$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/b2fe76d6-9fcc-36c9-af01-7e5c28ada283.roa File: b2fe76d6-9fcc-36c9-af01-7e5c28ada283.roa (raw, json) Hash identifier: lk17lQkL0y3Q1zC+uHQ3kDIYv7BH4FYVL3SX/qMNVDQ= Subject key identifier: CD:C5:20:0C:92:48:A8:36:A0:F4:96:D4:2B:C6:EB:1F:FB:96:7D:3D Certificate issuer: /CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Certificate serial: 010D0C9F4328584A093A9F7A636583A8DC80C580 Authority key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/b2fe76d6-9fcc-36c9-af01-7e5c28ada283.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 208.75.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:9f:7a:63:65:83:a8:dc:80:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=1ee77a8c-170c-4c1a-9a76-1c0dc082c9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:27:59:da:2b:3d:8b:e6:67:32:fb:9a:aa:53: 81:a7:07:8f:77:c5:ab:0b:d2:82:97:8e:85:db:5e: 8e:47:ba:1c:11:f4:71:6b:73:a3:b6:36:2c:46:df: 6c:7b:5a:dd:4b:18:ff:22:c6:9e:0b:1a:03:88:83: 4d:52:c4:00:bb:5a:2f:23:c6:3a:94:eb:a4:9b:31: 92:33:d0:55:56:6b:44:ad:86:24:89:a8:06:e4:ef: 3c:59:42:21:06:f1:37:71:81:d7:cd:4f:1d:55:c2: 95:29:d3:87:7a:16:f1:b1:0c:7b:00:d2:27:77:0a: aa:3e:d9:a1:82:0e:43:35:a6:fd:5e:49:e6:a8:aa: 90:81:f2:68:90:97:ba:13:92:db:f4:2d:51:11:99: bf:26:a4:03:3c:b2:f6:b0:0f:64:7d:c3:aa:8d:06: 85:19:6e:6b:f0:4c:6e:c3:e7:7b:2e:80:6f:54:d3: 02:85:93:de:08:b4:10:7c:f5:8d:37:cf:fc:c8:ec: 51:a3:7a:5c:92:fa:9e:5a:0f:d4:b1:15:26:6a:90: b9:c0:26:47:01:ae:1b:e9:03:38:4c:60:81:d5:ce: 94:26:8c:61:8d:c7:14:01:c7:49:fc:10:a6:f0:5f: 12:e5:90:d2:25:fe:f4:eb:b4:46:85:68:c1:a6:36: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C5:20:0C:92:48:A8:36:A0:F4:96:D4:2B:C6:EB:1F:FB:96:7D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/b2fe76d6-9fcc-36c9-af01-7e5c28ada283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl X509v3 Authority Key Identifier: keyid:86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer sbgp-ipAddrBlock: critical IPv4: 208.75.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:84:61:b0:48:3f:b1:47:22:09:fd:fc:e5:4a:8e:56:71:36: 00:d0:f2:0c:03:16:14:c3:bf:c0:60:5d:13:04:ea:5f:bb:fb: 5f:37:15:8b:db:24:b8:90:51:65:d0:6e:c3:55:b2:ac:df:d6: 63:21:e4:b8:5d:3c:50:b4:e8:a3:5a:dc:83:a6:ca:13:3f:f2: 71:df:a7:b4:36:58:f2:ae:af:b8:8b:df:13:cd:0f:75:01:26: bc:78:29:81:ab:44:eb:d3:f3:e8:50:ec:9c:8b:52:8e:cc:eb: 3d:22:f5:6c:a7:b5:f0:24:36:11:ee:54:24:bf:d0:ab:ce:a3: a1:15:eb:86:67:0a:5b:4a:d3:9c:b7:ec:23:c0:6c:82:70:85: c2:49:97:66:89:c4:6b:23:71:45:09:39:9d:6c:f8:fb:85:36: 8b:cd:7b:1a:a8:9b:f0:0b:ae:76:fd:16:3e:87:69:c1:14:a2: 17:17:5f:4f:4f:4e:8c:12:eb:d9:72:f1:c1:b4:ee:5b:b8:8c: 16:c1:11:8c:2f:bf:d9:a4:f9:51:6b:7f:ff:bd:5f:07:6f:31: 8b:fd:a5:68:b3:77:bb:d0:0b:ae:d1:a5:d0:4c:5d:3b:a6:63: 22:79:af:2d:bd:3b:e2:f1:18:c9:26:b6:c1:fd:c3:88:45:f3: f9:23:c1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOp96Y2WDqNyAxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVkODFhNjYtZjQ5ZS00YTE2LWE2NDctZjcwOWU1NWNi ZGIxMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk MWVlNzdhOGMtMTcwYy00YzFhLTlhNzYtMWMwZGMwODJjOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhydZ2is9i+ZnMvuaqlOBpwePd8WrC9KCl46F 216OR7ocEfRxa3OjtjYsRt9se1rdSxj/IsaeCxoDiINNUsQAu1ovI8Y6lOukmzGS M9BVVmtErYYkiagG5O88WUIhBvE3cYHXzU8dVcKVKdOHehbxsQx7ANIndwqqPtmh gg5DNab9XknmqKqQgfJokJe6E5Lb9C1REZm/JqQDPLL2sA9kfcOqjQaFGW5r8Exu w+d7LoBvVNMChZPeCLQQfPWNN8/8yOxRo3pckvqeWg/UsRUmapC5wCZHAa4b6QM4 TGCB1c6UJoxhjccUAcdJ/BCm8F8S5ZDSJf7067RGhWjBpjbGhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3FIAySSKg2oPSW1CvG6x/7ln09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4 MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5ZTU1Y2JkYjEvYjJmZTc2ZDYtOWZjYy0z NmM5LWFmMDEtN2U1YzI4YWRhMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWVkODFhNjYtZjQ5ZS00YTE2LWE2 NDctZjcwOWU1NWNiZGIxLzVlZDgxYTY2LWY0OWUtNGExNi1hNjQ3LWY3MDllNTVj YmRiMS5jcmwwHwYDVR0jBBgwFoAUhl2GbrVevcccGEb+LchoJQCwn44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5 ZTU1Y2JkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Es6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKEYbBIP7FHIgn9/OVKjlZxNgDQ8gwDFhTDv8BgXRME6l+7+183FYvb JLiQUWXQbsNVsqzf1mMh5LhdPFC06KNa3IOmyhM/8nHfp7Q2WPKur7iL3xPND3UB Jrx4KYGrROvT8+hQ7JyLUo7M6z0i9WyntfAkNhHuVCS/0KvOo6EV64ZnCltK05y3 7CPAbIJwhcJJl2aJxGsjcUUJOZ1s+PuFNovNexqom/ALrnb9Fj6HacEUohcXX09P TowS69ly8cG07lu4jBbBEYwvv9mk+VFrf/+9XwdvMYv9pWizd7vQC67RpdBMXTum YyJ5ry29O+LxGMkmtsH9w4hF8/kjwZE= -----END CERTIFICATE-----Generated at Sun Jun 15 09:02:29 2025 by rpki-client