$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa File: 06aa229e-21d5-3132-8604-c88f6941821b.roa (raw, json) Hash identifier: qRmHK0LSQVbr138CJDOxBL+bX1qbjRHky5y8ZfxFHC0= Subject key identifier: 4E:A5:06:22:B5:14:0B:CE:5B:53:09:39:C0:E7:E6:83:56:76:02:21 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584950F965174F0807E359D83140 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 46432 IP address blocks: 208.88.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:65:17:4f:08:07:e3:59:d8:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=26371361-1079-48f4-85e3-dc81b1381c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2a:6e:6d:43:85:eb:e1:fc:a4:40:b0:0f:5a: 83:46:6f:d7:af:c3:75:2d:6d:1f:5b:f4:d7:dd:61: 78:17:28:92:07:e3:cd:8c:00:9c:73:e1:6d:4b:f7: 4e:84:57:d8:b0:8a:8d:19:34:01:3f:89:e1:7b:28: 77:fc:55:b7:0a:40:03:86:1b:de:96:44:7c:96:84: 58:14:f4:31:1a:17:37:20:d4:22:1e:b0:d5:87:4c: 46:6a:ac:aa:c8:53:b8:3f:23:0a:d0:33:ea:a2:61: 18:73:f9:88:59:c6:85:7a:eb:ca:a8:42:a2:b3:a9: 24:e4:eb:98:5d:6d:4e:11:c0:3a:f6:fd:4b:e0:89: e3:d5:49:8e:46:db:e1:c0:73:17:01:4b:3b:99:0c: b5:82:70:e3:e2:d0:38:dc:a5:aa:a2:24:c9:0c:9c: c5:07:01:95:10:a2:28:b9:9f:a5:46:13:23:46:b3: b7:9a:89:f1:98:49:fb:7a:1b:9f:2f:28:f3:a1:79: 6d:ca:58:14:67:cb:59:ff:6c:b2:c5:34:7b:bf:6b: 30:5d:30:5f:e6:31:26:4d:24:40:b9:bc:d7:d8:f9: 2b:2c:89:b1:f8:5d:55:57:23:34:da:b0:f3:38:30: ce:1a:5e:be:e9:34:ae:28:35:02:3d:12:10:5d:79: 89:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A5:06:22:B5:14:0B:CE:5B:53:09:39:C0:E7:E6:83:56:76:02:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6a:6b:e0:7d:cf:b7:de:d4:c1:71:1e:15:34:a1:d3:f0:78: f9:c8:b0:19:a3:2e:cd:6a:fd:1c:1f:32:e5:6a:f9:66:33:a9: ef:ab:0b:fa:36:66:7e:24:6e:0d:5b:02:a1:ac:dd:08:c9:a0: 89:f4:b0:eb:af:09:8e:de:c9:dd:34:e2:62:4f:8a:be:9d:44: 40:2b:66:0c:71:e2:da:9f:83:65:e8:ef:ae:64:43:57:19:8c: 7e:3f:eb:01:aa:28:80:43:a3:0d:f9:a3:8e:73:de:9a:9e:9e: 95:2a:19:b5:08:d4:55:df:41:b0:2d:0f:a7:ea:56:fb:aa:b9: 7e:8c:2b:56:73:27:7f:dc:b4:a5:c5:6b:da:7a:f5:e6:30:6d: 7d:2d:8b:fe:9c:08:3f:e4:ba:18:b1:a2:80:6d:84:77:89:8b: 5a:64:b4:fe:7a:44:e5:4b:ed:03:10:44:29:cc:16:df:53:39: 73:02:67:e7:77:4c:56:77:1e:4d:97:e9:ac:e9:e0:61:5d:be: 5e:c3:08:c2:4e:4d:38:16:ad:f5:d8:95:4e:44:1b:f7:bf:0d: 58:72:9e:20:d6:5d:14:81:e3:d4:90:42:38:d5:79:88:71:fa: 50:22:c7:34:5a:d8:9f:e0:44:71:ea:68:b2:18:f1:e6:63:b2: b3:97:1d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WUXTwgH41nYMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk MjYzNzEzNjEtMTA3OS00OGY0LTg1ZTMtZGM4MWIxMzgxYzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ypubUOF6+H8pECwD1qDRm/Xr8N1LW0fW/TX 3WF4FyiSB+PNjACcc+FtS/dOhFfYsIqNGTQBP4nheyh3/FW3CkADhhvelkR8loRY FPQxGhc3INQiHrDVh0xGaqyqyFO4PyMK0DPqomEYc/mIWcaFeuvKqEKis6kk5OuY XW1OEcA69v1L4Inj1UmORtvhwHMXAUs7mQy1gnDj4tA43KWqoiTJDJzFBwGVEKIo uZ+lRhMjRrO3monxmEn7ehufLyjzoXltylgUZ8tZ/2yyxTR7v2swXTBf5jEmTSRA ubzX2PkrLImx+F1VVyM02rDzODDOGl6+6TSuKDUCPRIQXXmJEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6lBiK1FAvOW1MJOcDn5oNWdgIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvMDZhYTIyOWUtMjFkNS0z MTMyLTg2MDQtYzg4ZjY5NDE4MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZqa+B9z7fe1MFxHhU0odPwePnIsBmjLs1q/RwfMuVq+WYzqe+rC/o2 Zn4kbg1bAqGs3QjJoIn0sOuvCY7eyd004mJPir6dREArZgxx4tqfg2Xo765kQ1cZ jH4/6wGqKIBDow35o45z3pqenpUqGbUI1FXfQbAtD6fqVvuquX6MK1ZzJ3/ctKXF a9p69eYwbX0ti/6cCD/kuhixooBthHeJi1pktP56ROVL7QMQRCnMFt9TOXMCZ+d3 TFZ3Hk2X6azp4GFdvl7DCMJOTTgWrfXYlU5EG/e/DVhyniDWXRSB49SQQjjVeYhx +lAixzRa2J/gRHHqaLIY8eZjsrOXHUY= -----END CERTIFICATE-----Generated at Tue Apr 29 11:28:21 2025 by rpki-client