$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa File: cddcfce5-dc59-36c9-9b2f-1ec929661322.roa (raw, json) Hash identifier: o3gABV59UaoBZsGCv6XRzEPOxTlVCP8Z2ZCNT/nEhRU= Subject key identifier: D1:3F:C6:C3:33:04:E1:DF:FF:BF:39:6E:16:59:17:8A:48:07:B3:79 Certificate issuer: /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97 Certificate serial: 010D0C9F4328584AEE26889028B42C7EB7A4AB80 Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 139247 IP address blocks: 208.99.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:88:90:28:b4:2c:7e:b7:a4:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=ecb1a457-0e95-444b-a7ea-9d2089b4c8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:0d:24:66:78:d9:e1:e3:99:90:b3:fe:c1: db:95:6b:cd:cf:57:f8:c0:65:f6:41:1f:9a:42:81: a2:37:bf:2e:a5:85:56:0c:00:23:6f:62:8b:3d:b8: 32:94:f9:85:99:d6:99:f0:f8:4b:b4:82:74:05:5e: ea:df:ca:98:4b:48:e1:87:18:3c:48:5b:cb:ae:c2: 72:06:27:eb:28:cc:c2:5c:80:29:f9:60:ca:cd:bb: e6:fb:34:54:83:64:2d:94:4e:29:9b:73:4d:4c:c8: 08:3f:ed:8e:bc:c2:ba:d7:97:8e:e1:b0:43:cd:bc: 87:92:bd:d5:4e:d0:2b:69:33:f0:dd:0e:1e:6b:3f: 77:54:ee:f2:ac:a2:f3:00:a0:9a:77:3f:9f:68:da: dc:05:fa:e5:3c:bc:8b:cb:5c:94:d6:9b:a4:cd:82: ae:83:36:0c:63:6f:bb:52:01:7f:1b:c1:cd:e6:ab: a1:c3:62:37:1e:22:4f:38:77:a4:a2:cb:75:0b:79: e7:64:35:d8:0e:40:66:ce:c4:eb:05:e0:3a:43:ca: c4:20:a1:ad:b7:30:4c:e1:86:8b:ae:33:fe:48:d6: c3:b4:f6:53:03:48:ae:18:75:34:a7:e7:e1:ac:fe: e4:5a:0a:6d:f9:99:7c:e1:f7:96:fa:b8:d4:e0:50: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3F:C6:C3:33:04:E1:DF:FF:BF:39:6E:16:59:17:8A:48:07:B3:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl X509v3 Authority Key Identifier: keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer sbgp-ipAddrBlock: critical IPv4: 208.99.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:3a:e8:9d:b0:1d:da:84:dd:25:e7:34:66:ed:96:07:d5:ef: be:48:92:bd:f8:71:cc:b4:96:85:f6:ee:55:a9:cd:8a:b3:6d: 62:fa:5a:a5:db:27:5e:ca:ef:9c:9c:10:4e:d3:d6:43:e9:b3: 60:85:88:d9:3a:5b:db:02:f4:2d:3a:40:64:c3:16:07:88:f6: b6:e0:1c:58:9d:a2:ec:6d:a8:d0:89:6c:6d:49:d2:23:48:a8: cf:6b:d7:d0:46:26:ac:6b:b5:de:b1:50:63:40:a4:62:99:e4: 86:04:d4:28:9c:0b:fe:21:1f:03:10:8a:2e:94:32:1f:de:1e: ab:f4:51:b3:67:42:26:3e:ee:48:b6:95:21:76:b6:62:b6:25: 54:98:dc:06:00:90:14:24:9a:e5:2b:d2:a1:3e:67:c5:02:72: 3c:8b:43:59:cf:5d:d8:8c:0a:e1:3f:30:26:22:4d:43:31:ea: 46:99:86:45:58:6e:0e:63:fc:9e:fe:17:26:74:18:d6:3f:24: fd:3f:12:fc:39:c2:c7:11:ea:ec:1f:55:16:4c:94:b6:fd:dc: 83:cc:53:0d:c2:41:37:be:56:5d:18:53:f4:43:bf:7f:ee:6b: 91:f0:7a:2f:cb:4b:f0:23:36:ee:98:95:f0:c3:3d:91:3e:22: af:7b:c3:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoiQKLQsfrekq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzMzkxMDUtMGRjOC00ZTEzLWFiMGQtMzI3OWE2YjU4 Zjk3MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWNiMWE0NTctMGU5NS00NDRiLWE3ZWEtOWQyMDg5YjRjOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQgNJGZ42eHjmZCz/sHblWvNz1f4wGX2QR+a QoGiN78upYVWDAAjb2KLPbgylPmFmdaZ8PhLtIJ0BV7q38qYS0jhhxg8SFvLrsJy BifrKMzCXIAp+WDKzbvm+zRUg2QtlE4pm3NNTMgIP+2OvMK615eO4bBDzbyHkr3V TtAraTPw3Q4eaz93VO7yrKLzAKCadz+faNrcBfrlPLyLy1yU1pukzYKugzYMY2+7 UgF/G8HN5quhw2I3HiJPOHekost1C3nnZDXYDkBmzsTrBeA6Q8rEIKGttzBM4YaL rjP+SNbDtPZTA0iuGHU0p+fhrP7kWgpt+Zl84feW+rjU4FDdEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE/xsMzBOHf/785bhZZF4pIB7N5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTMz OTEwNS0wZGM4LTRlMTMtYWIwZC0zMjc5YTZiNThmOTcvY2RkY2ZjZTUtZGM1OS0z NmM5LTliMmYtMWVjOTI5NjYxMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmEzMzkxMDUtMGRjOC00ZTEzLWFi MGQtMzI3OWE2YjU4Zjk3L2JhMzM5MTA1LTBkYzgtNGUxMy1hYjBkLTMyNzlhNmI1 OGY5Ny5jcmwwHwYDVR0jBBgwFoAUkLha7pLEmm3od0VgDy13KiYRg8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTMzOTEwNS0wZGM4LTRlMTMtYWIwZC0zMjc5 YTZiNThmOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM66J2wHdqE3SXnNGbtlgfV775Ikr34ccy0loX27lWpzYqzbWL6WqXb J17K75ycEE7T1kPps2CFiNk6W9sC9C06QGTDFgeI9rbgHFidouxtqNCJbG1J0iNI qM9r19BGJqxrtd6xUGNApGKZ5IYE1CicC/4hHwMQii6UMh/eHqv0UbNnQiY+7ki2 lSF2tmK2JVSY3AYAkBQkmuUr0qE+Z8UCcjyLQ1nPXdiMCuE/MCYiTUMx6kaZhkVY bg5j/J7+FyZ0GNY/JP0/Evw5wscR6uwfVRZMlLb93IPMUw3CQTe+Vl0YU/RDv3/u a5Hwei/LS/AjNu6YlfDDPZE+Iq97wwE= -----END CERTIFICATE-----Generated at Sun Aug 24 08:21:22 2025 by rpki-client