$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa File: 301ebb24-b7d4-3833-bc01-534ced8fe634.roa (raw, json) Hash identifier: ra6KTYagJ7Zva0b6x31x1Rs11RkJH5twueEMKPSh9zc= Subject key identifier: 5F:49:11:4D:00:C2:26:E2:30:8D:CF:50:2A:67:28:F5:BB:B4:0A:2E Certificate issuer: /CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Certificate serial: 010D0C9F4328584A2ABAEBA4BB2941F2FACA1400 Authority key identifier: E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 395704 IP address blocks: 199.212.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:eb:a4:bb:29:41:f2:fa:ca:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=79e02152-cd42-497b-9fc9-f31f744f0976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:dd:30:ff:b6:39:22:6a:ac:52:20:e0:76: 54:ff:5e:f1:fd:d0:61:05:4c:d7:60:28:c6:00:17: 1b:01:a9:7b:85:f0:24:1d:32:3e:f5:4c:14:ec:4a: de:63:db:9e:27:6c:f6:dd:14:98:bf:84:fa:26:27: e6:ba:72:db:a5:06:fc:e6:83:34:12:e8:0a:5e:72: 21:6e:5f:17:a7:be:cf:9f:6f:ac:78:8b:f2:0b:e8: c4:e7:f9:10:96:ee:4a:62:27:7c:00:cf:8e:b5:ce: c7:d7:c1:81:ec:6e:4b:8c:4b:07:02:99:f1:cb:24: 8f:fb:e4:1f:0e:1d:97:c7:31:d1:f2:bb:8c:29:5c: 4e:0c:66:8d:a2:cd:88:d9:c2:bb:8b:cb:4d:8d:92: f6:1b:0f:25:00:75:d0:46:31:e2:0e:cb:b2:50:26: 17:14:a3:f8:c7:32:67:e1:9f:6f:25:10:32:c0:81: 31:dd:a4:8a:fa:86:d2:ec:cb:7f:34:ea:f2:90:78: 23:ab:b2:d5:94:d6:1d:54:cf:d6:5a:49:9f:bb:17: 81:89:bd:ae:98:20:36:ad:c6:0c:fc:1c:dd:33:b7: b1:d2:0f:37:74:82:e2:1c:a9:e5:a0:c4:5e:51:1a: 11:65:89:71:4e:96:a8:31:50:a8:bf:c5:e5:eb:48: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:49:11:4D:00:C2:26:E2:30:8D:CF:50:2A:67:28:F5:BB:B4:0A:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl X509v3 Authority Key Identifier: keyid:E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer sbgp-ipAddrBlock: critical IPv4: 199.212.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:53:e3:ec:a5:be:8d:cf:bd:75:b7:65:42:44:4e:64:e3:0f: 0c:3b:b8:af:58:e0:75:4c:cb:84:84:eb:c3:1b:19:5c:41:00: 81:61:5e:85:b7:8a:73:ce:a6:62:3f:d9:f3:c1:25:31:07:a0: f9:d2:6b:62:e6:60:e6:46:b0:a9:9b:d9:f1:b2:6e:a4:d5:be: 93:04:3d:7f:e9:1b:d6:74:da:c6:6b:60:f8:80:53:16:63:c2: 02:0e:5d:ec:04:cb:48:a9:d9:2b:8c:6c:ea:51:1c:d4:a5:53: bb:8c:68:63:19:67:71:b5:1e:c7:03:dd:94:3c:f0:12:56:8d: 78:ad:2c:db:29:61:79:95:34:5d:b6:f5:6d:2e:40:16:02:30: 2d:b1:4e:06:5d:74:b5:3b:27:8c:4c:65:bc:7c:6f:ee:3b:5a: a7:14:8d:32:db:7a:91:87:87:d8:16:fc:a6:73:a0:c2:4f:3b: f9:b6:fe:4e:73:cd:fe:c8:06:74:b8:9e:6d:9c:c3:0d:23:a7: 47:00:25:f9:b0:f7:48:f1:b1:c8:87:6d:fe:14:41:11:8e:c9: ea:3f:e0:df:a7:ff:e0:59:e8:8f:6c:4c:28:aa:c3:17:16:e0: a7:34:99:08:0f:5d:e6:e9:07:57:f6:68:4c:41:31:e7:c7:c7: 5c:66:09:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuukuylB8vrKFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmYTJmZTAtNTdiYS00NmM0LTlkMDAtNDFhODVjYzRl MjA0MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NzllMDIxNTItY2Q0Mi00OTdiLTlmYzktZjMxZjc0NGYwOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYjdMP+2OSJqrFIg4HZU/17x/dBhBUzXYCjG ABcbAal7hfAkHTI+9UwU7EreY9ueJ2z23RSYv4T6JifmunLbpQb85oM0EugKXnIh bl8Xp77Pn2+seIvyC+jE5/kQlu5KYid8AM+Otc7H18GB7G5LjEsHApnxyySP++Qf Dh2XxzHR8ruMKVxODGaNos2I2cK7i8tNjZL2Gw8lAHXQRjHiDsuyUCYXFKP4xzJn 4Z9vJRAywIEx3aSK+obS7Mt/NOrykHgjq7LVlNYdVM/WWkmfuxeBib2umCA2rcYM /BzdM7ex0g83dILiHKnloMReURoRZYlxTpaoMVCov8Xl60jgcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9JEU0AwibiMI3PUCpnKPW7tAouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZh MmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4NWNjNGUyMDQvMzAxZWJiMjQtYjdkNC0z ODMzLWJjMDEtNTM0Y2VkOGZlNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGRmYTJmZTAtNTdiYS00NmM0LTlk MDAtNDFhODVjYzRlMjA0LzBkZmEyZmUwLTU3YmEtNDZjNC05ZDAwLTQxYTg1Y2M0 ZTIwNC5jcmwwHwYDVR0jBBgwFoAU6P4BDEj6X3iotRyz5rfBUkMKJK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZhMmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4 NWNjNGUyMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZT4+ylvo3PvXW3ZUJETmTjDww7uK9Y4HVMy4SE68MbGVxBAIFhXoW3 inPOpmI/2fPBJTEHoPnSa2LmYOZGsKmb2fGybqTVvpMEPX/pG9Z02sZrYPiAUxZj wgIOXewEy0ip2SuMbOpRHNSlU7uMaGMZZ3G1HscD3ZQ88BJWjXitLNspYXmVNF22 9W0uQBYCMC2xTgZddLU7J4xMZbx8b+47WqcUjTLbepGHh9gW/KZzoMJPO/m2/k5z zf7IBnS4nm2cww0jp0cAJfmw90jxsciHbf4UQRGOyeo/4N+n/+BZ6I9sTCiqwxcW 4Kc0mQgPXebpB1f2aExBMefHx1xmCf0= -----END CERTIFICATE-----Generated at Mon Jun 30 00:47:34 2025 by rpki-client