$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa File: 54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa (raw, json) Hash identifier: 0reYMD+dbLUF66HGyk+mSaxa8UtsC3TbYEApcSlmQRo= Subject key identifier: F3:1C:6A:79:F5:B3:84:8A:02:B1:7D:F5:55:38:2C:53:C8:D8:06:3D Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE461262F7CED924FCAD8B280 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 208.53.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:26:2f:7c:ed:92:4f:ca:d8:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=8d5c0763-30c2-4f94-a7ef-cd3836abb7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ca:2f:2b:59:45:42:7a:46:0f:e4:fc:55:5c: 38:18:8d:d1:9a:d8:10:ef:dc:6c:e7:b9:87:b9:31: 9b:3d:3a:c3:4c:18:63:84:b8:50:fc:ef:4e:a7:4c: b9:08:bd:8f:21:93:58:c1:1a:af:39:bb:d4:ae:5f: 98:5a:de:e8:8e:8e:d0:ff:96:e8:f6:30:76:54:d0: 34:81:54:e8:e6:c9:fb:ab:78:50:69:c5:ff:19:b4: 95:5b:2c:74:a5:80:72:80:ba:b8:59:68:50:26:df: 23:8e:5c:69:dc:e1:b5:9e:a1:4c:e1:4a:25:55:ee: 6f:bb:a2:5e:e2:46:a9:57:ef:02:8b:a4:5b:5c:e1: 23:11:4e:21:25:2f:3e:1e:fa:0c:f8:0f:b4:90:10: 3a:7c:87:20:cd:07:fb:9f:a8:24:e6:96:ae:6f:d6: 65:c1:a0:5d:5c:20:96:c4:72:a2:b8:91:18:90:1d: fd:db:85:7e:88:34:0d:fa:c6:12:92:df:34:af:5b: 98:d4:45:8d:48:a3:6b:c4:e4:e6:7f:e2:29:60:50: 43:b9:cf:7b:ad:9e:e6:3f:17:10:66:77:c6:73:40: 4a:b0:f1:50:38:67:73:07:ed:d4:fc:09:13:63:67: 15:84:b0:43:ff:79:5f:15:12:07:49:76:0f:67:0f: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1C:6A:79:F5:B3:84:8A:02:B1:7D:F5:55:38:2C:53:C8:D8:06:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ef:1a:57:90:8b:fe:7c:99:7c:e2:5a:61:df:c6:f7:30:82: 3d:74:41:25:0d:d9:6d:02:44:db:bb:c1:17:dd:10:c3:bf:16: 52:22:b6:90:68:6b:49:0e:e0:c2:8a:29:a1:39:99:53:de:3c: c2:fe:f1:66:3e:b3:85:bc:a6:53:b7:cf:75:5e:5c:e0:41:26: ef:87:45:a0:84:43:4b:53:c9:d0:ec:e2:96:0d:e6:60:35:c2: 25:d9:41:6f:cc:01:70:1a:a7:c5:92:0b:7c:57:16:e4:87:7b: 71:d2:db:0a:3e:d8:3a:07:ec:de:03:9f:ea:12:a6:9c:11:8c: ef:30:e4:be:a6:cb:aa:be:9d:62:29:07:d3:34:e3:97:7b:6f: f4:7a:0d:97:09:e2:86:e8:1a:c3:c1:f5:f3:d0:3a:22:33:7b: b7:90:da:9a:c1:a6:b2:7c:73:58:48:25:c1:ec:9a:94:ef:07: 3d:d0:ff:26:d8:8d:8a:82:92:8a:13:77:89:b8:7b:b0:ca:c3: d5:b6:0b:b0:e5:58:88:6f:ae:a2:be:18:e9:55:7d:d1:d7:f0: 4e:32:57:eb:e0:75:23:a8:81:59:d2:07:a7:04:89:fe:b3:c5: 33:2a:2a:58:50:98:26:47:13:a2:c1:84:eb:9e:f6:f0:26:40: 9f:4e:07:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSYvfO2ST8rYsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OGQ1YzA3NjMtMzBjMi00Zjk0LWE3ZWYtY2QzODM2YWJiN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sovK1lFQnpGD+T8VVw4GI3RmtgQ79xs57mH uTGbPTrDTBhjhLhQ/O9Op0y5CL2PIZNYwRqvObvUrl+YWt7ojo7Q/5bo9jB2VNA0 gVTo5sn7q3hQacX/GbSVWyx0pYBygLq4WWhQJt8jjlxp3OG1nqFM4UolVe5vu6Je 4kapV+8Ci6RbXOEjEU4hJS8+HvoM+A+0kBA6fIcgzQf7n6gk5paub9ZlwaBdXCCW xHKiuJEYkB3924V+iDQN+sYSkt80r1uY1EWNSKNrxOTmf+IpYFBDuc97rZ7mPxcQ ZnfGc0BKsPFQOGdzB+3U/AkTY2cVhLBD/3lfFRIHSXYPZw/AVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMcann1s4SKArF99VU4LFPI2AY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNTQ5MTVhMDAtYTlhYS0z MDc5LTlkODQtZmU1OTFhZDFmZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7vGleQi/58mXziWmHfxvcwgj10QSUN2W0CRNu7wRfdEMO/FlIitpBo a0kO4MKKKaE5mVPePML+8WY+s4W8plO3z3VeXOBBJu+HRaCEQ0tTydDs4pYN5mA1 wiXZQW/MAXAap8WSC3xXFuSHe3HS2wo+2DoH7N4Dn+oSppwRjO8w5L6my6q+nWIp B9M045d7b/R6DZcJ4oboGsPB9fPQOiIze7eQ2prBprJ8c1hIJcHsmpTvBz3Q/ybY jYqCkooTd4m4e7DKw9W2C7DlWIhvrqK+GOlVfdHX8E4yV+vgdSOogVnSB6cEif6z xTMqKlhQmCZHE6LBhOue9vAmQJ9OBws= -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:30 2025 by rpki-client