$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/c8d7b551-aadf-3bf3-af14-9a7f5f74373a.roa File: c8d7b551-aadf-3bf3-af14-9a7f5f74373a.roa (raw, json) Hash identifier: 0WuGqCQ6tppFy3BwiHrD6d7RV42eYNkZ29vAMeQWVmE= Subject key identifier: B8:81:52:C6:13:A9:52:A6:8A:4D:53:40:99:6B:E6:87:8D:B9:CF:FF Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584A4AD596F94AB7B3DC341AD980 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/c8d7b551-aadf-3bf3-af14-9a7f5f74373a.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 53471 IP address blocks: 208.52.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:96:f9:4a:b7:b3:dc:34:1a:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=5434a940-908f-446e-ac69-250bd58c574a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:15:f4:e4:36:4d:8b:3d:85:31:b6:ae:9e:aa: f3:6a:27:ad:b0:91:f4:87:7f:c7:c1:b1:b2:d9:11: af:9a:7c:20:ff:40:48:39:05:a2:97:b8:bc:ab:2e: ef:03:b5:c4:fc:91:07:57:e4:0b:07:ec:29:56:00: 58:d4:25:11:1f:68:3a:2f:97:19:8e:a1:45:52:c6: e8:9c:06:80:d4:4d:1e:57:0a:8b:02:ea:7c:cf:ff: b6:08:ca:65:59:14:11:03:f6:2a:96:fb:fb:e7:72: b4:00:e2:7d:21:ac:0f:e2:e8:31:41:83:ee:30:e0: 15:72:e6:a4:f3:d8:70:a7:15:7b:e9:b9:d3:ee:24: 1a:77:13:7b:51:eb:0b:3a:1c:2a:45:9c:98:18:f4: e7:34:a4:b9:ab:47:73:a9:99:2e:02:07:b8:f7:75: 2b:f6:53:ff:aa:fc:38:d3:fe:fd:fd:33:c6:f1:5a: 25:af:7c:19:9d:fe:c3:30:50:09:18:dc:d5:51:ea: 9f:83:a2:68:4e:b6:d4:47:57:67:e2:c4:8f:ef:98: fc:e3:bb:d6:64:b3:f5:81:59:d6:db:cc:06:a3:80: 4d:46:31:0d:47:b5:bd:c9:36:a6:96:6b:0a:f3:af: e3:f6:a0:02:47:99:d7:52:9d:51:cd:2a:f3:f7:4c: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:81:52:C6:13:A9:52:A6:8A:4D:53:40:99:6B:E6:87:8D:B9:CF:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/c8d7b551-aadf-3bf3-af14-9a7f5f74373a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 208.52.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7b:e1:45:b2:e7:a1:be:3a:88:2d:02:e0:16:2a:a7:3e:7d: 9f:45:3c:2b:d7:41:33:b7:5c:53:ac:1f:ef:4b:4e:dd:c7:33: c2:70:fa:25:c3:5a:a4:93:90:62:26:07:24:c7:78:c0:f5:d2: f2:28:5d:3a:6d:b6:43:32:60:86:5e:96:29:d8:d3:44:95:03: 63:37:db:16:83:09:1b:5e:f5:c3:88:1f:bf:d2:98:85:fd:96: 6a:02:00:22:90:d4:9b:ea:80:a1:aa:97:9b:87:2c:b5:56:72: 76:a1:51:ad:dd:09:79:12:01:7f:42:b9:64:cb:ae:49:13:87: 25:b2:0e:aa:15:6a:0c:0c:81:1e:9e:f5:0c:8a:d1:be:63:ca: 6f:b1:12:3c:b3:d9:38:af:f1:e9:cd:95:80:dd:d3:bf:4f:40: 32:23:42:5e:c3:95:a6:e1:c1:4b:97:2c:e8:92:d6:00:33:f2: 7a:07:9a:b9:05:b5:5f:e2:0f:43:b9:22:71:22:f8:e4:0d:d9: a0:1d:e9:19:18:2f:50:b3:0b:29:c0:5c:6a:80:9a:ff:2c:56: 6c:f3:84:85:23:7e:fb:bb:b7:17:c3:a9:80:19:7b:a7:2c:e1: e8:f9:47:08:de:81:61:18:4a:90:da:4a:c8:13:12:55:c4:08: 5c:3f:02:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1Zb5Srez3DQa2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk NTQzNGE5NDAtOTA4Zi00NDZlLWFjNjktMjUwYmQ1OGM1NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxX05DZNiz2FMbaunqrzaietsJH0h3/HwbGy 2RGvmnwg/0BIOQWil7i8qy7vA7XE/JEHV+QLB+wpVgBY1CURH2g6L5cZjqFFUsbo nAaA1E0eVwqLAup8z/+2CMplWRQRA/Yqlvv753K0AOJ9IawP4ugxQYPuMOAVcuak 89hwpxV76bnT7iQadxN7UesLOhwqRZyYGPTnNKS5q0dzqZkuAge493Ur9lP/qvw4 0/79/TPG8Volr3wZnf7DMFAJGNzVUeqfg6JoTrbUR1dn4sSP75j847vWZLP1gVnW 28wGo4BNRjENR7W9yTamlmsK86/j9qACR5nXUp1RzSrz90xx/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiBUsYTqVKmik1TQJlr5oeNuc//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvYzhkN2I1NTEtYWFkZi0z YmYzLWFmMTQtOWE3ZjVmNzQzNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ74UWy56G+OogtAuAWKqc+fZ9FPCvXQTO3XFOsH+9LTt3HM8Jw+iXD WqSTkGImByTHeMD10vIoXTpttkMyYIZelinY00SVA2M32xaDCRte9cOIH7/SmIX9 lmoCACKQ1JvqgKGql5uHLLVWcnahUa3dCXkSAX9CuWTLrkkThyWyDqoVagwMgR6e 9QyK0b5jym+xEjyz2Tiv8enNlYDd079PQDIjQl7DlabhwUuXLOiS1gAz8noHmrkF tV/iD0O5InEi+OQN2aAd6RkYL1CzCynAXGqAmv8sVmzzhIUjfvu7txfDqYAZe6cs 4ej5RwjegWEYSpDaSsgTElXECFw/Ans= -----END CERTIFICATE-----Generated at Thu Jul 10 06:37:23 2025 by rpki-client