$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa File: 904b080a-8e57-3918-95ab-750f6766dc80.roa (raw, json) Hash identifier: QGPmJq8okVY61Y/wI9HdUKCmORqR99x3mUtm2POLUr4= Subject key identifier: 8E:7C:8F:00:8B:30:C1:46:F6:94:EE:ED:A0:43:2A:DD:25:2F:0D:71 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584AB220C9221A3F322B72167920 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 13649 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c9:22:1a:3f:32:2b:72:16:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=3065d1f0-5655-43ec-baf4-709dcdc10348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:10:2f:5f:52:1d:2f:4b:6e:ac:b8:18:e2:78: 9e:6b:23:93:ba:29:6e:f7:1d:e7:c4:5b:1a:b5:bd: 4a:1f:3c:ac:ba:fb:f8:68:1e:3d:1e:37:14:62:5c: 85:ed:1e:85:5e:b0:b0:25:41:ff:8c:4a:1b:8f:2d: 53:6a:fb:40:2d:8f:55:c7:7f:9c:36:16:ed:ad:98: fe:fd:78:fd:bf:50:f5:bc:2a:9d:a2:a6:d3:22:fd: fa:31:35:c8:ca:69:a6:09:14:46:e5:64:a1:fd:30: 53:be:86:89:5d:b4:b1:c9:45:f6:23:c6:d4:a0:94: 95:fd:e6:3f:09:f8:d9:0c:35:34:08:19:aa:30:d7: 84:10:8e:8d:07:da:9b:9e:3d:67:87:35:42:48:1c: 97:f8:5d:65:ff:3b:66:79:fe:4e:c1:24:38:58:f3: c3:a9:a2:e1:9d:e3:16:76:44:98:fc:72:a4:93:c8: 94:cc:c1:c9:2b:b1:52:62:96:46:f0:99:7f:12:0b: db:8e:09:0b:7d:75:91:93:00:73:21:41:7c:f7:39: ba:8b:90:dd:9c:21:38:e5:0a:c2:d6:49:01:c3:aa: cb:b2:75:f7:2c:ad:05:a6:e5:b9:7b:2a:7d:e3:c9: f1:0b:9b:24:62:e9:b5:f4:52:c2:54:76:9d:2f:9a: 89:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:8F:00:8B:30:C1:46:F6:94:EE:ED:A0:43:2A:DD:25:2F:0D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6c:9f:38:56:fa:c7:ee:91:e6:bf:ac:47:41:3d:aa:54:01: 50:d3:9d:f7:ca:df:c1:92:04:a5:1c:c4:0d:b5:97:41:8d:49: 27:69:84:b0:12:73:6e:3e:3a:cc:cc:51:d1:ac:bc:e8:80:40: f0:5d:55:1b:d2:61:59:db:7e:c3:27:83:b3:c7:7e:66:3c:b1: 4c:21:52:d8:77:90:74:66:49:cf:ab:ce:6c:f5:67:6f:25:f3: ba:84:ba:a2:a9:01:27:60:67:1a:ea:c9:f3:7e:f2:75:38:9b: 58:51:b5:96:87:ac:63:c0:39:2c:d2:31:b8:d0:7b:ae:30:5c: 66:0c:0e:d3:5c:f0:9b:28:d5:da:c1:2c:be:5d:76:e1:b7:93: 1f:68:2a:3a:fb:7a:86:8b:81:af:12:0b:64:56:c0:4b:fd:6b: 26:0f:a5:f3:49:79:dd:c0:26:73:db:6d:10:80:36:78:21:53: 7c:0c:f9:c8:2e:f2:87:ee:4b:5e:c1:5f:de:27:52:84:56:10: ba:9e:7e:85:10:8f:57:24:4b:e1:b0:5e:47:e8:9e:02:45:71: a5:39:8a:07:1f:7f:93:c1:e7:69:fb:35:9d:fd:6a:05:32:16: c0:e3:4d:40:f5:51:ab:1e:b5:a4:58:64:4b:66:5f:65:d8:22: 49:c9:b2:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMkiGj8yK3IWeSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzA2NWQxZjAtNTY1NS00M2VjLWJhZjQtNzA5ZGNkYzEwMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhAvX1IdL0turLgY4nieayOTuilu9x3nxFsa tb1KHzysuvv4aB49HjcUYlyF7R6FXrCwJUH/jEobjy1TavtALY9Vx3+cNhbtrZj+ /Xj9v1D1vCqdoqbTIv36MTXIymmmCRRG5WSh/TBTvoaJXbSxyUX2I8bUoJSV/eY/ CfjZDDU0CBmqMNeEEI6NB9qbnj1nhzVCSByX+F1l/ztmef5OwSQ4WPPDqaLhneMW dkSY/HKkk8iUzMHJK7FSYpZG8Jl/EgvbjgkLfXWRkwBzIUF89zm6i5DdnCE45QrC 1kkBw6rLsnX3LK0FpuW5eyp948nxC5skYum19FLCVHadL5qJGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI58jwCLMMFG9pTu7aBDKt0lLw1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvOTA0YjA4MGEtOGU1Ny0z OTE4LTk1YWItNzUwZjY3NjZkYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZsnzhW+sfukea/rEdBPapUAVDTnffK38GSBKUcxA21l0GNSSdphLAS c24+OszMUdGsvOiAQPBdVRvSYVnbfsMng7PHfmY8sUwhUth3kHRmSc+rzmz1Z28l 87qEuqKpASdgZxrqyfN+8nU4m1hRtZaHrGPAOSzSMbjQe64wXGYMDtNc8Jso1drB LL5dduG3kx9oKjr7eoaLga8SC2RWwEv9ayYPpfNJed3AJnPbbRCANnghU3wM+cgu 8ofuS17BX94nUoRWELqefoUQj1ckS+GwXkfongJFcaU5igcff5PB52n7NZ39agUy FsDjTUD1UasetaRYZEtmX2XYIknJstU= -----END CERTIFICATE-----Generated at Fri Aug 8 12:58:29 2025 by rpki-client