$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: IiCBpHNubiTy6DL8KMAMHZCvRbRcMxlojqfkZeiBZJw= Subject key identifier: 66:A6:23:AB:31:35:6A:2C:98:C5:33:F5:4F:15:99:BC:31:F6:89:E6 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584ADD667346A8C44E31C10D2900 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:73:46:a8:c4:4e:31:c1:0d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=4505bca3-b5a5-479c-972e-a1dc72be5238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:b5:d4:0c:d6:55:10:ef:55:64:3e:0b:0a: 95:61:15:71:f4:99:1d:96:2a:c2:78:cc:0f:1d:e5: 3b:62:0b:d6:74:d2:4d:c0:18:d0:94:03:c7:d2:0d: e4:c1:1b:0f:bf:18:38:1f:36:3c:ec:0f:51:77:93: 2c:ae:ee:c8:fc:ff:6f:5a:82:12:05:8e:2f:70:85: 51:c6:06:7a:09:3c:cb:d2:3d:4e:99:72:59:80:56: 00:6f:96:0f:73:46:01:b8:7c:fd:3c:79:01:f6:9a: 25:58:23:8b:73:1d:9e:16:cd:24:d9:00:9b:52:50: e9:03:68:73:fc:d4:54:78:04:00:fa:df:e7:ab:a5: e4:78:c8:13:c9:68:e7:98:0c:95:86:c1:dd:e8:10: f3:34:5a:40:68:10:14:32:8c:6e:55:a4:4e:b9:15: 22:a9:c6:20:2d:4c:8b:1b:e1:15:8b:fa:73:10:bb: f7:de:2e:15:85:26:74:92:8d:59:02:40:42:ee:45: 1f:b5:67:08:e1:51:9d:09:dd:e0:1f:2e:62:94:70: 05:35:e6:9b:9c:b1:5e:ce:c2:67:c0:85:f5:f6:f0: dc:4b:81:46:05:26:ba:6f:26:34:c1:a7:77:fc:cd: f5:6a:a0:f0:1a:eb:09:eb:a3:59:68:a7:9e:26:79: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:23:AB:31:35:6A:2C:98:C5:33:F5:4F:15:99:BC:31:F6:89:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:59:1b:90:ab:4d:c0:63:0b:8c:b6:71:ac:56:3e:ee:5f:99: 4f:79:2e:bc:fa:1d:5a:ea:52:93:ac:06:b7:51:1d:eb:7d:73: fd:1a:fa:b6:27:1c:3c:3c:65:aa:36:c2:a3:d5:4b:ed:f7:db: de:e9:16:64:5c:ad:21:f8:4c:4f:7c:96:c1:7c:bd:77:32:c1: 7f:bc:7c:30:74:d3:2c:88:8a:34:31:f9:3f:27:52:10:d9:6a: 8d:93:8b:8e:64:c9:0a:75:57:fa:f9:30:3b:98:05:55:67:e4: cd:47:df:c4:54:3e:1a:2d:30:a1:30:dd:f2:7f:ee:dd:f7:a7: 50:91:61:39:7e:07:de:4d:6f:f8:7f:b9:95:7a:d2:7d:de:81: 21:90:d2:a6:57:71:29:9a:f6:e3:c8:2e:33:93:c8:c2:6f:56: 19:c3:a8:8b:f8:3d:35:85:3f:28:b6:28:92:fe:79:bd:8d:a7: c2:78:01:da:37:f6:80:9b:56:a8:e4:13:61:9a:7b:61:65:99: e3:8a:2a:09:fd:32:66:4a:db:a9:a8:d9:41:ec:46:f3:e2:94: f0:0b:54:12:f4:f2:65:4c:8e:b9:bd:f8:9f:c4:31:9c:b1:d5: e9:60:0b:2f:dd:42:31:44:6f:84:67:ed:fc:dc:7c:0c:38:70: 95:78:d0:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnNGqMROMcENKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NDUwNWJjYTMtYjVhNS00NzljLTk3MmUtYTFkYzcyYmU1MjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA+11AzWVRDvVWQ+CwqVYRVx9JkdlirCeMwP HeU7YgvWdNJNwBjQlAPH0g3kwRsPvxg4HzY87A9Rd5Msru7I/P9vWoISBY4vcIVR xgZ6CTzL0j1OmXJZgFYAb5YPc0YBuHz9PHkB9polWCOLcx2eFs0k2QCbUlDpA2hz /NRUeAQA+t/nq6XkeMgTyWjnmAyVhsHd6BDzNFpAaBAUMoxuVaROuRUiqcYgLUyL G+EVi/pzELv33i4VhSZ0ko1ZAkBC7kUftWcI4VGdCd3gHy5ilHAFNeabnLFezsJn wIX19vDcS4FGBSa6byY0wad3/M31aqDwGusJ66NZaKeeJnkF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGamI6sxNWosmMUz9U8Vmbwx9onmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtZG5CrTcBjC4y2caxWPu5fmU95Lrz6HVrqUpOsBrdRHet9c/0a+rYn HDw8Zao2wqPVS+33297pFmRcrSH4TE98lsF8vXcywX+8fDB00yyIijQx+T8nUhDZ ao2Ti45kyQp1V/r5MDuYBVVn5M1H38RUPhotMKEw3fJ/7t33p1CRYTl+B95Nb/h/ uZV60n3egSGQ0qZXcSma9uPILjOTyMJvVhnDqIv4PTWFPyi2KJL+eb2Np8J4Ado3 9oCbVqjkE2Gae2FlmeOKKgn9MmZK26mo2UHsRvPilPALVBL08mVMjrm9+J/EMZyx 1elgCy/dQjFEb4Rn7fzcfAw4cJV40KI= -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:07 2025 by rpki-client