$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/15ac278f-d2d1-32d3-9f09-43ac96b5c580.roa File: 15ac278f-d2d1-32d3-9f09-43ac96b5c580.roa (raw, json) Hash identifier: 1iyKgd0E4fBAwzhK4SPIHq9GZI/9bC3QfOWWfVT/WTo= Subject key identifier: AB:45:04:78:33:E0:14:5A:D5:9A:8C:1D:C9:8C:55:1D:C9:59:20:9D Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Certificate serial: 010D0C9F43285849D9C4F42DCC9635C77FFE6C00 Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/15ac278f-d2d1-32d3-9f09-43ac96b5c580.roa Signing time: Wed 14 May 2025 13:01:03 +0000 ROA not before: Wed 14 May 2025 13:01:03 +0000 ROA not after: Tue 12 Aug 2025 13:01:03 +0000 asID: 26383 IP address blocks: 207.90.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:c4:f4:2d:cc:96:35:c7:7f:fe:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Validity Not Before: May 14 13:01:03 2025 GMT Not After : Aug 12 13:01:03 2025 GMT Subject: CN=a1038eb5-cc9b-452b-9257-9b23e287d8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:c1:f3:e0:79:b0:74:0b:86:9b:cd:ee:e3: 6d:7d:9e:bf:0e:7f:6b:f7:24:47:fa:e3:1c:f1:62: 8a:2e:e4:56:1a:9b:ca:88:73:a7:85:be:24:3d:b3: dd:3c:21:b2:0b:3c:b3:16:3a:c5:a0:57:ec:41:4e: fc:61:1d:29:c7:fb:93:1b:34:50:1f:34:72:82:64: b5:9a:18:17:3d:1a:20:80:ae:9c:7b:1e:bd:51:5c: f4:39:a3:3c:f8:c9:29:f7:38:39:29:63:2d:33:1c: ac:e5:58:cf:1d:b3:0b:e1:55:c4:5a:7f:61:21:03: 44:25:03:f7:59:d7:ad:10:b4:62:bc:e9:5d:54:be: 8c:f3:e5:db:24:1b:27:36:4d:22:ee:72:3e:bd:3d: af:42:fe:18:89:24:55:cf:6b:10:40:d9:65:fc:c3: 14:cf:b0:25:c8:02:e8:9b:0e:78:46:1e:10:af:32: c6:84:30:fd:90:7a:45:76:08:73:88:2e:02:b4:f4: 96:f1:7a:2e:db:c0:82:2c:27:1e:fb:b7:ee:e3:1b: 64:d5:01:04:fd:f0:d7:7b:04:92:3b:df:ea:64:b1: b7:53:de:4c:d8:09:a9:ea:3b:06:0f:c4:08:49:0b: c4:c6:13:9b:fb:56:4f:d5:e9:1b:35:29:20:39:ba: a5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:04:78:33:E0:14:5A:D5:9A:8C:1D:C9:8C:55:1D:C9:59:20:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/15ac278f-d2d1-32d3-9f09-43ac96b5c580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl X509v3 Authority Key Identifier: keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer sbgp-ipAddrBlock: critical IPv4: 207.90.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:8f:2c:da:e5:0f:3d:d7:01:33:67:d5:98:d3:99:67:4d:4c: c0:54:4d:a6:2f:28:63:49:44:07:c0:30:b0:99:8d:65:05:4f: 9a:47:ea:88:71:6c:ba:89:34:92:42:d2:d3:7e:82:06:52:cd: b3:b4:3c:67:6a:24:19:0b:71:15:f0:d6:cf:45:5e:2c:22:ea: 9b:2f:2e:45:04:24:0d:62:59:ae:35:78:e9:0a:5f:61:ef:0d: 1c:14:78:ca:7f:74:48:87:1b:05:fc:ab:b8:82:24:26:57:64: 57:07:87:04:4d:85:8c:f7:37:1b:0d:06:c9:75:73:de:2c:55: 24:26:0e:d4:f0:fe:10:38:ee:b3:77:41:e5:52:15:ac:a7:4c: 51:ca:b1:33:72:b9:cd:14:51:8c:88:17:f3:e9:db:b1:f8:c1: c4:e4:97:e5:54:9f:c1:32:84:37:96:1f:4d:f0:13:fa:f5:09: 22:e0:06:05:84:e8:e7:b3:85:77:8b:3a:5e:18:22:8e:06:49: 19:70:ac:5f:12:85:d4:92:04:c6:2d:51:62:13:d8:bc:52:01: c2:0e:81:9f:eb:8f:86:e0:55:13:eb:92:2a:dd:d1:b3:74:d9: 5c:61:6f:9b:37:e4:11:88:a1:a8:af:33:32:8c:4c:75:2a:8c: dc:ec:72:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZxPQtzJY1x3/+bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4 ZjgxMB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk YTEwMzhlYjUtY2M5Yi00NTJiLTkyNTctOWIyM2UyODdkOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE/B8+B5sHQLhpvN7uNtfZ6/Dn9r9yRH+uMc 8WKKLuRWGpvKiHOnhb4kPbPdPCGyCzyzFjrFoFfsQU78YR0px/uTGzRQHzRygmS1 mhgXPRoggK6cex69UVz0OaM8+Mkp9zg5KWMtMxys5VjPHbML4VXEWn9hIQNEJQP3 WdetELRivOldVL6M8+XbJBsnNk0i7nI+vT2vQv4YiSRVz2sQQNll/MMUz7AlyALo mw54Rh4QrzLGhDD9kHpFdghziC4CtPSW8Xou28CCLCce+7fu4xtk1QEE/fDXewSS O9/qZLG3U95M2Amp6jsGD8QISQvExhOb+1ZP1ekbNSkgObql5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtFBHgz4BRa1ZqMHcmMVR3JWSCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvMTVhYzI3OGYtZDJkMS0z MmQzLTlmMDktNDNhYzk2YjVjNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5 OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy ZDA4OThmODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1rvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWPLNrlDz3XATNn1ZjTmWdNTMBUTaYvKGNJRAfAMLCZjWUFT5pH6ohx bLqJNJJC0tN+ggZSzbO0PGdqJBkLcRXw1s9FXiwi6psvLkUEJA1iWa41eOkKX2Hv DRwUeMp/dEiHGwX8q7iCJCZXZFcHhwRNhYz3NxsNBsl1c94sVSQmDtTw/hA47rN3 QeVSFaynTFHKsTNyuc0UUYyIF/Pp27H4wcTkl+VUn8EyhDeWH03wE/r1CSLgBgWE 6OezhXeLOl4YIo4GSRlwrF8ShdSSBMYtUWIT2LxSAcIOgZ/rj4bgVRPrkird0bN0 2Vxhb5s35BGIoaivMzKMTHUqjNzscqo= -----END CERTIFICATE-----Generated at Sun Jun 15 18:01:50 2025 by rpki-client