$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/5782b9be-07da-3e98-a195-1d05e2c8057b.roa File: 5782b9be-07da-3e98-a195-1d05e2c8057b.roa (raw, json) Hash identifier: FGauaqM1E191CkdrBpO0QUNjmadBMPGCoxL3V9xqaGU= Subject key identifier: 81:3F:19:1E:DA:5F:EF:E7:53:54:BC:46:06:12:40:C6:DB:5B:3A:64 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584AF0F14DC7E2942AF47FB5B0A8 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/5782b9be-07da-3e98-a195-1d05e2c8057b.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 395583 IP address blocks: 208.58.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4d:c7:e2:94:2a:f4:7f:b5:b0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=2a3ba3b2-a687-4a10-a91a-65bb126892f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:e3:93:2e:37:7a:bf:39:fd:c2:fd:76:ec: 2a:69:90:01:44:0f:0f:0c:d4:d5:4a:35:53:ec:db: 74:ea:34:70:8d:f7:91:ce:cc:05:88:b4:05:f6:57: 4a:12:f0:6b:e8:03:f0:8e:c3:7b:ce:4d:a4:ce:d6: 87:01:e7:55:05:87:1e:f1:de:71:fc:d7:40:a9:8d: 39:9f:25:a3:af:7f:4d:a3:96:44:9f:6b:ad:8a:fa: aa:4b:fb:71:75:35:eb:a0:cc:b0:a6:2e:d1:09:87: de:fc:06:27:b5:9f:97:88:02:5e:31:02:06:3b:3f: bb:79:ac:65:04:4e:86:13:ca:80:15:d4:bd:58:5f: 8a:69:6f:11:66:1a:b0:96:53:b1:77:ac:29:3a:1d: 37:35:29:88:5e:14:94:18:8f:82:c1:fd:b5:7e:59: 28:62:54:6d:9f:83:40:f5:5c:53:bc:cf:db:0e:54: da:44:c6:77:80:3a:d1:5b:49:12:b3:a9:ef:db:4f: f0:be:61:a8:d4:85:22:86:87:e7:41:93:ad:0b:5f: e7:ae:c0:cd:a5:73:37:4a:c6:b7:e1:f8:ba:98:00: b4:b2:4d:26:76:ee:5f:52:4d:5e:6c:96:72:c1:26: 0b:ec:cb:b6:f7:e3:38:0a:e9:f2:30:93:72:fc:e4: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3F:19:1E:DA:5F:EF:E7:53:54:BC:46:06:12:40:C6:DB:5B:3A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/5782b9be-07da-3e98-a195-1d05e2c8057b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ee:ee:ed:a2:b1:b1:6b:0e:25:7d:64:d4:d3:81:8d:bf:76: ef:76:67:a9:a7:d2:ea:e5:70:98:2a:5a:61:8b:f6:94:dd:7f: 05:6d:74:4e:96:3b:ec:cf:9a:da:a7:3f:84:67:04:23:8f:a5: 1b:54:3d:33:a5:d8:11:18:42:f2:01:40:4d:d2:f6:3a:8b:02: 1a:37:84:03:b2:76:34:84:49:42:6c:be:82:a0:e8:33:63:62: de:6d:af:b8:20:5f:74:69:a7:f1:ed:af:e0:78:bb:b5:0a:81: 9b:a4:0a:c6:c1:51:ac:77:a9:7e:06:48:ef:48:56:c4:b2:ce: 0f:f5:6a:ad:8c:5d:b9:9b:f8:ec:01:c5:1e:f1:18:7d:a1:c1: fb:ac:fb:b9:6c:d9:42:31:25:ec:10:a5:ff:b6:26:1e:1b:d0: 61:3e:bc:51:79:af:d7:6d:14:54:67:30:9e:8c:ec:e7:10:c3: 94:ed:02:06:46:36:f2:f9:00:0a:3d:d5:70:c4:05:c6:bc:0f: d5:1d:0f:ac:43:c6:38:ff:d1:a0:98:63:ce:9f:ba:97:f3:23: de:45:32:a4:d9:dc:09:5d:d2:94:e2:bb:17:d4:dd:cf:a9:4e: d3:bb:a7:f6:38:ce:cc:7e:72:fe:4d:74:dc:8c:08:40:47:22: 04:1b:ff:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8U3H4pQq9H+1sKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MmEzYmEzYjItYTY4Ny00YTEwLWE5MWEtNjViYjEyNjg5MmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw7jky43er85/cL9duwqaZABRA8PDNTVSjVT 7Nt06jRwjfeRzswFiLQF9ldKEvBr6APwjsN7zk2kztaHAedVBYce8d5x/NdAqY05 nyWjr39No5ZEn2utivqqS/txdTXroMywpi7RCYfe/AYntZ+XiAJeMQIGOz+7eaxl BE6GE8qAFdS9WF+KaW8RZhqwllOxd6wpOh03NSmIXhSUGI+Cwf21flkoYlRtn4NA 9VxTvM/bDlTaRMZ3gDrRW0kSs6nv20/wvmGo1IUihofnQZOtC1/nrsDNpXM3Ssa3 4fi6mAC0sk0mdu5fUk1ebJZywSYL7Mu29+M4CunyMJNy/OQ8ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIE/GR7aX+/nU1S8RgYSQMbbWzpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNTc4MmI5YmUtMDdkYS0z ZTk4LWExOTUtMWQwNWUyYzgwNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DrxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPu7u2isbFrDiV9ZNTTgY2/du92Z6mn0urlcJgqWmGL9pTdfwVtdE6W O+zPmtqnP4RnBCOPpRtUPTOl2BEYQvIBQE3S9jqLAho3hAOydjSESUJsvoKg6DNj Yt5tr7ggX3Rpp/Htr+B4u7UKgZukCsbBUax3qX4GSO9IVsSyzg/1aq2MXbmb+OwB xR7xGH2hwfus+7ls2UIxJewQpf+2Jh4b0GE+vFF5r9dtFFRnMJ6M7OcQw5TtAgZG NvL5AAo91XDEBca8D9UdD6xDxjj/0aCYY86fupfzI95FMqTZ3Ald0pTiuxfU3c+p TtO7p/Y4zsx+cv5NdNyMCEBHIgQb/wY= -----END CERTIFICATE-----Generated at Sun Aug 24 04:22:52 2025 by rpki-client