$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa File: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (raw, json) Hash identifier: iTXHhTCLUSUknv7GcOV0kiNkzXEyf+7T79Dpzp4h45M= Subject key identifier: 1A:50:7B:E5:E5:88:9E:C1:08:C1:35:1B:10:69:AF:9F:06:97:57:25 Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F43285849F87A924473E67BCC2F8D8700 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 30158 IP address blocks: 199.189.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:92:44:73:e6:7b:cc:2f:8d:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=13e59817-f68c-453e-8c55-ee52463f8069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:c1:02:35:cd:9b:fe:3b:12:3f:2f:50:8f: a7:79:56:42:ae:7f:61:1c:85:05:65:05:06:9a:e8: 3f:63:74:59:78:0f:40:29:db:23:82:36:fb:f1:47: bc:6d:e2:5f:fe:e6:58:83:2a:fe:69:8a:88:b1:79: 17:eb:31:54:b0:bf:74:93:fe:23:27:ac:76:05:92: 19:84:53:0d:16:6e:ce:85:c7:19:f6:c0:b6:06:69: 48:d8:9a:47:c6:73:1b:22:04:36:bb:dd:55:c3:3d: 7d:19:4d:8c:ab:bb:7e:07:30:6b:dc:7e:0c:87:df: f7:e8:f4:09:1c:ef:80:27:ea:c3:76:e5:dc:aa:b5: 7b:ce:aa:0a:ef:a6:53:82:3b:1f:61:ed:37:70:75: 38:b1:6a:39:a3:33:21:d0:25:9f:aa:10:94:28:d9: ad:af:c5:69:e2:be:48:b0:b2:74:09:f8:df:a9:3c: fe:d0:e1:65:fe:12:68:65:33:1e:32:e9:c8:a4:e7: 49:55:d8:fe:a2:c2:30:90:4b:80:e3:17:66:4f:68: 55:7f:5f:95:0d:97:49:c1:41:2c:75:a6:c8:5f:8a: 3c:93:a2:c3:49:de:ee:ce:b8:8f:c2:e5:fe:96:52: a1:af:1f:95:a6:ef:01:25:ad:ed:92:46:74:43:b4: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:50:7B:E5:E5:88:9E:C1:08:C1:35:1B:10:69:AF:9F:06:97:57:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:88:51:3e:5f:ce:f3:33:25:00:a2:f9:58:97:15:3a:fa:64: 91:c5:31:4a:38:26:06:ec:1d:74:4e:22:40:23:d6:c4:58:b0: d5:51:6b:c0:91:72:8e:d4:01:fc:94:82:63:7f:c4:83:4c:03: 53:cb:dd:48:9d:18:0f:42:5d:13:44:59:7d:61:5d:40:47:d6: 38:4a:ab:3d:78:58:ec:58:dd:86:72:ca:81:84:63:b1:40:59: 96:97:0a:ab:13:f8:e8:c4:2c:50:bb:cd:72:aa:e0:ca:aa:6a: 77:34:88:d9:2b:80:03:7f:94:04:70:f3:ed:3d:a9:b6:d4:48: f2:08:8f:43:9a:47:4b:ff:f3:cf:0f:01:fd:c5:3d:87:5a:15: c4:9b:0a:b4:e1:4c:07:4b:68:96:01:07:43:a7:02:0d:8d:b2: 8a:5a:f2:43:5a:f4:b6:d1:60:00:cb:50:4a:b6:5b:b8:e3:b6: da:bd:7c:7c:ed:e2:a6:d3:19:41:f4:ba:80:26:50:c8:68:47: c9:a0:81:3c:60:54:96:6f:d9:e3:ea:87:c7:88:b1:cd:b2:2e: 41:6a:29:59:37:5e:6a:45:1c:0f:73:a4:df:9f:06:9a:da:c2: 2f:b2:a5:f9:45:9b:06:23:ee:91:f3:bd:fc:a0:12:a6:76:4f: 9e:87:8e:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4epJEc+Z7zC+NhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MTNlNTk4MTctZjY4Yy00NTNlLThjNTUtZWU1MjQ2M2Y4MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQjBAjXNm/47Ej8vUI+neVZCrn9hHIUFZQUG mug/Y3RZeA9AKdsjgjb78Ue8beJf/uZYgyr+aYqIsXkX6zFUsL90k/4jJ6x2BZIZ hFMNFm7OhccZ9sC2BmlI2JpHxnMbIgQ2u91Vwz19GU2Mq7t+BzBr3H4Mh9/36PQJ HO+AJ+rDduXcqrV7zqoK76ZTgjsfYe03cHU4sWo5ozMh0CWfqhCUKNmtr8Vp4r5I sLJ0CfjfqTz+0OFl/hJoZTMeMunIpOdJVdj+osIwkEuA4xdmT2hVf1+VDZdJwUEs dabIX4o8k6LDSd7uzriPwuX+llKhrx+Vpu8BJa3tkkZ0Q7SEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpQe+XliJ7BCME1GxBpr58Gl1clMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvMDZjOTEyOGEtOTI4NS0z YWZiLTk0ZTUtMTlhOTZiMGYyYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx73KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOIUT5fzvMzJQCi+ViXFTr6ZJHFMUo4JgbsHXROIkAj1sRYsNVRa8CR co7UAfyUgmN/xINMA1PL3UidGA9CXRNEWX1hXUBH1jhKqz14WOxY3YZyyoGEY7FA WZaXCqsT+OjELFC7zXKq4Mqqanc0iNkrgAN/lARw8+09qbbUSPIIj0OaR0v/888P Af3FPYdaFcSbCrThTAdLaJYBB0OnAg2Nsopa8kNa9LbRYADLUEq2W7jjttq9fHzt 4qbTGUH0uoAmUMhoR8mggTxgVJZv2ePqh8eIsc2yLkFqKVk3XmpFHA9zpN+fBpra wi+ypflFmwYj7pHzvfygEqZ2T56HjrU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:37 2025 by rpki-client