$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4a33281e-4962-3080-ab15-fc843e0b2776.roa File: 4a33281e-4962-3080-ab15-fc843e0b2776.roa (raw, json) Hash identifier: Pe9VReUbhk22C1BJIC5Ryg7my8DExc9cKeNS1cj+CuE= Subject key identifier: E8:3E:8E:C8:CF:6C:52:04:6D:7E:D3:CD:9D:A2:CD:57:2A:45:7B:04 Certificate issuer: /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d Certificate serial: 010D0C9F4328584996C4B0D282358250F3EAE420 Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4a33281e-4962-3080-ab15-fc843e0b2776.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 0 IP address blocks: 199.88.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b0:d2:82:35:82:50:f3:ea:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=a604d81f-932a-4b91-ac97-d02a1f6e793a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:a1:d5:48:fb:97:7c:ba:d1:b3:ce:c5:e0: 12:ce:18:4e:93:96:ee:45:04:46:dc:05:f8:73:b0: ee:04:73:e1:78:6f:76:5c:8e:7c:d8:13:b1:4a:79: e7:e4:fd:b3:eb:50:24:e0:0a:ca:c9:fc:ea:67:bf: a4:9f:73:00:0c:91:ee:ce:30:cc:65:95:c2:0f:47: c7:07:bc:67:06:62:a4:ec:f5:d1:c5:e6:b2:97:b1: ba:65:40:a0:16:56:96:46:72:f4:bc:1f:25:c7:a6: 4f:ef:41:68:82:0b:d4:e5:a2:7c:7e:72:de:92:75: 17:55:5e:bf:0b:35:12:43:08:c1:0b:0f:7f:12:52: df:e7:77:d1:c1:75:93:54:73:0f:bf:96:8d:5f:77: 94:b5:c4:20:e0:cd:f1:ca:38:05:89:66:e3:33:96: 85:37:6b:1a:e7:00:14:2c:7c:8f:93:7d:f5:ca:7d: c1:37:9c:15:1e:59:e0:ad:e9:f9:ef:5c:4e:29:92: 4a:55:9d:f7:2f:50:27:bf:ec:b0:af:4d:07:ef:16: d9:2d:67:aa:dd:e1:73:87:fd:db:7f:92:1d:51:d3: 0c:fb:e7:15:b4:01:f3:39:55:eb:b4:f5:11:bf:15: 9a:2d:a9:f2:f4:50:76:bc:1f:31:87:47:2a:b4:35: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3E:8E:C8:CF:6C:52:04:6D:7E:D3:CD:9D:A2:CD:57:2A:45:7B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/4a33281e-4962-3080-ab15-fc843e0b2776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl X509v3 Authority Key Identifier: keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer sbgp-ipAddrBlock: critical IPv4: 199.88.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:88:be:f0:06:85:19:d6:78:99:78:7d:b7:86:1f:e0:a8:ee: 94:47:b8:e6:54:60:36:4d:a7:75:1b:e5:f1:67:ce:0b:42:d3: 87:83:3c:0d:59:36:ea:53:1f:37:fe:9a:5b:e1:ab:b7:9c:95: c8:62:89:d0:18:94:9f:78:5f:02:f8:2f:0a:e1:26:f8:63:ac: 0f:82:49:0c:7d:d6:dd:21:23:b2:0f:c4:20:a9:db:41:f2:58: 5c:3e:f8:09:ba:8c:78:6b:9f:58:b1:c6:98:80:e0:45:a8:f4: ea:bf:92:5f:90:25:f3:eb:ea:09:71:35:ee:6c:98:fa:07:0c: 13:93:f5:80:7e:19:6a:08:55:65:b3:d2:f0:83:36:d1:f5:40: 85:34:e7:aa:f2:34:5b:79:6c:0c:ca:7b:21:4f:66:3d:d5:c2: 04:22:0a:ef:ff:2a:7f:3a:15:e3:6c:0c:86:18:0e:57:7c:7c: d1:33:94:6f:90:88:2e:00:4b:a4:f2:2d:24:f6:1c:56:3e:5b: ab:cf:3f:69:99:bb:56:7b:56:66:a6:f9:3d:0c:cd:d7:5c:59: 11:78:97:62:51:38:c2:1c:5a:9c:27:d1:db:14:60:4c:fa:62: 91:46:fa:00:bb:5e:18:cf:f2:af:a0:d4:7f:a6:36:09:16:b6: 71:84:e4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLDSgjWCUPPq5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlMGQxYTQtMmM4OC00NTk2LTgxZDctM2I2Njg1ZTA0 YTJkMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YTYwNGQ4MWYtOTMyYS00YjkxLWFjOTctZDAyYTFmNmU3OTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt+h1Uj7l3y60bPOxeASzhhOk5buRQRG3AX4 c7DuBHPheG92XI582BOxSnnn5P2z61Ak4ArKyfzqZ7+kn3MADJHuzjDMZZXCD0fH B7xnBmKk7PXRxeayl7G6ZUCgFlaWRnL0vB8lx6ZP70FoggvU5aJ8fnLeknUXVV6/ CzUSQwjBCw9/ElLf53fRwXWTVHMPv5aNX3eUtcQg4M3xyjgFiWbjM5aFN2sa5wAU LHyPk331yn3BN5wVHlngren571xOKZJKVZ33L1Anv+ywr00H7xbZLWeq3eFzh/3b f5IdUdMM++cVtAHzOVXrtPURvxWaLany9FB2vB8xh0cqtDXM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg+jsjPbFIEbX7TzZ2izVcqRXsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYmUw ZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2ODVlMDRhMmQvNGEzMzI4MWUtNDk2Mi0z MDgwLWFiMTUtZmM4NDNlMGIyNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGJlMGQxYTQtMmM4OC00NTk2LTgx ZDctM2I2Njg1ZTA0YTJkLzBiZTBkMWE0LTJjODgtNDU5Ni04MWQ3LTNiNjY4NWUw NGEyZC5jcmwwHwYDVR0jBBgwFoAUv5vktT4TlR8HU9jpDI5FWg61DIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wYmUwZDFhNC0yYzg4LTQ1OTYtODFkNy0zYjY2 ODVlMDRhMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1i6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSIvvAGhRnWeJl4fbeGH+Co7pRHuOZUYDZNp3Ub5fFnzgtC04eDPA1Z NupTHzf+mlvhq7eclchiidAYlJ94XwL4LwrhJvhjrA+CSQx91t0hI7IPxCCp20Hy WFw++Am6jHhrn1ixxpiA4EWo9Oq/kl+QJfPr6glxNe5smPoHDBOT9YB+GWoIVWWz 0vCDNtH1QIU056ryNFt5bAzKeyFPZj3VwgQiCu//Kn86FeNsDIYYDld8fNEzlG+Q iC4AS6TyLST2HFY+W6vPP2mZu1Z7Vmam+T0MzddcWRF4l2JROMIcWpwn0dsUYEz6 YpFG+gC7XhjP8q+g1H+mNgkWtnGE5Hk= -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:28 2025 by rpki-client