$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa File: 1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa (raw, json) Hash identifier: 5P/8Q5W+4SOWij3pfbfdOyVvmbcG1ri2+9dKkaIoK5A= Subject key identifier: C3:E6:C3:7E:08:D2:63:AB:17:AA:7F:53:32:3B:58:57:CF:0C:52:AE Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584ADA9BC3086D96E5C5864FE000 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 208.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c3:08:6d:96:e5:c5:86:4f:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=b68432e2-6570-46da-b146-d6718617714d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:75:28:5f:6e:b4:ff:02:6a:dc:10:88:b0:0f: 24:de:99:d6:50:ab:50:c5:7d:bb:70:c0:ed:f8:ef: 4c:45:ea:1a:5e:01:70:46:2c:21:07:96:20:8e:3a: 5d:c7:5a:35:65:29:cc:51:a1:85:41:55:2a:72:42: 3a:3a:81:05:ed:97:38:7f:63:b5:fc:cb:1e:62:f4: 8b:5e:1a:19:8e:a2:8c:94:92:97:69:29:04:7e:e6: 36:f3:a3:c4:b1:1a:00:99:10:dc:2e:00:e9:c6:48: 7a:6b:a7:1e:33:15:fc:03:2e:ca:5a:85:d6:18:7c: 19:4e:5f:38:a3:4b:ab:7d:8c:2f:62:74:e0:6a:0f: 7d:5f:57:22:26:a9:f3:ca:7a:55:15:aa:bd:cd:9e: 26:3d:f9:93:45:01:a9:3a:5c:52:8e:4d:7a:fb:a7: 79:45:5a:e4:3a:fb:c2:f4:5b:03:e8:35:a8:63:79: 5b:6e:ed:a7:13:26:11:77:e1:35:81:87:a1:1b:59: 4b:a6:5f:ed:16:f6:5c:7e:f7:d1:5b:11:85:7d:ba: cc:6c:85:31:82:ea:58:61:e8:b6:ec:1c:d9:54:b8: 54:cc:fe:45:fd:25:73:a0:04:10:de:df:0d:7b:b4: 36:24:6e:7d:05:d9:f9:91:e8:a8:1c:a9:e4:fb:22: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E6:C3:7E:08:D2:63:AB:17:AA:7F:53:32:3B:58:57:CF:0C:52:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ec:ef:19:d0:f0:de:8e:48:34:e5:7b:6f:f8:35:f4:d2:ca: aa:99:da:7a:f3:ea:a5:57:36:0d:f9:7d:9f:16:e4:30:8c:02: d7:e3:16:95:04:a4:61:3d:fc:a4:35:fa:91:1b:54:8c:34:cf: 08:8e:e0:eb:36:c9:d7:e0:fe:b4:2b:4a:46:37:10:e0:88:0a: d7:15:47:cd:f6:2c:35:f9:ea:6f:b9:ff:f5:6c:de:db:6c:26: dc:7b:0b:af:08:0d:01:a5:cb:08:53:d6:20:e0:9a:cf:f0:f1: 8a:ba:18:45:cf:62:6d:38:bc:35:77:c6:9b:29:59:d1:f0:fa: 0a:0e:39:31:d7:84:60:36:5e:62:b6:e3:1e:70:b3:4a:37:53: cd:94:3d:05:94:ea:0c:ac:68:e8:8e:9e:90:95:c3:a3:19:57: 38:97:53:a5:a1:2b:35:d2:62:6a:80:8c:02:77:81:68:4a:ce: 7d:7d:fe:e7:3d:5e:90:ef:51:df:b5:ba:cb:c1:c1:54:de:cf: 8c:9c:f5:44:5c:dc:d7:b0:6c:0e:75:10:76:a3:a3:e1:ac:99: 38:19:c4:4a:08:00:60:71:6a:37:a8:1d:6a:2e:81:7c:6d:3c: 18:53:ef:7b:32:6e:01:cc:4f:15:2f:13:62:bb:76:03:b4:d8: 68:b4:fa:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8MIbZblxYZP4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk YjY4NDMyZTItNjU3MC00NmRhLWIxNDYtZDY3MTg2MTc3MTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3UoX260/wJq3BCIsA8k3pnWUKtQxX27cMDt +O9MReoaXgFwRiwhB5Ygjjpdx1o1ZSnMUaGFQVUqckI6OoEF7Zc4f2O1/MseYvSL XhoZjqKMlJKXaSkEfuY286PEsRoAmRDcLgDpxkh6a6ceMxX8Ay7KWoXWGHwZTl84 o0urfYwvYnTgag99X1ciJqnzynpVFaq9zZ4mPfmTRQGpOlxSjk16+6d5RVrkOvvC 9FsD6DWoY3lbbu2nEyYRd+E1gYehG1lLpl/tFvZcfvfRWxGFfbrMbIUxgupYYei2 7BzZVLhUzP5F/SVzoAQQ3t8Ne7Q2JG59Bdn5keioHKnk+yJz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPmw34I0mOrF6p/UzI7WFfPDFKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMTgzOWQ2ZWEtYmEyZi0z ZjAzLTg5ZGEtZDUwZGQ0ZWYwOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvs7xnQ8N6OSDTle2/4NfTSyqqZ2nrz6qVXNg35fZ8W5DCMAtfjFpUE pGE9/KQ1+pEbVIw0zwiO4Os2ydfg/rQrSkY3EOCICtcVR832LDX56m+5//Vs3tts Jtx7C68IDQGlywhT1iDgms/w8Yq6GEXPYm04vDV3xpspWdHw+goOOTHXhGA2XmK2 4x5ws0o3U82UPQWU6gysaOiOnpCVw6MZVziXU6WhKzXSYmqAjAJ3gWhKzn19/uc9 XpDvUd+1usvBwVTez4yc9URc3NewbA51EHajo+GsmTgZxEoIAGBxajeoHWougXxt PBhT73sybgHMTxUvE2K7dgO02Gi0+oE= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:18 2025 by rpki-client