$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa File: 989e586b-0747-3270-a033-41e803e851c5.roa (raw, json) Hash identifier: 2zHyuk3eFdgtljPm89o1EWK31LToc6N1VNtqkccftUo= Subject key identifier: 66:93:6A:3F:0B:99:7D:88:2F:21:5B:B1:3B:8F:7E:E3:3B:89:8E:81 Certificate issuer: /CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Certificate serial: 010D0C9F4328584A00DABE04F8273A399630DA80 Authority key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 14618 IP address blocks: 208.78.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:be:04:f8:27:3a:39:96:30:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=af26d5c6-12f9-4e6a-9c03-cfebedb424bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:d7:8c:09:82:16:0d:cf:34:36:fe:e1:ba: 4a:7a:af:d5:7c:1d:b4:ee:0f:50:59:e9:ce:0a:8f: 08:30:65:9e:2e:95:89:5d:c2:f2:ac:6e:7a:f9:56: f4:d2:5c:79:bd:e9:6e:84:49:35:97:1f:ac:32:05: 11:b6:50:15:65:c5:20:d5:bc:80:85:64:d9:5f:e5: e7:b4:6d:b7:09:42:a9:a6:b4:c8:3c:a6:73:67:73: 63:0e:59:0b:ea:26:e2:cd:b8:9c:27:29:25:b8:7c: 00:bd:a9:81:58:38:4b:0c:a9:74:74:ab:97:06:80: 81:67:db:2d:c1:0b:a8:78:7b:dc:e5:ac:b1:b7:8b: 3f:32:05:72:e9:76:2d:ac:43:f4:88:03:9f:77:f7: a1:68:5c:94:38:f7:a8:9b:94:d1:f9:8b:8c:99:ca: 84:18:f1:1f:f9:f6:a9:ff:1c:cc:18:c9:0c:aa:f9: 7c:bb:bd:ff:a4:d2:e8:15:f9:50:62:13:4b:eb:db: f3:5a:e6:c7:fe:c8:46:41:7d:99:b0:04:b0:71:60: 9f:08:c5:fc:c2:7f:ed:19:19:79:cb:dd:81:59:49: 7e:37:be:05:0f:0f:c0:7f:3b:a3:da:cf:35:e7:8f: 82:34:dc:b0:f4:5a:f3:ba:92:da:27:24:1e:fa:b9: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:93:6A:3F:0B:99:7D:88:2F:21:5B:B1:3B:8F:7E:E3:3B:89:8E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl X509v3 Authority Key Identifier: keyid:0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer sbgp-ipAddrBlock: critical IPv4: 208.78.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f0:8d:aa:1c:e1:f7:63:23:2c:39:57:26:c5:4b:2f:04:9b: 87:cb:0d:07:79:6e:92:a2:ed:0d:63:d3:5f:c9:67:87:a2:c6: e1:36:71:57:58:a0:1e:71:66:09:6c:74:43:df:8e:45:dc:9e: 91:7f:e2:9a:ef:e1:f9:52:41:89:da:e8:8c:98:47:f5:63:c3: 40:dc:0b:60:4c:d4:b6:4d:f6:79:d6:17:41:a1:0f:32:13:5c: 8e:30:c0:1b:7f:ac:d5:0c:17:d3:6d:ab:c2:21:e0:7d:5e:a2: 67:84:db:30:59:d9:65:7c:93:c9:5c:95:bd:6b:04:07:89:a1: 36:dd:61:30:11:26:00:23:c0:61:58:a8:fe:0c:3d:c5:af:ac: 35:ea:40:df:bf:5a:45:3d:d7:83:bc:7f:65:dc:47:47:67:22: 34:e4:73:47:b1:f7:3c:80:bc:3e:f5:4f:1f:f4:b2:31:f8:83: 66:67:7d:ac:d1:36:de:4d:ba:f9:05:9e:ac:a7:4b:4a:4e:3b: a8:4a:77:20:e8:0b:e4:5e:ed:01:df:7c:50:4b:51:d9:57:4f: 5d:bb:fc:7a:ea:fb:85:26:04:7c:7a:58:9b:3c:da:cf:4e:90: a3:4c:c1:73:c1:1d:51:80:db:d3:35:95:eb:49:05:89:e2:2d: 92:da:58:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2r4E+Cc6OZYw2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTUxYWJmYjItZmY1NS00ODY2LThmMzItZDJmYzkzNDZk MzAzMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YWYyNmQ1YzYtMTJmOS00ZTZhLTljMDMtY2ZlYmVkYjQyNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5fXjAmCFg3PNDb+4bpKeq/VfB207g9QWenO Co8IMGWeLpWJXcLyrG56+Vb00lx5veluhEk1lx+sMgURtlAVZcUg1byAhWTZX+Xn tG23CUKpprTIPKZzZ3NjDlkL6ibizbicJykluHwAvamBWDhLDKl0dKuXBoCBZ9st wQuoeHvc5ayxt4s/MgVy6XYtrEP0iAOfd/ehaFyUOPeom5TR+YuMmcqEGPEf+fap /xzMGMkMqvl8u73/pNLoFflQYhNL69vzWubH/shGQX2ZsASwcWCfCMX8wn/tGRl5 y92BWUl+N74FDw/Afzuj2s8154+CNNyw9FrzupLaJyQe+rmbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaTaj8LmX2ILyFbsTuPfuM7iY6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFh YmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0NmQzMDMvOTg5ZTU4NmItMDc0Ny0z MjcwLWEwMzMtNDFlODAzZTg1MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTUxYWJmYjItZmY1NS00ODY2LThm MzItZDJmYzkzNDZkMzAzL2U1MWFiZmIyLWZmNTUtNDg2Ni04ZjMyLWQyZmM5MzQ2 ZDMwMy5jcmwwHwYDVR0jBBgwFoAUDvT5JuL94JoF5JVDUqYmwxmh63QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZj OTM0NmQzMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E4HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7wjaoc4fdjIyw5VybFSy8Em4fLDQd5bpKi7Q1j01/JZ4eixuE2cVdY oB5xZglsdEPfjkXcnpF/4prv4flSQYna6IyYR/Vjw0DcC2BM1LZN9nnWF0GhDzIT XI4wwBt/rNUMF9Ntq8Ih4H1eomeE2zBZ2WV8k8lclb1rBAeJoTbdYTARJgAjwGFY qP4MPcWvrDXqQN+/WkU914O8f2XcR0dnIjTkc0ex9zyAvD71Tx/0sjH4g2ZnfazR Nt5NuvkFnqynS0pOO6hKdyDoC+Re7QHffFBLUdlXT127/Hrq+4UmBHx6WJs82s9O kKNMwXPBHVGA29M1letJBYniLZLaWLY= -----END CERTIFICATE-----Generated at Tue Jul 1 18:22:50 2025 by rpki-client