$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa File: ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa (raw, json) Hash identifier: UH7IWBe5/QD8eQ/xlf5sF0e+9EefEOEUZk+KBo1sT70= Subject key identifier: 84:C2:64:C3:FF:6F:77:68:3D:DD:BF:35:74:CE:2B:11:B3:85:87:3A Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584A30503FE356E4E40E0E77F580 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 208.88.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:3f:e3:56:e4:e4:0e:0e:77:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=52ff826f-80e3-4f0e-a3c4-4c5b9d95dc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4f:49:4c:e5:5b:29:74:4c:25:82:e0:ba:95: 28:58:29:02:f2:1a:e7:72:74:b2:43:d0:d7:27:90: f1:63:23:4f:86:ae:4e:c5:16:ac:3d:4c:61:df:4c: 7d:1e:0e:e9:96:1e:37:f8:86:ac:45:f1:d6:fd:9d: dc:55:02:3a:40:88:0d:90:99:fd:ce:57:0b:49:e3: e1:d1:80:dd:40:d2:18:60:6c:f7:54:79:95:59:bf: fd:a5:bc:45:cb:f1:d8:d6:c8:97:e8:d0:df:aa:75: 6b:70:8e:3d:5c:79:c2:c7:6c:fa:0d:3d:1d:8f:ff: 5d:d8:cb:f8:d6:71:53:8d:d4:46:86:4e:2e:88:65: 5c:07:b8:ab:71:d1:85:75:66:7f:62:cf:08:0c:71: 27:0d:8b:21:7a:b2:4a:20:e3:9a:6c:59:6a:34:b0: 04:a8:f5:d7:39:2b:c3:27:5a:47:ae:69:53:da:ff: af:48:9f:26:7e:fb:30:58:47:13:0c:9d:cd:dc:0e: db:9d:23:fa:79:2a:42:1b:29:40:fc:b1:cd:b3:a3: 51:9d:7c:20:ce:1e:18:68:cd:83:a6:84:8d:d2:9c: 03:57:ad:15:31:45:3c:97:89:3a:68:7b:c7:2c:16: 8c:1f:d6:a1:eb:d2:da:24:e6:27:a7:9c:19:7a:62: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C2:64:C3:FF:6F:77:68:3D:DD:BF:35:74:CE:2B:11:B3:85:87:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:01:31:e5:39:2c:5c:d2:93:3a:3e:72:4e:26:30:4e:f2:eb: f5:77:ce:f1:96:8f:1a:31:ff:1f:cc:55:bb:6a:fe:8b:23:7e: 34:ae:4a:53:62:c7:38:56:46:9a:16:b6:14:b8:0a:57:84:74: 34:02:2e:be:34:77:a3:c8:df:ff:1c:63:80:73:50:63:a5:45: d0:d5:64:ea:e4:88:49:27:4f:57:d0:c2:f2:11:83:a2:27:83: ad:7c:c6:e8:76:4d:80:49:d3:58:c9:8e:42:90:44:b0:36:fc: 32:e1:ec:b6:66:75:d9:2e:c0:46:e0:a8:bf:40:ab:bc:e3:0f: 60:5b:5c:61:a2:5e:15:6c:70:23:9e:c3:cc:b8:18:6f:35:8b: da:fd:18:43:64:d3:75:6d:48:b5:ae:d2:39:6f:42:19:58:de: eb:ac:d4:1d:f5:4d:a6:0c:34:f1:95:2a:f3:30:11:38:8d:99: ef:02:73:ee:86:34:b5:67:6b:14:4c:15:58:e4:31:61:18:20: d1:7e:f4:09:f7:7c:62:48:ab:d8:ba:0b:48:34:06:5e:4e:f2: c3:df:44:21:19:91:ea:37:64:ef:39:37:b2:26:be:88:90:23: e1:75:60:fd:b4:59:60:f2:f2:36:00:8d:1e:9e:99:ff:15:8a: 45:63:c6:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUD/jVuTkDg539YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTJmZjgyNmYtODBlMy00ZjBlLWEzYzQtNGM1YjlkOTVkYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE9JTOVbKXRMJYLgupUoWCkC8hrncnSyQ9DX J5DxYyNPhq5OxRasPUxh30x9Hg7plh43+IasRfHW/Z3cVQI6QIgNkJn9zlcLSePh 0YDdQNIYYGz3VHmVWb/9pbxFy/HY1siX6NDfqnVrcI49XHnCx2z6DT0dj/9d2Mv4 1nFTjdRGhk4uiGVcB7ircdGFdWZ/Ys8IDHEnDYsherJKIOOabFlqNLAEqPXXOSvD J1pHrmlT2v+vSJ8mfvswWEcTDJ3N3A7bnSP6eSpCGylA/LHNs6NRnXwgzh4YaM2D poSN0pwDV60VMUU8l4k6aHvHLBaMH9ah69LaJOYnp5wZemIvowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITCZMP/b3doPd2/NXTOKxGzhYc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvZWM5YjhkZDEtMGZjZi0z NzAxLTg5NjAtMDI1NDIyZTk0YzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcBMeU5LFzSkzo+ck4mME7y6/V3zvGWjxox/x/MVbtq/osjfjSuSlNi xzhWRpoWthS4CleEdDQCLr40d6PI3/8cY4BzUGOlRdDVZOrkiEknT1fQwvIRg6In g618xuh2TYBJ01jJjkKQRLA2/DLh7LZmddkuwEbgqL9Aq7zjD2BbXGGiXhVscCOe w8y4GG81i9r9GENk03VtSLWu0jlvQhlY3uus1B31TaYMNPGVKvMwETiNme8Cc+6G NLVnaxRMFVjkMWEYINF+9An3fGJIq9i6C0g0Bl5O8sPfRCEZkeo3ZO85N7ImvoiQ I+F1YP20WWDy8jYAjR6emf8VikVjxl8= -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:22 2025 by rpki-client