$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa File: 88e1c23f-3271-32f7-88d1-24b93968b4c1.roa (raw, json) Hash identifier: vEjGmhldByFFxricrItpoe/ANYc72tGrhho2qujQH04= Subject key identifier: 71:BA:07:96:00:5B:EA:50:D9:04:12:6B:CF:0B:D2:32:D8:8D:EB:8A Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285849D85F813B4D7BDD6DC3CDC060 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 1280 IP address blocks: 204.152.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:81:3b:4d:7b:dd:6d:c3:cd:c0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=31e79859-5fbe-415c-8f89-ded7326db772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:ba:3d:a9:00:be:80:34:e2:55:7e:03:11: ca:99:0d:dd:11:7f:40:7b:75:38:d1:b1:02:91:b1: 11:b9:5e:f8:cc:cd:78:fa:86:09:43:fc:f2:ea:e6: 05:53:28:e5:6b:4b:cb:80:6c:5e:35:e7:29:88:27: 6a:cd:78:10:9d:94:94:de:87:2f:b7:53:2b:c8:f8: 38:7b:be:ab:fb:2e:67:80:61:b5:5a:b0:b8:20:49: 22:53:44:8e:91:bf:18:82:2e:35:7e:4f:51:58:ca: 96:35:7c:db:54:98:15:97:bd:d4:16:d0:f5:1f:0d: 54:96:2f:8b:0e:03:8c:de:2f:28:c1:14:cf:b4:07: 1b:e0:e4:64:91:4c:04:e4:78:68:ec:3b:46:96:35: 87:b6:be:79:70:8b:06:e8:76:dc:10:af:65:3f:f2: 0b:fd:c6:2c:f7:0c:97:40:86:69:9e:36:8d:d5:35: 22:c5:4f:f5:e7:6d:e5:1f:bf:a8:01:08:ee:80:50: 68:51:8a:06:d7:c6:6d:be:1a:d5:60:7e:d2:54:1a: ab:a5:f1:56:fe:7e:23:ea:d3:e5:2a:bb:4a:74:db: a5:90:4b:a2:45:a5:86:83:59:79:49:80:7d:10:de: 6d:56:cf:c9:70:5e:82:13:d9:1c:5c:6f:9c:84:90: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BA:07:96:00:5B:EA:50:D9:04:12:6B:CF:0B:D2:32:D8:8D:EB:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:70:71:8a:b1:4e:c4:0b:c1:61:21:19:31:50:e5:b2:0e:78: a2:82:e7:de:a9:2d:00:fc:3d:49:01:a6:d5:37:ba:e0:0a:a2: 93:3b:a4:49:e5:a0:d6:fe:43:8c:af:f9:99:62:96:c1:8c:0f: 18:14:8d:31:94:07:e8:3e:68:24:81:c9:71:38:0d:8b:94:5b: e5:51:83:40:97:e5:03:05:78:0d:d8:4b:fd:cc:28:89:90:26: 8f:e1:6a:a3:2a:a1:8d:2d:16:84:47:9c:20:21:9b:dc:20:d9: 43:39:90:84:c7:49:3b:2a:f4:87:49:4b:7e:c0:f1:aa:5c:c3: 99:58:02:fe:ac:11:27:db:35:99:36:1c:83:5f:26:9c:35:ea: 6a:5c:e3:13:83:06:44:57:62:1c:6d:2b:49:ba:bc:d7:50:72: 0a:e0:29:51:34:65:96:67:83:86:e5:3d:d0:c7:af:96:da:40: 46:ac:7a:19:c9:67:32:0f:a8:10:4e:a7:0e:fd:42:fc:5c:72: b4:a9:2a:df:1c:47:a2:80:f2:30:e4:b9:df:dd:64:e2:95:9c: a8:88:ce:dc:14:1b:15:5d:21:9b:bd:bb:53:35:b8:df:1a:e6: f1:9a:6a:48:03:8e:1d:6f:c5:2b:31:dc:c3:d1:80:00:12:e9: 0f:b2:cd:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4E7TXvdbcPNwGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzFlNzk4NTktNWZiZS00MTVjLThmODktZGVkNzMyNmRiNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkS6PakAvoA04lV+AxHKmQ3dEX9Ae3U40bEC kbERuV74zM14+oYJQ/zy6uYFUyjla0vLgGxeNecpiCdqzXgQnZSU3ocvt1MryPg4 e76r+y5ngGG1WrC4IEkiU0SOkb8Ygi41fk9RWMqWNXzbVJgVl73UFtD1Hw1Uli+L DgOM3i8owRTPtAcb4ORkkUwE5Hho7DtGljWHtr55cIsG6HbcEK9lP/IL/cYs9wyX QIZpnjaN1TUixU/1523lH7+oAQjugFBoUYoG18ZtvhrVYH7SVBqrpfFW/n4j6tPl KrtKdNulkEuiRaWGg1l5SYB9EN5tVs/JcF6CE9kcXG+chJAGGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG6B5YAW+pQ2QQSa88L0jLYjeuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODhlMWMyM2YtMzI3MS0z MmY3LTg4ZDEtMjRiOTM5NjhiNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhwcYqxTsQLwWEhGTFQ5bIOeKKC596pLQD8PUkBptU3uuAKopM7pEnl oNb+Q4yv+ZlilsGMDxgUjTGUB+g+aCSByXE4DYuUW+VRg0CX5QMFeA3YS/3MKImQ Jo/haqMqoY0tFoRHnCAhm9wg2UM5kITHSTsq9IdJS37A8apcw5lYAv6sESfbNZk2 HINfJpw16mpc4xODBkRXYhxtK0m6vNdQcgrgKVE0ZZZng4blPdDHr5baQEasehnJ ZzIPqBBOpw79QvxccrSpKt8cR6KA8jDkud/dZOKVnKiIztwUGxVdIZu9u1M1uN8a 5vGaakgDjh1vxSsx3MPRgAAS6Q+yzb4= -----END CERTIFICATE-----Generated at Sun Jun 15 04:50:08 2025 by rpki-client