$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa File: 507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa (raw, json) Hash identifier: vHInjWjLspBfwBGJN50CLcSE/Ifr5i94rRSUJP6RbVI= Subject key identifier: 4A:CC:2C:98:6A:76:D7:E2:BE:E2:0C:52:E3:4C:76:45:DD:83:47:AC Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A58CB09C1A77ABA96A4EE4500 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 398420 IP address blocks: 208.89.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:09:c1:a7:7a:ba:96:a4:ee:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=ef1435b3-0a1d-40fe-9aae-ec776eaf6982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:c7:22:2e:b7:e1:7c:c9:55:31:b3:a2:37: ac:47:dc:71:b6:b7:41:99:30:8f:8c:32:28:6f:5b: d3:7c:64:89:39:3d:f5:fd:0a:12:3e:e6:2f:1a:79: 24:fa:3a:c6:e7:a2:f6:b6:0b:9c:5f:3d:0d:52:09: 39:92:dd:4d:28:1a:07:66:d8:cc:8c:ce:cd:23:67: d0:ce:b9:ed:c9:e7:d5:cc:c9:ba:d7:9d:d7:cc:2c: fa:d2:9f:ac:73:75:9c:4b:33:b7:66:4d:da:58:18: b8:85:69:c3:eb:81:75:ef:ea:de:32:ec:10:60:22: 50:db:66:1d:2f:7b:24:eb:d3:1c:2e:55:17:19:bd: ae:73:b1:e1:6a:2f:c5:f4:ab:1b:c6:21:f8:52:fb: 6a:8e:f1:f0:a5:e8:f4:a1:05:1d:14:df:88:8d:c7: 1b:f6:31:08:65:00:6a:8c:16:96:dc:f1:22:c4:7a: 95:6d:33:16:f8:3b:1d:b2:0a:69:40:d8:0a:c6:5b: 77:d4:cc:2c:8c:cd:c3:db:40:ca:b7:20:c2:e0:37: 9a:a5:62:a8:27:1c:5e:f1:29:76:a6:55:3d:41:3e: 08:83:00:42:cc:e7:a4:73:e3:bc:5f:cf:06:d8:f5: ac:66:a7:db:5f:4c:b2:67:ab:1c:c7:1e:9c:14:56: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CC:2C:98:6A:76:D7:E2:BE:E2:0C:52:E3:4C:76:45:DD:83:47:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5a:e6:8b:87:6a:12:c0:6c:61:45:c5:d5:e8:59:e5:a4:8c: 3a:56:57:cd:d3:4c:db:f2:d6:f4:43:22:48:a0:c2:46:af:6d: 6c:58:df:b4:97:3e:74:0f:a6:1d:06:b2:a0:56:11:1e:38:35: 7f:6c:88:4a:25:87:0f:be:b6:98:1d:b8:26:e1:f6:91:0c:b9: 41:f1:57:d6:31:17:fc:b5:0e:9d:4d:34:20:49:cb:b0:19:70: 61:2d:28:37:eb:cc:3b:b0:0e:34:c9:5b:da:3f:ec:2e:50:c6: 89:a5:7f:61:8a:1d:4e:dd:dd:0e:0c:ef:c7:55:14:35:da:8f: d3:77:9d:a4:67:74:b7:23:4f:67:56:c6:63:6f:51:34:d9:c1: 69:a8:de:40:eb:6f:a4:2a:ad:85:9b:57:5a:2d:b7:d6:0a:b3: 9a:b0:26:cf:9a:18:ff:20:8d:4e:33:d8:14:2a:b7:fe:dc:12: 1c:4e:14:18:16:1f:0f:ca:c7:1d:89:42:c7:e4:11:00:b8:df: 0b:99:02:30:91:7a:29:e1:13:b0:b5:d6:6e:f0:b1:15:db:1b: c6:52:58:b2:c9:e9:74:95:92:30:21:53:a3:51:a7:86:8f:7c: c2:6c:50:40:b7:9e:7d:8f:03:eb:03:74:e5:0d:fc:d1:bf:bf: d4:13:43:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywnBp3q6lqTuRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZWYxNDM1YjMtMGExZC00MGZlLTlhYWUtZWM3NzZlYWY2OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCjHIi634XzJVTGzojesR9xxtrdBmTCPjDIo b1vTfGSJOT31/QoSPuYvGnkk+jrG56L2tgucXz0NUgk5kt1NKBoHZtjMjM7NI2fQ zrntyefVzMm6153XzCz60p+sc3WcSzO3Zk3aWBi4hWnD64F17+reMuwQYCJQ22Yd L3sk69McLlUXGb2uc7Hhai/F9KsbxiH4UvtqjvHwpej0oQUdFN+Ijccb9jEIZQBq jBaW3PEixHqVbTMW+DsdsgppQNgKxlt31MwsjM3D20DKtyDC4DeapWKoJxxe8Sl2 plU9QT4IgwBCzOekc+O8X88G2PWsZqfbX0yyZ6scxx6cFFbB+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErMLJhqdtfivuIMUuNMdkXdg0esMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTA3YmQ4NjktNmE5Ni0z Y2RmLWIzZTMtMjlhNjJlYTkwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRa5ouHahLAbGFFxdXoWeWkjDpWV83TTNvy1vRDIkigwkavbWxY37SX PnQPph0GsqBWER44NX9siEolhw++tpgduCbh9pEMuUHxV9YxF/y1Dp1NNCBJy7AZ cGEtKDfrzDuwDjTJW9o/7C5Qxomlf2GKHU7d3Q4M78dVFDXaj9N3naRndLcjT2dW xmNvUTTZwWmo3kDrb6QqrYWbV1ott9YKs5qwJs+aGP8gjU4z2BQqt/7cEhxOFBgW Hw/Kxx2JQsfkEQC43wuZAjCReinhE7C11m7wsRXbG8ZSWLLJ6XSVkjAhU6NRp4aP fMJsUEC3nn2PA+sDdOUN/NG/v9QTQ1o= -----END CERTIFICATE-----Generated at Fri Jul 4 08:28:53 2025 by rpki-client