$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/052bf280-1693-304b-b955-b1cd635ae3f2.roa File: 052bf280-1693-304b-b955-b1cd635ae3f2.roa (raw, json) Hash identifier: eQxjbJVT2puJKr+Cnv5sNYww0jp3JPypicebP+bizt0= Subject key identifier: 53:E3:50:AA:FE:2E:DA:3D:1D:16:73:A4:D9:3F:55:BD:A0:CA:5E:F5 Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Certificate serial: 010D0C9F4328584A5E60577C3F236BDC35134080 Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/052bf280-1693-304b-b955-b1cd635ae3f2.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 33164 IP address blocks: 208.89.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:57:7c:3f:23:6b:dc:35:13:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=c8dfabcd-7a5f-4fed-95f1-c6704be76fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:37:8a:dd:d7:3c:7f:3e:60:be:f1:cf:19: ce:61:ad:8e:7c:f2:4d:35:cf:c7:fa:90:0d:06:87: b9:3c:e3:21:79:ff:35:68:6d:55:04:cf:a9:13:46: dd:62:db:62:08:ca:ef:e4:6f:c4:e4:7d:91:b9:36: 29:66:1f:55:29:65:14:f6:ec:f8:ff:d8:fd:10:8c: ff:44:fb:11:e3:66:1a:f6:2e:17:70:80:74:44:f4: 84:a2:74:79:31:ed:ba:33:fc:61:2d:a7:57:56:fc: 37:af:dc:27:4a:86:c9:d9:32:11:48:3c:7d:ba:43: 6d:61:6a:7b:21:f7:cd:db:5a:f5:5e:93:36:a2:d3: c5:ce:f8:f3:23:59:8f:a4:0f:62:c0:14:6e:2f:bc: f4:ed:51:d1:db:d9:9d:00:7f:25:92:87:4a:db:e7: 39:b9:3b:94:ae:e2:9c:bd:11:dd:84:19:05:b6:7f: 9c:49:9c:1f:85:ee:7f:3e:4a:9a:e6:4d:04:c0:39: 44:ea:ac:56:27:80:d7:f7:b4:a9:fc:c2:4d:d6:07: 88:88:ae:f8:02:0e:31:7b:a6:b8:5f:ee:98:3b:2c: 4d:47:12:d5:cb:6c:d3:bf:13:b4:66:e9:89:63:e4: da:19:7d:3c:37:90:34:20:15:42:69:ff:67:d9:fc: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E3:50:AA:FE:2E:DA:3D:1D:16:73:A4:D9:3F:55:BD:A0:CA:5E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/052bf280-1693-304b-b955-b1cd635ae3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl X509v3 Authority Key Identifier: keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer sbgp-ipAddrBlock: critical IPv4: 208.89.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c9:24:9c:c4:4c:67:4f:cb:77:5c:ee:39:19:85:42:81:6d: cd:ac:99:ca:ae:6b:56:ff:dc:0f:99:09:2e:9e:b3:7e:ad:17: 06:a7:64:d5:ab:c1:ae:b2:97:f6:2f:74:92:4c:46:50:d7:6a: 2e:93:3a:13:3a:38:d5:83:f1:c6:47:d5:87:2a:b7:7d:4f:a6: 87:52:98:fa:7e:20:c0:e7:d6:f3:a2:b1:44:04:43:ac:b4:c9: 19:d6:63:fc:ba:e6:4c:3a:e4:a0:3c:52:cd:fe:86:cf:56:6d: 10:d2:5c:53:d0:6e:e6:5b:3f:be:52:d5:d4:04:cd:31:36:ae: c4:5b:cc:08:86:81:7e:8a:bf:75:04:29:46:cd:fc:62:f9:a1: f6:e2:82:bb:86:c1:4b:09:e0:0a:cd:a6:ee:43:42:77:1e:e8: 22:23:8b:2d:95:6c:66:d2:38:4f:fc:0b:05:86:66:99:5e:c3: 4b:75:5c:01:12:a6:93:f2:78:65:b3:7e:83:3e:4a:86:18:cc: f1:b7:3b:1b:85:12:bd:e7:b9:d8:9b:8f:00:15:8a:2d:0e:39: de:09:38:02:69:1b:cc:d9:46:f2:d4:4d:9a:fa:e9:37:b4:7a: f2:50:fb:67:9e:58:ee:ad:ae:f4:96:59:ae:7b:9c:4c:25:f2: af:2b:dc:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFd8PyNr3DUTQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0 ZDUwMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk YzhkZmFiY2QtN2E1Zi00ZmVkLTk1ZjEtYzY3MDRiZTc2ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq43it3XPH8+YL7xzxnOYa2OfPJNNc/H+pAN Boe5POMhef81aG1VBM+pE0bdYttiCMrv5G/E5H2RuTYpZh9VKWUU9uz4/9j9EIz/ RPsR42Ya9i4XcIB0RPSEonR5Me26M/xhLadXVvw3r9wnSobJ2TIRSDx9ukNtYWp7 IffN21r1XpM2otPFzvjzI1mPpA9iwBRuL7z07VHR29mdAH8lkodK2+c5uTuUruKc vRHdhBkFtn+cSZwfhe5/Pkqa5k0EwDlE6qxWJ4DX97Sp/MJN1geIiK74Ag4xe6a4 X+6YOyxNRxLVy2zTvxO0ZumJY+TaGX08N5A0IBVCaf9n2fwKRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPjUKr+Lto9HRZzpNk/Vb2gyl71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvMDUyYmYyODAtMTY5My0z MDRiLWI5NTUtYjFjZDYzNWFlM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1 MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXJJJzETGdPy3dc7jkZhUKBbc2smcqua1b/3A+ZCS6es36tFwanZNWr wa6yl/YvdJJMRlDXai6TOhM6ONWD8cZH1Ycqt31PpodSmPp+IMDn1vOisUQEQ6y0 yRnWY/y65kw65KA8Us3+hs9WbRDSXFPQbuZbP75S1dQEzTE2rsRbzAiGgX6Kv3UE KUbN/GL5ofbigruGwUsJ4ArNpu5DQnce6CIjiy2VbGbSOE/8CwWGZplew0t1XAES ppPyeGWzfoM+SoYYzPG3OxuFEr3nudibjwAVii0OOd4JOAJpG8zZRvLUTZr66Te0 evJQ+2eeWO6trvSWWa57nEwl8q8r3Do= -----END CERTIFICATE-----Generated at Wed Jul 9 05:28:21 2025 by rpki-client