$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02eb7bf7-8c9c-36c5-9141-98cbac0a5fa8.roa File: 02eb7bf7-8c9c-36c5-9141-98cbac0a5fa8.roa (raw, json) Hash identifier: sRnPwiNXnwRRSsfgEYkByMRc3ETnZ/INni+EyACfOWs= Subject key identifier: FE:C8:39:9B:23:59:25:0C:D4:14:2F:DD:6D:64:A9:74:57:A5:F0:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC7088D2BA44EA77227930 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02eb7bf7-8c9c-36c5-9141-98cbac0a5fa8.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 208.39.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:70:88:d2:ba:44:ea:77:22:79:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=2e0b27d1-2659-4a40-b26d-22afc4ed3e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:21:a4:2d:f1:0b:4c:86:9b:73:70:a8:cc: a6:6f:79:70:ed:db:3b:f9:0b:eb:42:79:0e:de:87: d4:69:90:c6:45:28:e9:f7:db:e4:85:36:89:6a:b4: 8f:d3:dd:fc:9e:1e:90:95:b6:54:95:82:3c:de:d6: 86:5d:5c:72:ac:ec:d2:7c:fd:0c:10:ae:69:ec:16: 25:73:d4:71:56:63:86:06:01:e9:7d:dc:9b:48:fc: 24:75:4c:a2:e1:b4:9c:22:2c:f2:8e:99:2c:0d:63: 9a:94:20:1e:f3:27:fb:90:dd:3b:f1:2e:4d:17:7e: c8:39:80:96:b4:01:7d:4b:99:86:10:df:6f:f3:46: 89:28:7a:15:e6:54:0e:c8:40:6f:94:99:a8:27:b0: 42:d7:a0:2e:e9:20:74:78:f4:eb:75:a7:50:59:31: d9:6c:44:aa:9e:1f:fb:23:22:2a:6f:c3:12:17:95: 3b:c1:b1:34:49:78:e3:64:9b:51:7b:9e:4f:3c:de: d0:43:ce:4c:e9:5c:13:aa:59:c0:21:32:f7:da:5f: 28:cc:99:08:8f:c1:3d:fc:80:9f:8e:7b:d2:1f:6a: c2:44:b4:99:4c:60:b3:13:f0:f6:89:f4:69:97:df: 15:e9:ab:36:3c:08:98:23:3c:23:c4:8b:55:af:a1: d6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C8:39:9B:23:59:25:0C:D4:14:2F:DD:6D:64:A9:74:57:A5:F0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02eb7bf7-8c9c-36c5-9141-98cbac0a5fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 208.39.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:7e:b6:6c:02:98:2a:14:08:e8:21:27:fb:87:8f:f3:b1:5d: cb:db:4b:3f:d3:27:3b:85:10:4e:8e:55:c5:bc:91:80:19:0a: cd:86:b9:78:a2:3b:76:54:41:41:c1:06:d3:f5:8e:21:d9:1d: fd:4e:2e:e8:20:d4:7a:43:59:14:c5:c6:6c:62:67:78:d1:a5: 7b:08:41:8f:7d:71:22:7d:9d:4c:d1:e7:7f:a7:c9:ea:e1:5f: d2:ea:fa:64:b2:e1:66:de:83:46:83:ea:cf:bc:3d:f9:c5:eb: de:88:63:c2:1e:bf:20:5a:60:c0:99:7b:c1:31:24:f3:24:5c: d5:89:99:9a:32:1b:f4:97:6f:f2:24:af:02:70:c7:47:3c:a9: e3:5b:5d:cf:79:2f:4d:13:97:b0:e9:91:e6:50:72:11:b2:fa: fd:eb:f8:51:22:3e:4b:12:f3:73:bf:ea:27:6c:e9:93:9c:58: 8b:50:f5:6e:80:55:90:5a:9a:1f:f0:7c:90:a7:5c:04:6b:a8: c6:d5:0a:65:d9:f2:90:b9:d8:61:1a:5d:6c:83:ae:64:84:39: 7c:26:e7:86:ec:0d:f1:69:d2:aa:d4:81:7e:5c:f7:ed:7b:f2: b8:09:e8:ea:6b:ca:eb:17:30:40:bd:94:a4:24:f4:dc:b4:bb: 5e:dd:7f:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/HCI0rpE6ncieTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MmUwYjI3ZDEtMjY1OS00YTQwLWIyNmQtMjJhZmM0ZWQzZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMUhpC3xC0yGm3NwqMymb3lw7ds7+QvrQnkO 3ofUaZDGRSjp99vkhTaJarSP0938nh6QlbZUlYI83taGXVxyrOzSfP0MEK5p7BYl c9RxVmOGBgHpfdybSPwkdUyi4bScIizyjpksDWOalCAe8yf7kN078S5NF37IOYCW tAF9S5mGEN9v80aJKHoV5lQOyEBvlJmoJ7BC16Au6SB0ePTrdadQWTHZbESqnh/7 IyIqb8MSF5U7wbE0SXjjZJtRe55PPN7QQ85M6VwTqlnAITL32l8ozJkIj8E9/ICf jnvSH2rCRLSZTGCzE/D2ifRpl98V6as2PAiYIzwjxItVr6HWJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7IOZsjWSUM1BQv3W1kqXRXpfBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDJlYjdiZjctOGM5Yy0z NmM1LTkxNDEtOThjYmFjMGE1ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0CePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh+tmwCmCoUCOghJ/uHj/OxXcvbSz/TJzuFEE6OVcW8kYAZCs2GuXii O3ZUQUHBBtP1jiHZHf1OLugg1HpDWRTFxmxiZ3jRpXsIQY99cSJ9nUzR53+nyerh X9Lq+mSy4Wbeg0aD6s+8PfnF696IY8IevyBaYMCZe8ExJPMkXNWJmZoyG/SXb/Ik rwJwx0c8qeNbXc95L00Tl7DpkeZQchGy+v3r+FEiPksS83O/6ids6ZOcWItQ9W6A VZBamh/wfJCnXARrqMbVCmXZ8pC52GEaXWyDrmSEOXwm54bsDfFp0qrUgX5c9+17 8rgJ6OpryusXMEC9lKQk9Ny0u17df3o= -----END CERTIFICATE-----Generated at Sun Jul 20 17:21:49 2025 by rpki-client