$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa File: a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa (raw, json) Hash identifier: MHtVPMvluiv1kZlVx0VDmJfPYw2BwPmFRWZuhEsYLt8= Subject key identifier: B2:83:83:2B:69:43:B0:98:8C:8E:78:64:1C:72:B3:00:E9:6C:2A:0F Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584AECC35581DEA7733A34606E00 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 398465 IP address blocks: 208.58.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:55:81:de:a7:73:3a:34:60:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=cf1e5981-2967-4636-ba5f-df26b087a8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:66:f1:11:0a:6c:32:a0:d7:94:b2:f1:10: 84:c6:5c:b5:fb:0e:8e:2a:f2:39:fd:be:5b:23:b9: d9:bf:4c:d2:2a:9d:ea:a9:a7:72:52:a5:16:2c:33: ac:19:4e:d5:3d:f3:77:ed:17:26:d7:ec:e9:5d:3c: 3c:cb:5a:11:ec:66:64:6f:97:29:af:1c:64:f5:be: aa:0c:12:51:67:9c:4c:f6:ad:32:05:b2:48:6c:60: 8c:ee:0a:ba:12:7c:37:97:a5:29:e5:9e:f1:3d:48: 86:dd:50:a2:42:31:7a:a5:e4:07:e5:6c:5a:e4:77: f7:c9:9a:09:14:23:12:07:23:d4:a2:72:3c:73:3f: c9:96:ce:1e:59:3c:ba:f0:af:ea:1b:f4:6c:97:2f: 12:ba:83:d8:40:a7:0d:93:5f:58:19:a5:2b:23:e8: 90:5e:7c:30:3b:ea:a8:9b:03:d5:67:ef:97:ed:d7: da:c1:bf:8e:ae:e3:63:fc:4e:f5:44:50:36:56:bb: 12:09:bc:4b:3e:a6:d8:bf:90:10:25:0c:74:9e:da: 1c:9d:1e:c4:fe:17:c1:c1:b8:c5:90:ba:b5:04:1b: 93:77:05:ee:23:23:1b:11:5b:14:0b:08:7d:fd:9c: 4e:6b:d1:3c:ac:33:2d:0d:ca:18:fc:70:42:ca:42: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:83:83:2B:69:43:B0:98:8C:8E:78:64:1C:72:B3:00:E9:6C:2A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:53:20:12:3b:0f:09:31:63:15:bd:8a:0f:b2:b2:5f:55:0c: 1c:e7:4f:de:b0:ba:3e:57:a5:3f:18:18:c4:24:71:12:8c:26: be:2d:38:60:65:21:92:37:00:ce:d4:15:4c:9e:63:65:7d:73: 11:ed:44:67:bd:16:41:96:d7:08:39:d0:b9:42:48:1c:e6:f9: 71:f5:20:7b:ad:6a:05:3f:b1:7b:ca:a9:50:4a:04:9a:da:77: 0e:43:b1:66:cc:14:2f:5d:30:b9:df:b7:eb:ca:8d:8c:41:9c: 88:8f:75:7e:0a:19:a2:fb:34:b2:db:4e:c4:06:98:27:36:62: f1:da:f4:c9:20:57:64:8f:b9:e0:5f:49:8d:e6:46:4d:1a:42: a7:47:f4:88:73:5b:ee:25:64:75:db:80:1d:19:ce:3f:2a:d7: 89:77:74:65:84:83:71:9e:2a:c5:7d:a9:7c:07:ac:e6:54:9d: 8e:f5:e0:ae:23:bb:90:c7:4b:52:96:7c:f3:04:83:74:96:a4: 03:da:9a:03:76:8e:9f:60:35:52:59:f7:c4:1b:8f:7b:56:43: 1e:62:57:18:46:31:61:73:1a:ab:a1:aa:80:81:8e:43:69:76: 3d:3c:bb:80:c8:91:d6:f0:e3:de:1c:56:a7:a3:1b:6f:0c:6a: b9:15:ec:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw1WB3qdzOjRgbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2YxZTU5ODEtMjk2Ny00NjM2LWJhNWYtZGYyNmIwODdhOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoihm8REKbDKg15Sy8RCExly1+w6OKvI5/b5b I7nZv0zSKp3qqadyUqUWLDOsGU7VPfN37Rcm1+zpXTw8y1oR7GZkb5cprxxk9b6q DBJRZ5xM9q0yBbJIbGCM7gq6Enw3l6Up5Z7xPUiG3VCiQjF6peQH5Wxa5Hf3yZoJ FCMSByPUonI8cz/Jls4eWTy68K/qG/Rsly8SuoPYQKcNk19YGaUrI+iQXnwwO+qo mwPVZ++X7dfawb+OruNj/E71RFA2VrsSCbxLPqbYv5AQJQx0ntocnR7E/hfBwbjF kLq1BBuTdwXuIyMbEVsUCwh9/ZxOa9E8rDMtDcoY/HBCykLmNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKDgytpQ7CYjI54ZBxyswDpbCoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTdjYjQxNDktZWE4Yi0z ZDBlLTgwNzItMWU1ZmNlMjdjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpTIBI7DwkxYxW9ig+ysl9VDBznT96wuj5XpT8YGMQkcRKMJr4tOGBl IZI3AM7UFUyeY2V9cxHtRGe9FkGW1wg50LlCSBzm+XH1IHutagU/sXvKqVBKBJra dw5DsWbMFC9dMLnft+vKjYxBnIiPdX4KGaL7NLLbTsQGmCc2YvHa9MkgV2SPueBf SY3mRk0aQqdH9IhzW+4lZHXbgB0Zzj8q14l3dGWEg3GeKsV9qXwHrOZUnY714K4j u5DHS1KWfPMEg3SWpAPamgN2jp9gNVJZ98Qbj3tWQx5iVxhGMWFzGquhqoCBjkNp dj08u4DIkdbw494cVqejG28MarkV7Bc= -----END CERTIFICATE-----Generated at Sun Aug 24 04:16:19 2025 by rpki-client