$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa File: 3f9d2fae-fd49-33bf-8645-afba9150e12c.roa (raw, json) Hash identifier: BKq1pezLX0hAwTBQpDzIqgW3mu8qlf/0/o1chT0oPVE= Subject key identifier: 8C:E7:81:33:29:31:5E:EE:15:D7:7D:79:3F:7A:12:9E:52:C4:57:9D Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584AB91B95B3129877D6C3492100 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 5050 IP address blocks: 192.88.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:95:b3:12:98:77:d6:c3:49:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=2cbfae12-0556-4a31-a9ae-4338e058b571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:78:e1:05:a3:f5:d2:27:9b:4a:dd:dd:48:e9: 45:b6:2b:6f:51:6b:23:14:4f:a0:3a:1f:81:df:35: 66:84:63:bf:d1:f2:86:0e:6f:54:35:7e:8b:a8:04: a1:f8:2d:6e:13:68:62:fe:16:64:1e:8a:e9:73:cc: d3:2e:df:c3:bc:e0:8b:d6:de:e7:bf:62:9c:23:87: 27:4a:03:2c:20:b2:44:1a:8b:68:e2:d3:03:ff:44: 3a:4b:07:c9:fe:63:59:4a:ed:dd:f7:73:aa:50:ab: 76:40:17:4a:47:fe:cb:2e:c5:d3:4e:0c:57:d1:90: a2:96:90:87:8b:3b:a0:4c:2c:d7:37:bf:8c:9e:f2: f8:e1:4c:ae:67:06:a4:9d:c8:f0:9c:41:10:df:5e: 0e:2d:e8:69:a3:91:71:26:a0:bf:cc:0f:16:0b:9f: 90:4c:1b:e4:89:5e:bc:64:3c:76:7e:fc:3b:d8:09: 2b:01:7d:50:b0:0d:d3:22:5f:01:c1:6b:07:5c:6b: e9:6e:89:9a:9d:b8:13:d8:94:bf:9c:b8:6e:61:17: b8:b6:6d:29:65:92:57:c1:3b:0f:d8:a3:bb:85:88: 89:2c:4c:b3:af:26:29:48:52:9c:f1:d9:11:94:2a: 85:33:1b:d0:06:e3:bf:30:c7:db:b0:6c:5d:9e:71: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E7:81:33:29:31:5E:EE:15:D7:7D:79:3F:7A:12:9E:52:C4:57:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.88.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:71:a5:db:71:2e:c8:6d:27:1a:be:ea:dc:34:33:ee:10:43: bc:ae:8c:b0:dc:05:4e:17:5a:c5:74:6d:b0:0b:4c:6d:ea:20: a1:0a:02:45:59:d7:c5:c0:c5:a0:df:ff:65:a8:2e:a4:a1:51: 4f:ca:24:eb:59:a0:d4:5b:b9:26:ce:3d:32:14:fa:18:69:56: d7:b8:50:60:aa:71:67:ac:d1:3e:9e:04:30:60:7c:92:ed:a9: 1c:56:38:d4:f2:03:3b:df:44:8a:64:6a:20:a5:f9:ed:85:76: 4e:04:f8:1e:0b:c8:7d:2e:aa:38:dc:b7:61:dd:0b:b2:91:63: a1:fc:28:db:25:31:d1:50:ce:3c:62:22:d0:9a:11:01:ee:b2: c7:7a:9c:1a:8a:d6:ef:6d:89:70:12:ed:96:4b:4d:e6:f9:06: 6e:09:b8:30:9e:5d:f1:97:c9:82:0a:9c:de:c7:79:b8:bb:38: ca:e9:93:f9:bb:29:c6:34:fd:88:12:24:3e:14:f4:47:c2:b1: ad:70:f7:55:7b:22:69:9f:b1:93:46:4e:bd:fb:7f:0c:ae:47: 1e:37:bb:20:5c:ac:e4:6e:dd:a3:98:b4:84:06:0c:03:89:c9: 9b:48:f3:02:cc:43:11:0b:b7:25:03:c1:75:25:3d:3e:ad:a5: 54:92:a5:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5WzEph31sNJIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MmNiZmFlMTItMDU1Ni00YTMxLWE5YWUtNDMzOGUwNThiNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXjhBaP10iebSt3dSOlFtitvUWsjFE+gOh+B 3zVmhGO/0fKGDm9UNX6LqASh+C1uE2hi/hZkHorpc8zTLt/DvOCL1t7nv2KcI4cn SgMsILJEGoto4tMD/0Q6SwfJ/mNZSu3d93OqUKt2QBdKR/7LLsXTTgxX0ZCilpCH izugTCzXN7+MnvL44UyuZwakncjwnEEQ314OLehpo5FxJqC/zA8WC5+QTBvkiV68 ZDx2fvw72AkrAX1QsA3TIl8BwWsHXGvpbomanbgT2JS/nLhuYRe4tm0pZZJXwTsP 2KO7hYiJLEyzryYpSFKc8dkRlCqFMxvQBuO/MMfbsGxdnnGXawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzngTMpMV7uFdd9eT96Ep5SxFedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvM2Y5ZDJmYWUtZmQ0OS0z M2JmLTg2NDUtYWZiYTkxNTBlMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpxpdtxLshtJxq+6tw0M+4QQ7yujLDcBU4XWsV0bbALTG3qIKEKAkVZ 18XAxaDf/2WoLqShUU/KJOtZoNRbuSbOPTIU+hhpVte4UGCqcWes0T6eBDBgfJLt qRxWONTyAzvfRIpkaiCl+e2Fdk4E+B4LyH0uqjjct2HdC7KRY6H8KNslMdFQzjxi ItCaEQHussd6nBqK1u9tiXAS7ZZLTeb5Bm4JuDCeXfGXyYIKnN7Hebi7OMrpk/m7 KcY0/YgSJD4U9EfCsa1w91V7ImmfsZNGTr37fwyuRx43uyBcrORu3aOYtIQGDAOJ yZtI8wLMQxELtyUDwXUlPT6tpVSSpbs= -----END CERTIFICATE-----Generated at Mon Aug 4 18:22:48 2025 by rpki-client