$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa File: 1af7f89d-d1da-35f0-bbd2-2132fad40618.roa (raw, json) Hash identifier: XOEkDk0VmabxwmQsAc7eNHbmqPw64VU9jLd6mmdc95c= Subject key identifier: 0F:5D:9A:95:FC:62:EF:D6:F9:29:B0:F5:CA:C8:59:95:77:0F:63:58 Certificate issuer: /CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Certificate serial: 010D0C9F43285849DC8FABF700CED10EB5600780 Authority key identifier: 8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 396400 IP address blocks: 204.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:ab:f7:00:ce:d1:0e:b5:60:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=cf07a3ed-4347-4eef-b4b9-cd308cb3fb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:3e:b2:09:bc:70:d3:7d:5a:0f:88:10:5c: a8:5f:24:c9:7c:eb:6d:0f:46:a9:64:61:f1:c8:50: 41:3b:39:ce:a6:8a:4b:1a:fc:01:b3:01:84:69:63: 45:5f:6f:83:f0:ff:f3:90:c4:04:f6:7b:c0:a9:18: 22:10:00:d8:3b:74:3b:73:09:c7:12:b2:4a:54:77: d8:c0:01:af:68:de:97:97:14:b0:17:ae:ab:51:de: f2:56:a3:07:29:1a:6d:e1:76:b5:a9:a5:38:f3:bf: 25:cc:f1:86:8b:f4:68:de:64:18:c1:f8:f0:71:f4: d3:c8:82:65:8e:ad:a2:89:24:96:96:d8:16:d8:6a: a7:be:2c:14:8d:27:9e:76:dd:cc:ca:2f:b0:88:d3: 0e:88:8f:54:ce:90:3b:4b:b7:a2:4a:ef:3c:e6:5f: 8a:47:a5:a7:9a:9a:23:27:b2:2c:a6:5c:1e:6b:c0: 0f:bc:77:b1:d6:83:38:31:7a:d3:b3:b3:8f:18:76: 97:67:ca:4d:a1:48:0e:54:9a:b4:ed:60:66:2b:f6: 5d:b2:0b:6c:40:0b:ef:65:5b:be:12:80:96:61:b2: b8:cb:a9:1a:40:9c:0d:80:fc:5c:04:8b:3e:df:28: 5a:76:66:3b:96:0c:41:55:d1:0d:b3:80:f0:a8:5b: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:9A:95:FC:62:EF:D6:F9:29:B0:F5:CA:C8:59:95:77:0F:63:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl X509v3 Authority Key Identifier: keyid:8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer sbgp-ipAddrBlock: critical IPv4: 204.89.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8b:cc:58:ac:84:cc:d6:58:b9:00:0a:e6:49:08:92:f5:cb: 07:b7:65:45:40:67:06:a2:18:cd:ee:86:fc:17:d3:11:8e:f6: 85:44:74:cc:d9:a1:e2:dc:56:e9:88:f9:ae:93:7a:f2:39:ea: 2a:c3:2f:7c:24:b4:d3:13:64:28:3e:8e:9d:68:5f:36:f3:3f: d7:17:9c:89:bb:8a:dd:54:ce:94:e6:b2:88:8d:c9:0c:70:6c: ee:d0:0e:79:fc:d7:18:40:b8:f3:ef:cc:c3:bc:a9:81:14:6d: a5:e8:08:90:85:6c:61:ef:b2:09:ae:a4:6f:02:59:da:e7:04: f0:66:a2:4d:c4:b1:dc:53:63:43:d9:4c:bc:6c:1c:d5:46:5a: a8:b2:eb:3e:8b:9a:af:bb:41:97:98:3e:e6:73:9d:09:4a:e6: b0:49:4a:2f:c9:24:57:20:b3:9e:9c:3d:b9:b7:e8:11:e2:76: 0b:90:4b:54:8b:a8:3c:d1:7e:5c:49:d7:d8:5d:0e:6c:c6:19: 28:c7:d9:56:5b:fc:be:7c:5f:d8:b3:98:0b:c2:21:ba:a1:a0: 6d:5c:39:c0:6a:42:3a:b6:a1:19:84:5f:6c:24:19:12:21:92: c7:a1:da:5a:33:28:ac:40:02:00:32:09:b5:08:94:f7:3b:83: 87:fe:69:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj6v3AM7RDrVgB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUwZDFiYjktMmVmOS00ODEwLTgxMDktMjVjZGQ1YWZj NGZkMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2YwN2EzZWQtNDM0Ny00ZWVmLWI0YjktY2QzMDhjYjNmYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuI+sgm8cNN9Wg+IEFyoXyTJfOttD0apZGHx yFBBOznOpopLGvwBswGEaWNFX2+D8P/zkMQE9nvAqRgiEADYO3Q7cwnHErJKVHfY wAGvaN6XlxSwF66rUd7yVqMHKRpt4Xa1qaU4878lzPGGi/Ro3mQYwfjwcfTTyIJl jq2iiSSWltgW2GqnviwUjSeedt3Myi+wiNMOiI9UzpA7S7eiSu885l+KR6Wnmpoj J7Isplwea8APvHex1oM4MXrTs7OPGHaXZ8pNoUgOVJq07WBmK/ZdsgtsQAvvZVu+ EoCWYbK4y6kaQJwNgPxcBIs+3yhadmY7lgxBVdENs4DwqFuaEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9dmpX8Yu/W+Smw9crIWZV3D2NYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBk MWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNkZDVhZmM0ZmQvMWFmN2Y4OWQtZDFkYS0z NWYwLWJiZDItMjEzMmZhZDQwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODUwZDFiYjktMmVmOS00ODEwLTgx MDktMjVjZGQ1YWZjNGZkLzg1MGQxYmI5LTJlZjktNDgxMC04MTA5LTI1Y2RkNWFm YzRmZC5jcmwwHwYDVR0jBBgwFoAUi3aXN6k5bQ2eBOg7ZEJtY8aQAHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBkMWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNk ZDVhZmM0ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2LzFishMzWWLkACuZJCJL1ywe3ZUVAZwaiGM3uhvwX0xGO9oVEdMzZ oeLcVumI+a6TevI56irDL3wktNMTZCg+jp1oXzbzP9cXnIm7it1UzpTmsoiNyQxw bO7QDnn81xhAuPPvzMO8qYEUbaXoCJCFbGHvsgmupG8CWdrnBPBmok3EsdxTY0PZ TLxsHNVGWqiy6z6Lmq+7QZeYPuZznQlK5rBJSi/JJFcgs56cPbm36BHidguQS1SL qDzRflxJ19hdDmzGGSjH2VZb/L58X9izmAvCIbqhoG1cOcBqQjq2oRmEX2wkGRIh kseh2lozKKxAAgAyCbUIlPc7g4f+aRk= -----END CERTIFICATE-----Generated at Tue Jun 17 04:46:48 2025 by rpki-client