$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa File: d2408058-ca51-3795-af09-80fd33f404a8.roa (raw, json) Hash identifier: afONX8i7qmPbmfyNY1Ydj7uoMyAp7mnA8ktjgcX18Ac= Subject key identifier: 2D:E9:BD:B5:E3:BD:94:49:BA:8C:DC:EB:3F:11:B4:19:C0:B6:32:4C Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F4328584A629090758DD7668F46B7B100 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 397270 IP address blocks: 208.86.32.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:90:75:8d:d7:66:8f:46:b7:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=20be30fd-4740-4401-8e1f-638afbd6527a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:bf:79:20:12:5c:67:ca:80:c9:df:31:76: 98:e2:7c:4a:1e:5e:a1:f0:f8:7a:f9:21:3e:21:b4: 39:a3:fb:47:9b:48:00:99:43:5b:c9:85:d0:1c:0e: 65:a5:b4:a6:3d:63:86:5f:05:e6:19:12:21:a3:42: 01:49:cf:65:12:e6:4e:06:35:d1:88:23:74:14:18: 57:6c:c4:12:39:23:28:cd:7e:12:9a:ac:3a:a5:bf: 84:f9:40:87:80:22:a5:60:63:78:ea:2a:1d:d2:30: 6c:68:a7:0f:1f:3f:7f:3c:0e:8c:7c:2c:b9:98:d8: 8c:31:09:34:90:0a:e2:4e:ca:a3:f6:d3:30:c0:78: 53:e9:91:68:90:6f:d9:09:67:7e:41:94:b7:12:df: 70:2a:cf:d4:d9:1c:21:69:37:47:ca:76:9f:e2:e9: f0:2a:14:2b:8d:12:4e:37:4c:fc:44:63:7e:c4:0f: f5:32:ea:ed:07:87:f4:0b:7d:e3:e6:df:03:7c:4e: 27:1e:bc:f7:28:ac:4e:69:44:3d:fe:24:25:0a:72: 7c:a7:37:c4:f1:68:d3:33:2c:e3:66:4c:42:e4:15: 35:11:84:c9:43:de:4e:f6:ce:5e:a6:e3:26:6f:6f: 86:ac:73:30:10:fb:39:0e:7d:ca:de:d5:5e:29:5a: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E9:BD:B5:E3:BD:94:49:BA:8C:DC:EB:3F:11:B4:19:C0:B6:32:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:67:9a:6b:32:83:69:00:00:b8:70:4e:7d:96:5d:6b:4c:50: 66:de:46:2b:a7:00:54:1e:ce:54:97:e1:d3:51:cf:88:7b:15: c7:94:4b:ce:72:db:2f:d0:45:91:7c:35:be:2b:7b:52:a4:53: 61:5b:f9:14:24:35:da:b6:9c:72:34:8d:0c:74:ed:fb:8f:7a: e4:48:fc:1d:14:10:10:60:d2:02:28:2b:02:b2:a3:d5:c3:c8: 45:ea:74:74:bf:a2:80:27:ec:24:17:62:ba:ff:97:9d:29:f0: 8e:15:f5:c1:f0:64:ab:3e:88:89:8a:f3:3d:61:70:8d:f5:32: 96:28:8f:79:2d:0d:ef:f8:52:b4:85:ca:fa:19:28:35:05:c0: 62:a3:35:af:38:bb:1f:33:79:98:84:d2:bb:87:ab:67:7c:00: 91:26:97:3c:40:80:1c:a9:ce:53:34:36:83:bd:5a:07:76:28: 68:36:79:41:eb:1d:c5:7e:51:d5:03:8e:e0:24:ef:56:bb:0a: 3a:da:3e:0c:b1:24:4e:99:c0:82:0e:c3:71:ee:07:b6:b3:12: 2f:78:e9:b7:f7:4c:73:dd:ac:db:3f:26:b5:d7:8d:59:ea:67: 41:03:8b:d5:7d:9f:b8:68:fe:c3:e5:25:07:76:14:a0:73:4e: 93:7a:c4:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJB1jddmj0a3sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MjBiZTMwZmQtNDc0MC00NDAxLThlMWYtNjM4YWZiZDY1MjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYa/eSASXGfKgMnfMXaY4nxKHl6h8Ph6+SE+ IbQ5o/tHm0gAmUNbyYXQHA5lpbSmPWOGXwXmGRIho0IBSc9lEuZOBjXRiCN0FBhX bMQSOSMozX4Smqw6pb+E+UCHgCKlYGN46iod0jBsaKcPHz9/PA6MfCy5mNiMMQk0 kAriTsqj9tMwwHhT6ZFokG/ZCWd+QZS3Et9wKs/U2RwhaTdHynaf4unwKhQrjRJO N0z8RGN+xA/1MurtB4f0C33j5t8DfE4nHrz3KKxOaUQ9/iQlCnJ8pzfE8WjTMyzj ZkxC5BU1EYTJQ95O9s5epuMmb2+GrHMwEPs5Dn3K3tVeKVq6sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3pvbXjvZRJuozc6z8RtBnAtjJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvZDI0MDgwNTgtY2E1MS0z Nzk1LWFmMDktODBmZDMzZjQwNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdnmmsyg2kAALhwTn2WXWtMUGbeRiunAFQezlSX4dNRz4h7FceUS85y 2y/QRZF8Nb4re1KkU2Fb+RQkNdq2nHI0jQx07fuPeuRI/B0UEBBg0gIoKwKyo9XD yEXqdHS/ooAn7CQXYrr/l50p8I4V9cHwZKs+iImK8z1hcI31MpYoj3ktDe/4UrSF yvoZKDUFwGKjNa84ux8zeZiE0ruHq2d8AJEmlzxAgBypzlM0NoO9Wgd2KGg2eUHr HcV+UdUDjuAk71a7CjraPgyxJE6ZwIIOw3HuB7azEi946bf3THPdrNs/JrXXjVnq Z0EDi9V9n7ho/sPlJQd2FKBzTpN6xMo= -----END CERTIFICATE-----Generated at Thu Jul 10 13:43:29 2025 by rpki-client