$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa File: 352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa (raw, json) Hash identifier: e4nrOFmwUcYCp5AxRgsMczYhanmKgMvp4G5HqqRrYJQ= Subject key identifier: E2:E5:BE:C7:AB:0B:54:EB:F2:79:50:8B:F2:10:ED:9F:EF:C9:15:17 Certificate issuer: /CN=f509b96c-10eb-4731-ae65-8d698aade657 Certificate serial: 010D0C9F4328584B0B76A48468D5F79F5FEF5880 Authority key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 208.66.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a4:84:68:d5:f7:9f:5f:ef:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f509b96c-10eb-4731-ae65-8d698aade657 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a6947ed8-54a9-492f-9096-54f4e1d6f8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:fd:bc:4e:c5:e6:f5:d0:cd:46:ed:77:87: 58:cb:3c:aa:1d:1d:31:bc:c1:bb:9d:d0:04:3b:32: 8b:03:87:71:d4:49:74:58:b0:a1:dd:8b:2f:5e:64: a4:c3:ad:c5:43:11:b8:35:59:34:0a:54:8c:80:5e: 8a:45:5f:b2:fa:e0:48:86:89:35:67:8c:eb:fc:e4: e8:86:ad:5f:28:9d:8d:4e:e3:e2:54:74:b6:b3:a9: 84:09:b7:c2:7b:01:ce:b2:d9:31:4e:29:75:3e:2d: 0b:7c:80:cb:4a:f5:4b:ad:6d:0d:2e:09:c5:2f:c4: e7:e4:54:03:6c:80:7b:3a:16:5a:77:1d:ba:be:3a: 6a:ae:6b:a9:43:ba:94:1e:dd:2b:a9:20:df:5e:de: af:22:70:bf:80:6e:71:e5:cd:ac:53:7d:57:65:47: 6c:57:99:da:30:7a:d4:55:b7:e8:e1:e7:0d:1e:81: 42:8c:5b:99:93:c4:26:bb:3f:45:6b:3d:2a:e3:08: 2a:cc:66:cd:cc:e4:36:2e:af:39:95:3a:30:fa:6e: 41:28:0f:d9:01:a4:41:59:db:0a:6e:ff:3f:f6:70: 37:d0:16:4a:41:c9:ff:b0:f4:29:2a:43:32:49:41: 78:d8:12:d0:d2:ec:cf:86:4c:b2:2c:e6:17:1f:14: 52:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E5:BE:C7:AB:0B:54:EB:F2:79:50:8B:F2:10:ED:9F:EF:C9:15:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/352fec1d-a1e9-34f2-a19a-27fca9fd7f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl X509v3 Authority Key Identifier: keyid:88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer sbgp-ipAddrBlock: critical IPv4: 208.66.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:79:da:28:42:cf:9a:d2:a0:78:5a:f1:cd:57:f2:4e:3a:94: b7:33:31:f3:d1:33:03:ad:ab:c4:f4:ba:40:be:b5:19:6f:33: d5:29:2e:21:e2:f6:2f:cf:26:66:15:c0:67:d0:b2:8b:6d:21: 60:49:03:0c:81:5c:50:b1:96:51:8f:82:7e:e2:bf:36:a7:cd: 75:27:29:e3:19:3b:e7:a0:5b:cb:74:d6:11:ea:a2:5e:7f:ce: 87:bd:21:f4:76:a1:2a:29:98:ff:be:2e:65:1d:40:13:4e:3e: bd:c2:5c:4f:5d:2e:4b:91:5e:e2:86:d1:79:ba:23:f5:a6:a7: e9:c5:2b:cf:f9:64:9d:39:df:cb:24:b4:83:b7:66:b2:df:1e: 49:0e:99:50:4c:e1:57:5d:ba:ec:d7:10:05:6f:d1:d7:8e:89: b3:a2:92:1e:47:30:f8:21:7e:be:ab:6c:1c:05:bf:88:5d:77: 06:a0:7e:b7:97:80:c3:40:b9:62:04:24:86:46:dc:3e:29:c8: ab:b4:5e:db:5f:67:36:16:80:ad:0a:2e:bb:b6:80:27:aa:64: 99:e6:18:c0:4d:93:69:f4:eb:3a:24:5b:c7:d2:32:ff:df:ce: 38:fe:8f:b9:d8:8e:7a:d5:44:52:d0:57:e8:7d:17:da:02:6c: eb:7a:af:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqSEaNX3n1/vWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUwOWI5NmMtMTBlYi00NzMxLWFlNjUtOGQ2OThhYWRl NjU3MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTY5NDdlZDgtNTRhOS00OTJmLTkwOTYtNTRmNGUxZDZmOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUT9vE7F5vXQzUbtd4dYyzyqHR0xvMG7ndAE OzKLA4dx1El0WLCh3YsvXmSkw63FQxG4NVk0ClSMgF6KRV+y+uBIhok1Z4zr/OTo hq1fKJ2NTuPiVHS2s6mECbfCewHOstkxTil1Pi0LfIDLSvVLrW0NLgnFL8Tn5FQD bIB7OhZadx26vjpqrmupQ7qUHt0rqSDfXt6vInC/gG5x5c2sU31XZUdsV5naMHrU Vbfo4ecNHoFCjFuZk8Qmuz9Faz0q4wgqzGbNzOQ2Lq85lTow+m5BKA/ZAaRBWdsK bv8/9nA30BZKQcn/sPQpKkMySUF42BLQ0uzPhkyyLOYXHxRSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLlvserC1Tr8nlQi/IQ7Z/vyRUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5 Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5OGFhZGU2NTcvMzUyZmVjMWQtYTFlOS0z NGYyLWExOWEtMjdmY2E5ZmQ3ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjUwOWI5NmMtMTBlYi00NzMxLWFl NjUtOGQ2OThhYWRlNjU3L2Y1MDliOTZjLTEwZWItNDczMS1hZTY1LThkNjk4YWFk ZTY1Ny5jcmwwHwYDVR0jBBgwFoAUiPEsKTw08jE1u7qyI9SATNUFYowwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5 OGFhZGU2NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ELkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR52ihCz5rSoHha8c1X8k46lLczMfPRMwOtq8T0ukC+tRlvM9UpLiHi 9i/PJmYVwGfQsottIWBJAwyBXFCxllGPgn7ivzanzXUnKeMZO+egW8t01hHqol5/ zoe9IfR2oSopmP++LmUdQBNOPr3CXE9dLkuRXuKG0Xm6I/Wmp+nFK8/5ZJ0538sk tIO3ZrLfHkkOmVBM4VdduuzXEAVv0deOibOikh5HMPghfr6rbBwFv4hddwagfreX gMNAuWIEJIZG3D4pyKu0XttfZzYWgK0KLru2gCeqZJnmGMBNk2n06zokW8fSMv/f zjj+j7nYjnrVRFLQV+h9F9oCbOt6r4Y= -----END CERTIFICATE-----Generated at Wed Sep 3 23:53:19 2025 by rpki-client