$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa File: 8b8a85b0-e152-340d-9552-d571b618a288.roa (raw, json) Hash identifier: DP/bXA0gOQrDOiI2sz3AOc2eBW2Sivi/s/cZvG6RdCw= Subject key identifier: C1:18:3E:3F:BE:40:70:21:48:D9:B4:7E:A6:1D:B0:FA:59:E7:F6:FF Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F43285849F87A926837906F20B534A6C0 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 30158 IP address blocks: 199.189.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:92:68:37:90:6f:20:b5:34:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=cf9dfdbf-a805-4e14-a1b4-b4bffb87a54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:37:5e:19:ec:3c:52:ed:dc:94:e9:eb:15:fc: 99:af:94:a2:7b:0f:72:c7:dd:df:6d:7d:b4:43:df: f6:33:18:18:f0:87:8e:80:f8:c7:ba:63:53:06:59: 59:5f:5c:82:0a:62:97:e2:c5:fc:b6:29:c6:b6:ce: 28:43:e6:33:be:f1:3d:de:6d:db:b1:c6:f0:3d:45: 43:f2:74:0b:9f:38:dd:c7:e6:32:a9:72:a7:32:b1: b3:04:ad:27:91:6b:a5:63:e2:c4:73:03:51:00:c1: f2:1d:d6:00:0d:62:b5:92:bf:a2:6e:2b:95:e8:0e: 2f:d9:26:6d:5b:25:54:b6:02:d2:30:30:4a:db:e9: 5e:dc:52:80:93:82:ac:e0:1f:9f:cb:00:75:c6:39: 28:1d:8b:f6:7c:27:5c:d4:98:68:3c:d7:38:d7:71: da:d4:79:ca:69:57:c5:58:a4:45:5e:0e:1b:7a:8c: c8:88:7d:d0:8c:0b:2a:52:29:7a:89:d3:f4:7f:ed: ed:58:d0:a2:49:03:00:5d:9b:7d:87:67:57:3a:ca: c5:cf:5e:e1:bd:61:12:20:ae:2b:ee:81:ab:50:41: ec:25:d8:d9:5c:eb:73:a5:63:7c:a5:0a:b9:28:12: 93:fe:7d:2c:c6:cf:96:00:12:99:ef:4f:fb:1c:17: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:18:3E:3F:BE:40:70:21:48:D9:B4:7E:A6:1D:B0:FA:59:E7:F6:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/8b8a85b0-e152-340d-9552-d571b618a288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: 199.189.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:06:28:26:03:1b:67:43:09:1e:b0:85:8f:2a:12:9a:26:b7: c8:04:be:b9:76:1f:fa:0a:06:13:1d:2a:7b:3e:48:41:99:5d: 34:af:d6:cc:1f:a7:c4:b3:27:77:54:12:0a:3e:6d:0f:1f:04: 80:3c:f9:96:2d:1a:28:86:a7:e0:9c:82:6a:a0:3b:07:08:cd: c7:31:16:e4:ad:75:50:2c:c2:bf:b7:11:ae:74:ce:dd:7f:bc: 75:a2:1a:aa:8c:f8:44:2e:0d:b6:7f:31:1a:6b:17:43:5e:84: 05:b7:97:91:d9:d0:a7:fb:b4:ae:2e:95:e4:e3:ba:10:9b:82: 50:94:37:9b:9e:37:26:5c:65:90:ec:48:95:73:b0:29:63:63: f7:79:56:42:b9:07:b9:97:3b:03:7e:c1:41:69:8a:28:3a:3e: 75:e2:1a:77:1f:b0:b6:13:48:d0:59:05:3f:8b:d7:e1:6c:ee: 7b:df:77:98:19:90:9c:0d:f9:c3:e5:1f:d9:d2:cd:30:03:cb: f9:d3:0d:a6:46:f1:4e:5e:2d:08:17:93:04:ca:ea:fd:55:08: 8e:0a:09:e2:59:18:c5:e8:69:ea:d5:c2:71:08:1d:cd:cd:31: d9:57:f4:c8:a9:b8:0e:c4:84:90:4c:e9:e2:47:2e:90:0c:25: 9d:22:6d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4epJoN5BvILU0psAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk Y2Y5ZGZkYmYtYTgwNS00ZTE0LWExYjQtYjRiZmZiODdhNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzdeGew8Uu3clOnrFfyZr5Siew9yx93fbX20 Q9/2MxgY8IeOgPjHumNTBllZX1yCCmKX4sX8tinGts4oQ+YzvvE93m3bscbwPUVD 8nQLnzjdx+YyqXKnMrGzBK0nkWulY+LEcwNRAMHyHdYADWK1kr+ibiuV6A4v2SZt WyVUtgLSMDBK2+le3FKAk4Ks4B+fywB1xjkoHYv2fCdc1JhoPNc413Ha1HnKaVfF WKRFXg4beozIiH3QjAsqUil6idP0f+3tWNCiSQMAXZt9h2dXOsrFz17hvWESIK4r 7oGrUEHsJdjZXOtzpWN8pQq5KBKT/n0sxs+WABKZ70/7HBf1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEYPj++QHAhSNm0fqYdsPpZ5/b/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvOGI4YTg1YjAtZTE1Mi0z NDBkLTk1NTItZDU3MWI2MThhMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0GKCYDG2dDCR6whY8qEpomt8gEvrl2H/oKBhMdKns+SEGZXTSv1swf p8SzJ3dUEgo+bQ8fBIA8+ZYtGiiGp+CcgmqgOwcIzccxFuStdVAswr+3Ea50zt1/ vHWiGqqM+EQuDbZ/MRprF0NehAW3l5HZ0Kf7tK4uleTjuhCbglCUN5ueNyZcZZDs SJVzsCljY/d5VkK5B7mXOwN+wUFpiig6PnXiGncfsLYTSNBZBT+L1+Fs7nvfd5gZ kJwN+cPlH9nSzTADy/nTDaZG8U5eLQgXkwTK6v1VCI4KCeJZGMXoaerVwnEIHc3N MdlX9MipuA7EhJBM6eJHLpAMJZ0ibeQ= -----END CERTIFICATE-----Generated at Mon Jun 16 05:02:46 2025 by rpki-client