 22:e6:b3:a8:a5:73:cd:4a:25:4e:bc:8d:46:7b:a5: 02:5a:a8:52:69:50:1a:47:d2:4f:aa:62:27:dd:fd: 07:ae:31:9f:39:06:7f:d9:68:a0:3c:a8:8c:e9:19: 73:e7:6e:1d:34:77:7a:4f:25:dd:99:37:c2:f8:68: 6b:72:a0:05:55:c0:17:e0:bc:7f:1c:3b:0c:6a:1f: f8:03:47:44:d7:e1:dd:eb:53:d9:74:83:4a:fa:4f: 51:39:55:cb:39:89:a7:8f:65:59:47:f2:2b:07:64: bf:59:c6:1e:39:17:04:c6:1c:89:f8:fa:5b:4d:e3: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D2:8A:2C:E9:31:39:E9:5F:7A:C8:A8:DA:66:8A:E0:C1:14:F8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a8b2cf8e-5352-36e9-8065-b9e49d8fbf55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 208.88.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:1d:9e:97:b2:50:46:35:37:de:bf:e7:1f:7e:8f:e6:19:72: f6:f0:37:58:b9:d8:4b:b3:37:35:d8:5e:36:59:26:ae:65:e9: 9a:3f:e1:5a:8e:97:4c:d0:2f:58:60:16:06:9b:c2:a0:3a:a1: db:1e:13:e0:4a:43:a3:2a:14:92:eb:2f:bb:18:47:84:7e:d2: ec:52:1b:55:cc:93:15:c2:1d:ff:45:ce:a8:f3:cc:62:c2:29: 53:18:94:6b:75:40:31:f5:28:be:7f:38:d8:32:ca:bb:1c:f0: b2:fc:be:7f:ba:1b:17:a2:00:56:c7:2b:e1:70:e7:f3:83:05: a9:8e:aa:77:0e:df:b7:57:80:5e:21:90:4f:4a:f4:5c:be:a4: 0c:b4:bf:36:69:31:cd:3b:bc:80:a7:4e:07:26:37:7d:a2:cc: 23:db:d6:21:85:57:55:e5:ef:98:5e:e6:f8:88:3f:15:76:08: 26:f5:f0:9b:3d:76:bc:e8:85:0a:1a:49:d0:30:95:b4:66:ae: 1a:0a:41:df:74:be:49:8c:b4:d8:70:cc:1d:0a:ff:21:20:2a: 81:b3:e3:54:f4:5e:3c:6a:0d:9a:e3:79:87:f8:01:59:3f:cf: 3c:ec:bd:c6:57:55:77:41:80:4b:2e:ca:73:2d:04:03:26:a7: d3:a8:86:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qt2clfJ60Sr5twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk MGUyYTAzYWQtMmM3Yy00NTA3LWJmOGItMWQ5NDRiNWFhZjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Zz5vK8olcVJ1ORqtok8YgAakWuHfmQil2s 2XfmlrBxDnW17Pr+EsT5nBX8ZiCY0gSw70AT+sHht7q1Z577/5+eVOy7iFpMAz8C MHWJY/BVdOZQgCkHLVHapd8Y5DItid1JOam7L2dTMMYiY2ijPGOMUgnmjYK16E2p nQe1PsOojVInxwAi5rOopXPNSiVOvI1Ge6UCWqhSaVAaR9JPqmIn3f0HrjGfOQZ/ 2WigPKiM6Rlz524dNHd6TyXdmTfC+GhrcqAFVcAX4Lx/HDsMah/4A0dE1+Hd61PZ dINK+k9ROVXLOYmnj2VZR/IrB2S/WcYeORcExhyJ+PpbTePfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfSiizpMTnpX3rIqNpmiuDBFPg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYThiMmNmOGUtNTM1Mi0z NmU5LTgwNjUtYjllNDlkOGZiZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwdnpeyUEY1N96/5x9+j+YZcvbwN1i52EuzNzXYXjZZJq5l6Zo/4VqO l0zQL1hgFgabwqA6odseE+BKQ6MqFJLrL7sYR4R+0uxSG1XMkxXCHf9FzqjzzGLC KVMYlGt1QDH1KL5/ONgyyrsc8LL8vn+6GxeiAFbHK+Fw5/ODBamOqncO37dXgF4h kE9K9Fy+pAy0vzZpMc07vICnTgcmN32izCPb1iGFV1Xl75he5viIPxV2CCb18Js9 drzohQoaSdAwlbRmrhoKQd90vkmMtNhwzB0K/yEgKoGz41T0XjxqDZrjeYf4AVk/ zzzsvcZXVXdBgEsuynMtBAMmp9OohpU= -----END CERTIFICATE-----Generated at Tue Jul 1 20:00:19 2025 by rpki-client