$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa File: 571b8118-104e-3581-a5fe-51b7936e3a4e.roa (raw, json) Hash identifier: 7N2nP6JfafpXMcq/vIbCQupvC9xTRQX7ZIS+oZWzeEM= Subject key identifier: 0A:58:6D:8E:29:29:CE:F3:38:2F:4C:76:D9:3C:D5:AD:AF:26:D5:4A Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F43285849ABB4A5360368E252086AB6C0 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16509 IP address blocks: 208.88.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a5:36:03:68:e2:52:08:6a:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=2b78df05-928b-49c6-9554-15b549789595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:ef:b2:f3:3b:1f:a2:74:a9:d1:de:05:2e: 35:6c:99:65:0a:e1:57:e8:ca:7a:2d:e5:94:6b:31: c4:e0:36:3b:7c:78:d5:94:06:cd:ba:cf:ba:30:ff: 28:a0:66:ce:28:7a:99:2f:58:97:b8:b8:b3:c4:82: 07:a8:d7:94:e9:00:72:7d:be:05:d2:a2:55:b5:6d: ef:18:db:20:f3:fd:14:2f:c6:1a:8b:2a:90:61:c8: 7f:25:a7:b6:9a:d8:4e:e1:43:69:11:b9:32:9c:bb: 9e:58:9e:b5:0d:de:96:20:bd:0f:5f:76:46:f6:ef: 0c:f1:6d:8d:ee:11:77:9e:88:5f:fe:52:f5:82:1a: 77:90:6b:e0:70:09:ce:49:44:72:80:b9:5d:2f:51: 47:59:7b:bc:7d:d0:dd:2c:8d:7a:9b:bb:44:07:28: b7:c7:b7:ad:c3:c6:cf:20:44:3c:eb:c4:40:d6:c5: e0:ab:83:ad:45:07:33:96:15:d4:e5:01:4b:fc:f2: 57:bf:f0:1a:27:31:ec:2e:05:b5:9e:2a:05:12:5e: 8b:aa:06:df:60:9f:de:51:34:db:9e:b6:c3:81:0a: 25:da:7c:dd:6b:2f:32:7f:86:68:87:2c:4a:9d:e4: d9:bc:8d:40:0a:98:2e:7d:eb:c6:2f:29:6f:dd:bd: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:58:6D:8E:29:29:CE:F3:38:2F:4C:76:D9:3C:D5:AD:AF:26:D5:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/571b8118-104e-3581-a5fe-51b7936e3a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0c:b5:20:6b:ff:c7:42:95:6a:e6:1f:ca:53:3b:19:d8:32: 96:39:6d:32:c9:0d:5b:51:62:13:b0:5a:3c:9d:85:8c:d3:06: 36:21:d4:2f:81:99:11:a0:0b:ae:c2:26:88:41:7d:3f:9a:38: 57:81:c3:01:78:33:ef:2f:15:cb:f2:f1:6f:f3:bd:1d:33:e9: 7e:62:a9:89:0a:08:fb:30:18:b6:c7:1d:49:02:79:cc:99:85: 0e:b6:86:1e:ae:fb:ac:2b:c9:f5:0c:7a:ec:c5:e7:82:e8:52: 17:7a:96:6c:31:32:bc:14:1f:cd:27:21:f5:07:6f:07:02:38: bb:6a:56:38:c3:90:e7:be:1d:61:e8:29:22:cf:e6:67:7f:37: c1:8b:30:a6:06:f3:36:5b:d7:45:a2:5c:2d:f4:c3:8b:32:13: fd:e4:68:a3:d7:e5:1c:32:af:6a:0a:73:9c:80:49:6e:98:7a: 3e:96:9a:10:77:08:38:f0:c9:3d:82:18:f9:5f:2a:bb:9c:5e: 2f:cf:8b:29:76:d1:7c:be:fc:94:a7:70:2b:d8:ae:f8:53:6a: c8:47:40:54:a9:7f:15:e1:36:e1:56:74:0f:d2:d7:1f:68:c3: 08:a0:1f:7f:85:15:ca:2c:31:78:ba:20:29:14:5b:4e:4c:8c: ba:9b:1f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKU2A2jiUghqtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MmI3OGRmMDUtOTI4Yi00OWM2LTk1NTQtMTViNTQ5Nzg5NTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnvsvM7H6J0qdHeBS41bJllCuFX6Mp6LeWU azHE4DY7fHjVlAbNus+6MP8ooGbOKHqZL1iXuLizxIIHqNeU6QByfb4F0qJVtW3v GNsg8/0UL8YaiyqQYch/Jae2mthO4UNpEbkynLueWJ61Dd6WIL0PX3ZG9u8M8W2N 7hF3nohf/lL1ghp3kGvgcAnOSURygLldL1FHWXu8fdDdLI16m7tEByi3x7etw8bP IEQ868RA1sXgq4OtRQczlhXU5QFL/PJXv/AaJzHsLgW1nioFEl6LqgbfYJ/eUTTb nrbDgQol2nzday8yf4ZohyxKneTZvI1ACpgufevGLylv3b1jvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApYbY4pKc7zOC9Mdtk81a2vJtVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvNTcxYjgxMTgtMTA0ZS0z NTgxLWE1ZmUtNTFiNzkzNmUzYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgMtSBr/8dClWrmH8pTOxnYMpY5bTLJDVtRYhOwWjydhYzTBjYh1C+B mRGgC67CJohBfT+aOFeBwwF4M+8vFcvy8W/zvR0z6X5iqYkKCPswGLbHHUkCecyZ hQ62hh6u+6wryfUMeuzF54LoUhd6lmwxMrwUH80nIfUHbwcCOLtqVjjDkOe+HWHo KSLP5md/N8GLMKYG8zZb10WiXC30w4syE/3kaKPX5Rwyr2oKc5yASW6Yej6WmhB3 CDjwyT2CGPlfKrucXi/Piyl20Xy+/JSncCvYrvhTashHQFSpfxXhNuFWdA/S1x9o wwigH3+FFcosMXi6ICkUW05MjLqbH2s= -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:10 2025 by rpki-client