$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa File: ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa (raw, json) Hash identifier: K9rGs94XLB0+KptHkY5YrqsdIapJ3t/jFoqJ/j190gc= Subject key identifier: 09:3D:67:E4:3A:74:94:6D:E4:B2:C2:5B:20:B0:67:C6:BF:5B:87:8D Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584AF52143F5318C015E75633680 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 30383 IP address blocks: 198.208.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:43:f5:31:8c:01:5e:75:63:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=49db98cd-dd11-46cf-a0c0-a2aae04f4379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:7d:6c:d0:c5:06:76:ab:59:4e:91:2d:1f: 4f:77:b6:7e:4b:88:af:be:7f:47:0c:a4:26:da:fa: 57:3d:d3:be:b3:bf:6f:d7:10:04:d8:dd:80:01:74: a1:ef:17:48:41:98:1a:a0:13:ce:18:b2:2b:40:04: 16:3d:96:59:55:0a:1a:d6:7f:ae:ad:f3:23:78:c8: 32:ee:36:19:85:fa:78:a7:49:f8:1e:50:f0:99:4d: 8d:f4:1e:bb:1e:5b:0d:3a:f4:15:e8:ee:d9:87:0c: dd:62:94:8f:39:13:ad:1a:32:8e:65:00:cc:0e:79: 28:fe:eb:05:be:b9:b7:35:37:bc:53:b5:79:c7:c0: 48:9d:4f:03:c0:3e:52:60:cf:e7:32:46:80:c0:7d: be:84:02:0f:5e:85:76:fa:bd:4b:29:86:23:28:c4: 9e:b3:80:eb:e3:4d:64:44:c8:00:74:54:7a:f0:b5: aa:0a:04:9d:0a:6d:d3:d4:79:96:25:54:32:5c:c0: 99:1c:55:d8:5a:13:cc:4d:da:2f:22:e1:74:52:48: 39:e6:77:70:f7:45:15:07:6a:bb:bf:1b:5e:35:96: 16:70:e7:5a:b5:0f:16:f8:12:b1:03:9f:76:10:d1: 6d:63:b8:8d:90:f1:80:53:29:c1:84:76:24:0d:68: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3D:67:E4:3A:74:94:6D:E4:B2:C2:5B:20:B0:67:C6:BF:5B:87:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:91:d7:76:45:f0:a8:22:c8:b4:22:60:16:a2:74:c5:3f:48: 99:a4:9e:4a:7f:bc:8f:87:5a:39:1f:da:89:54:79:4f:3d:dc: e7:4b:7d:5b:35:c2:d7:a2:fd:78:17:b3:a3:2f:7f:0e:29:91: 2e:52:d1:71:fd:5e:5b:98:31:a5:ba:d5:0a:59:27:a3:43:ff: 8a:33:0e:8e:b9:2d:be:fc:db:10:b6:de:a1:7b:b8:f4:22:8f: bc:c0:80:57:f7:30:9d:96:6f:94:55:3c:9b:d8:64:a9:ac:19: 89:d6:f0:a0:ba:d3:ed:6c:cc:07:06:5c:a9:d5:9c:fa:e1:45: dc:0f:1b:c0:0f:30:3c:bb:bc:57:07:f5:a3:5e:23:0c:3c:43: 58:2f:02:d3:4c:e4:99:f6:5a:83:36:0b:d5:2b:59:4a:91:0e: a5:2e:2d:23:cf:b3:5e:b9:59:3e:49:4c:d1:ff:f7:c0:2f:fa: 26:63:77:28:1d:55:e2:49:3c:39:aa:3e:67:a3:0e:c1:0c:a4: 07:26:ab:00:37:ab:62:81:ae:a0:01:d7:51:3b:f1:4b:f4:e3: 94:29:36:cc:a4:5e:b7:85:76:27:58:25:8c:73:0b:36:e2:04: c4:ae:07:48:38:5d:17:26:c2:6e:7a:7e:d4:0d:25:c4:23:5e: cf:fa:57:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUP1MYwBXnVjNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDlkYjk4Y2QtZGQxMS00NmNmLWEwYzAtYTJhYWUwNGY0Mzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R59bNDFBnarWU6RLR9Pd7Z+S4ivvn9HDKQm 2vpXPdO+s79v1xAE2N2AAXSh7xdIQZgaoBPOGLIrQAQWPZZZVQoa1n+urfMjeMgy 7jYZhfp4p0n4HlDwmU2N9B67HlsNOvQV6O7ZhwzdYpSPOROtGjKOZQDMDnko/usF vrm3NTe8U7V5x8BInU8DwD5SYM/nMkaAwH2+hAIPXoV2+r1LKYYjKMSes4Dr401k RMgAdFR68LWqCgSdCm3T1HmWJVQyXMCZHFXYWhPMTdovIuF0Ukg55ndw90UVB2q7 vxteNZYWcOdatQ8W+BKxA592ENFtY7iNkPGAUynBhHYkDWg5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk9Z+Q6dJRt5LLCWyCwZ8a/W4eNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWJjMjRkYWMtZDA4ZS0z MzY3LWE2ZDEtNmJhMjI5NzBlMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCR13ZF8KgiyLQiYBaidMU/SJmknkp/vI+HWjkf2olUeU893OdLfVs1 wtei/XgXs6Mvfw4pkS5S0XH9XluYMaW61QpZJ6ND/4ozDo65Lb782xC23qF7uPQi j7zAgFf3MJ2Wb5RVPJvYZKmsGYnW8KC60+1szAcGXKnVnPrhRdwPG8APMDy7vFcH 9aNeIww8Q1gvAtNM5Jn2WoM2C9UrWUqRDqUuLSPPs165WT5JTNH/98Av+iZjdygd VeJJPDmqPmejDsEMpAcmqwA3q2KBrqAB11E78Uv045QpNsykXreFdidYJYxzCzbi BMSuB0g4XRcmwm56ftQNJcQjXs/6V9M= -----END CERTIFICATE-----Generated at Sun Aug 24 06:00:57 2025 by rpki-client