$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa File: a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json) Hash identifier: bvrHMqnvsJaDLA9mI6KY2u9FLeEu1THPW/h2zYehrVE= Subject key identifier: 7F:34:19:9F:BE:B6:62:CC:3E:26:40:ED:04:43:4B:33:3C:B0:04:BF Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584A305032F39CEAFCFEB4691CC0 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 46432 IP address blocks: 208.88.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:32:f3:9c:ea:fc:fe:b4:69:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=8ffe0b7d-32f1-40f6-92c4-e3baa217235b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:29:43:15:2f:68:19:9a:c9:3e:6c:db:fb:30: ef:94:8d:eb:5b:df:06:f8:8e:aa:fa:75:aa:f9:b1: 8c:b4:13:bd:be:2c:6e:b9:64:81:c6:21:41:e6:77: db:96:14:2d:f4:20:60:f7:34:94:d1:55:f0:ec:b0: 31:82:9d:40:56:37:0b:45:9f:45:b7:4b:86:d2:0f: 3b:ee:60:53:7d:f2:c2:5c:ba:1b:67:e8:91:d6:a5: ba:51:3d:3e:8d:81:11:33:3e:01:c8:38:89:09:6f: 56:fe:f8:ef:3b:1f:57:45:d9:63:34:22:91:00:56: 3f:92:84:51:7e:1e:54:c7:04:50:73:69:5e:12:6e: 14:12:c5:41:a3:a6:e9:92:69:ae:c8:e7:cb:2a:c2: 98:98:1b:44:2f:30:52:0a:fa:c8:f7:99:3f:99:0f: 00:63:08:df:e0:1b:2e:38:8e:8b:fb:8e:80:dd:c3: 13:d9:1f:5f:ef:95:3b:66:9a:29:27:a7:7d:e4:ed: 69:19:0b:a5:8f:39:c5:f2:7b:c7:1d:5e:41:aa:60: 42:13:28:43:98:b0:11:11:44:2e:72:94:72:8a:ba: 7a:1b:02:f9:07:b2:5e:bb:2c:3a:45:89:40:19:d6: 9b:47:d6:3b:eb:ca:f7:e0:c6:c0:28:4e:8a:5b:1e: f5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:34:19:9F:BE:B6:62:CC:3E:26:40:ED:04:43:4B:33:3C:B0:04:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:82:8f:e5:3f:ab:dd:b0:dc:bc:ba:1b:37:fa:2a:89:ec:71: e7:0b:d0:a2:c4:fc:4d:bd:0e:15:17:96:09:b8:ef:0d:fb:03: ae:8c:5d:20:d5:e9:70:d0:5c:1e:f3:3e:85:ad:d5:2f:75:92: 5d:f6:04:e1:80:3c:9e:9a:82:67:4f:5f:c5:78:d9:86:6b:21: c5:c8:39:c8:2f:c2:00:8f:7a:27:17:ef:fe:b6:56:6c:98:69: e2:f3:71:a7:ff:4b:35:f6:ec:26:a2:c1:42:c4:16:a6:62:32: 69:c6:c4:15:e3:39:a3:4c:85:3d:7e:e0:ec:6b:b4:03:e6:6e: 54:f9:53:4d:c2:d0:9a:a9:6e:41:3c:15:6d:af:55:4c:e7:57: f2:86:79:af:17:c8:dd:d7:0b:03:3b:e4:3a:b2:dd:71:e5:5e: c9:46:cb:69:d6:a7:0b:9a:f8:94:c1:bd:08:85:fe:e1:b4:1c: 92:07:d4:65:94:a9:23:b7:60:3d:89:27:10:21:a4:ee:c5:53: a3:7f:44:9a:fa:33:d5:92:5b:02:59:e7:07:66:64:b7:83:0f: cc:1a:2c:23:76:54:ae:f9:90:5d:87:32:f6:02:ec:e3:9f:5f: eb:56:2f:94:e9:4f:ff:ea:12:09:fa:30:dc:41:e6:04:ac:df: a5:77:26:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDLznOr8/rRpHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGZmZTBiN2QtMzJmMS00MGY2LTkyYzQtZTNiYWEyMTcyMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ClDFS9oGZrJPmzb+zDvlI3rW98G+I6q+nWq +bGMtBO9vixuuWSBxiFB5nfblhQt9CBg9zSU0VXw7LAxgp1AVjcLRZ9Ft0uG0g87 7mBTffLCXLobZ+iR1qW6UT0+jYERMz4ByDiJCW9W/vjvOx9XRdljNCKRAFY/koRR fh5UxwRQc2leEm4UEsVBo6bpkmmuyOfLKsKYmBtELzBSCvrI95k/mQ8AYwjf4Bsu OI6L+46A3cMT2R9f75U7ZpopJ6d95O1pGQuljznF8nvHHV5BqmBCEyhDmLAREUQu cpRyirp6GwL5B7Jeuyw6RYlAGdabR9Y768r34MbAKE6KWx717wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH80GZ++tmLMPiZA7QRDSzM8sAS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTk0M2E2MmUtOGFmNC0z NzI4LWFjMjEtZGI5NThiNTMxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGCj+U/q92w3Ly6Gzf6KonscecL0KLE/E29DhUXlgm47w37A66MXSDV 6XDQXB7zPoWt1S91kl32BOGAPJ6agmdPX8V42YZrIcXIOcgvwgCPeicX7/62VmyY aeLzcaf/SzX27CaiwULEFqZiMmnGxBXjOaNMhT1+4OxrtAPmblT5U03C0JqpbkE8 FW2vVUznV/KGea8XyN3XCwM75Dqy3XHlXslGy2nWpwua+JTBvQiF/uG0HJIH1GWU qSO3YD2JJxAhpO7FU6N/RJr6M9WSWwJZ5wdmZLeDD8waLCN2VK75kF2HMvYC7OOf X+tWL5TpT//qEgn6MNxB5gSs36V3Jv8= -----END CERTIFICATE-----Generated at Mon Jun 16 02:44:01 2025 by rpki-client