$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa File: ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa (raw, json) Hash identifier: GbYgTJGpl04KY/+TvQzvnQ+6Dq1yglleCm/O9gjDre4= Subject key identifier: 83:B1:50:BA:26:76:A4:5C:9F:05:EB:60:19:AF:06:CD:BC:66:C7:BC Certificate issuer: /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c Certificate serial: 010D0C9F4328584A10354DF85CEDF2C1D0D755E0 Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 10578 IP address blocks: 192.5.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4d:f8:5c:ed:f2:c1:d0:d7:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=4ae84c57-2d5b-45b8-b107-75c26e0b0dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:61:14:e3:b4:6f:8f:41:2f:f8:45:04:e0: a8:7e:55:dc:42:1e:84:30:79:d8:e3:d6:4d:17:10: fd:17:ba:7b:0e:2d:f8:bf:84:78:7b:3a:e1:fd:7b: db:97:89:c6:59:95:40:2c:55:1f:6c:2d:e6:90:54: 93:1e:12:63:30:64:1e:be:67:91:0b:2c:50:17:c6: 9d:b8:d8:85:71:b2:bf:05:19:91:fe:e6:c6:4b:6b: 5a:75:76:7b:1f:05:aa:8c:73:b4:7e:bd:66:b6:c6: 83:4f:3e:9a:7a:4a:c5:d1:55:84:74:bf:2d:2a:8d: cd:55:31:ee:ec:d2:2a:bf:f5:a7:a0:a9:a4:eb:6a: 06:49:8a:c5:5b:ed:99:be:e9:56:29:3c:cf:d0:2e: 7d:23:48:c8:14:2b:2f:fb:cb:10:68:21:a4:ce:37: 5f:9c:eb:2c:84:4e:b8:78:46:5c:96:3a:d1:a2:21: c0:a6:74:4e:35:83:a7:55:d6:7a:f9:29:17:96:9d: 49:36:18:d1:c9:b7:ec:45:00:5b:92:b6:be:65:ad: 55:d2:57:f8:34:83:bc:3c:43:0f:5d:97:f3:e0:29: cf:b6:a3:26:0b:16:d4:6a:83:fe:e3:7c:9a:41:be: 32:9c:d1:c6:f0:89:4e:8c:c5:0b:e2:f6:f5:7a:08: 31:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B1:50:BA:26:76:A4:5C:9F:05:EB:60:19:AF:06:CD:BC:66:C7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl X509v3 Authority Key Identifier: keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer sbgp-ipAddrBlock: critical IPv4: 192.5.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b9:e6:d4:2f:52:a3:3e:c7:d5:c3:f0:50:f7:51:49:09:07: de:39:fd:5f:53:25:b9:f1:ac:8a:94:ef:fa:68:18:9c:e0:c7: f5:2a:6d:e6:e6:24:eb:04:75:4e:b8:e2:50:2e:38:44:e7:6c: 65:2e:d6:6d:b6:2b:dc:af:65:ff:18:e2:1e:24:6f:b5:c1:96: 3c:0a:70:71:ac:a1:89:74:17:40:d6:22:bc:30:4a:5b:b0:a5: 0d:ff:8d:45:aa:8e:47:20:30:7d:85:19:0d:33:b4:da:a2:a5: 80:03:af:7e:4b:8e:ab:7d:82:89:4d:71:e1:9e:21:76:73:f2: 7e:ed:14:df:be:2b:07:0b:d0:43:c6:7b:2a:77:6d:f1:48:66: 9f:b6:e5:64:5b:22:0a:7a:f9:40:b2:93:71:e7:14:56:f2:79: 2a:1f:0a:a6:a7:bd:64:a7:e7:84:74:db:7a:46:b0:70:b5:86: 4c:6e:af:98:4b:da:92:f5:ed:bf:14:d0:38:55:59:30:7c:14: 93:35:a9:71:26:9e:a4:2f:cf:8e:f2:83:16:79:5e:db:96:7f: 76:25:76:94:d5:b2:8b:8f:a4:7a:7a:b8:e6:89:0b:d4:a0:79: 0a:9f:a7:71:9e:66:dd:78:e5:cd:e6:25:2d:1f:42:c9:b7:89: 62:d7:15:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNU34XO3ywdDXVeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3 ZDdjMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NGFlODRjNTctMmQ1Yi00NWI4LWIxMDctNzVjMjZlMGIwZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUZhFOO0b49BL/hFBOCoflXcQh6EMHnY49ZN FxD9F7p7Di34v4R4ezrh/Xvbl4nGWZVALFUfbC3mkFSTHhJjMGQevmeRCyxQF8ad uNiFcbK/BRmR/ubGS2tadXZ7HwWqjHO0fr1mtsaDTz6aekrF0VWEdL8tKo3NVTHu 7NIqv/WnoKmk62oGSYrFW+2ZvulWKTzP0C59I0jIFCsv+8sQaCGkzjdfnOsshE64 eEZcljrRoiHApnRONYOnVdZ6+SkXlp1JNhjRybfsRQBbkra+Za1V0lf4NIO8PEMP XZfz4CnPtqMmCxbUaoP+43yaQb4ynNHG8IlOjMUL4vb1eggxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOxULomdqRcnwXrYBmvBs28Zse8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvZWYyZThjODYtNmY1ZC0z OTg5LWE5YmQtMDJmOWYyMjEyYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0 YzBlZjdkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH655tQvUqM+x9XD8FD3UUkJB945/V9TJbnxrIqU7/poGJzgx/Uqbebm JOsEdU644lAuOETnbGUu1m22K9yvZf8Y4h4kb7XBljwKcHGsoYl0F0DWIrwwSluw pQ3/jUWqjkcgMH2FGQ0ztNqipYADr35Ljqt9golNceGeIXZz8n7tFN++KwcL0EPG eyp3bfFIZp+25WRbIgp6+UCyk3HnFFbyeSofCqanvWSn54R023pGsHC1hkxur5hL 2pL17b8U0DhVWTB8FJM1qXEmnqQvz47ygxZ5XtuWf3YldpTVsouPpHp6uOaJC9Sg eQqfp3GeZt145c3mJS0fQsm3iWLXFXc= -----END CERTIFICATE-----Generated at Sun Jun 15 23:20:11 2025 by rpki-client