$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/052bf280-1693-304b-b955-b1cd635ae3f2.roa File: 052bf280-1693-304b-b955-b1cd635ae3f2.roa (raw, json) Hash identifier: ZxHWsUyizYhj7kjZ8M4DoAZZwdnqxmyfOLn/5whh5mU= Subject key identifier: C8:14:28:0E:D8:D7:7A:B6:56:F8:82:B9:BA:65:A5:6E:44:35:CB:5F Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Certificate serial: 010D0C9F4328584B3F1C591E0045EF2EBA3C5E00 Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/052bf280-1693-304b-b955-b1cd635ae3f2.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 33164 IP address blocks: 208.89.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:59:1e:00:45:ef:2e:ba:3c:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=adb59f09-53b9-4822-90d1-4ae7987cf703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:77:9f:78:45:6e:39:d0:a4:03:61:94:4b: ba:6c:af:4a:af:e4:52:77:62:21:a9:28:75:23:44: d0:c3:5c:2f:da:3e:c4:25:63:61:69:1d:1b:41:6a: ce:75:61:be:ea:f1:54:dc:74:88:39:14:de:b2:89: 1a:e5:ad:19:b2:6e:f4:00:52:b2:c6:d5:ad:10:ab: c9:33:a7:ee:36:5b:11:e6:6f:c3:5e:c7:15:0c:07: ae:80:1b:e9:29:46:1d:ec:d4:cb:f3:0d:3b:39:64: b8:be:29:93:1b:17:df:5c:78:4a:c7:69:23:9d:78: dd:1e:e9:3d:58:06:0c:38:28:d5:bc:a3:b4:17:b5: a8:b1:40:92:a9:bc:3a:68:fb:25:f2:9b:8a:6c:f6: 6d:60:9d:e6:55:55:05:c1:de:ec:3c:bb:74:ab:05: 1d:c4:fb:dc:26:24:da:35:a2:86:b6:e2:6a:be:0c: 49:0a:62:d2:fe:38:cf:f6:05:e5:d9:49:aa:7c:ee: 76:56:fd:de:13:b2:65:f8:85:98:6b:29:d3:81:28: c8:29:b7:fa:02:93:d3:2d:e6:2a:05:e7:5d:99:9d: 32:67:1f:e8:ab:a0:ba:58:da:ea:2e:4c:a4:9e:82: 52:8e:18:25:0c:d0:1c:bf:80:87:3b:19:37:3f:ca: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:14:28:0E:D8:D7:7A:B6:56:F8:82:B9:BA:65:A5:6E:44:35:CB:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/052bf280-1693-304b-b955-b1cd635ae3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl X509v3 Authority Key Identifier: keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer sbgp-ipAddrBlock: critical IPv4: 208.89.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:57:d7:ef:94:d4:be:76:09:5a:f7:39:80:55:a0:16:6d:d1: ed:1e:64:20:55:50:a3:aa:78:83:b7:5e:fa:75:46:46:a3:d4: 87:19:ba:53:80:04:ed:7f:4e:c0:1d:28:14:35:3a:41:31:bb: 85:74:3d:82:b5:13:3d:7e:4c:50:5d:4c:08:2b:66:a0:19:0c: 4b:24:36:a0:80:81:41:37:ea:c8:de:31:41:4a:91:e3:f3:04: eb:94:98:73:4c:00:49:8b:f2:45:15:12:46:06:4b:7c:63:7c: 2d:2f:58:ad:60:5d:49:e0:31:e6:cf:3d:20:5a:a3:5c:29:43: df:73:37:4c:ae:6d:dc:ea:b4:36:04:03:64:6a:f4:53:b8:ac: 0e:c6:69:18:e9:f1:7f:3a:2e:80:1a:18:8f:3d:b6:ee:5c:44: 43:f1:0f:56:f7:9c:83:35:ad:7c:8e:ae:e7:4b:19:b6:ac:0c: 60:fd:d5:c2:1e:20:16:00:a0:9e:6a:a6:39:5f:a6:48:05:b9: da:3b:b8:e1:d9:1a:c0:66:19:23:7a:49:61:f2:2a:75:41:0e: 1d:c1:b4:e1:46:7c:9b:c1:63:85:62:ce:f7:bf:f1:0c:b8:60: 41:71:1f:b8:d2:9a:f4:7f:a5:d7:dd:f5:87:18:18:d6:3c:77: bb:7f:63:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFkeAEXvLro8XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0 ZDUwMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk YWRiNTlmMDktNTNiOS00ODIyLTkwZDEtNGFlNzk4N2NmNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PN3n3hFbjnQpANhlEu6bK9Kr+RSd2IhqSh1 I0TQw1wv2j7EJWNhaR0bQWrOdWG+6vFU3HSIORTesoka5a0Zsm70AFKyxtWtEKvJ M6fuNlsR5m/DXscVDAeugBvpKUYd7NTL8w07OWS4vimTGxffXHhKx2kjnXjdHuk9 WAYMOCjVvKO0F7WosUCSqbw6aPsl8puKbPZtYJ3mVVUFwd7sPLt0qwUdxPvcJiTa NaKGtuJqvgxJCmLS/jjP9gXl2UmqfO52Vv3eE7Jl+IWYaynTgSjIKbf6ApPTLeYq BeddmZ0yZx/oq6C6WNrqLkyknoJSjhglDNAcv4CHOxk3P8rjHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgUKA7Y13q2VviCubplpW5ENctfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvMDUyYmYyODAtMTY5My0z MDRiLWI5NTUtYjFjZDYzNWFlM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1 MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNX1++U1L52CVr3OYBVoBZt0e0eZCBVUKOqeIO3Xvp1Rkaj1IcZulOA BO1/TsAdKBQ1OkExu4V0PYK1Ez1+TFBdTAgrZqAZDEskNqCAgUE36sjeMUFKkePz BOuUmHNMAEmL8kUVEkYGS3xjfC0vWK1gXUngMebPPSBao1wpQ99zN0yubdzqtDYE A2Rq9FO4rA7GaRjp8X86LoAaGI89tu5cREPxD1b3nIM1rXyOrudLGbasDGD91cIe IBYAoJ5qpjlfpkgFudo7uOHZGsBmGSN6SWHyKnVBDh3BtOFGfJvBY4Vizve/8Qy4 YEFxH7jSmvR/pdfd9YcYGNY8d7t/Y4I= -----END CERTIFICATE-----Generated at Fri Oct 10 17:32:04 2025 by rpki-client