$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa File: 6638f874-6d79-393c-8793-4fb63bc1f4dc.roa (raw, json) Hash identifier: y+M/M885xAwQV2cETnBaC8Ss95Bs9K0nFhGWY7urGQA= Subject key identifier: 13:CD:A3:24:27:48:62:A2:3F:66:6F:FB:37:75:CE:9E:36:0E:4A:16 Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584A28DC9C12D256EE4E2B2430C0 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa Signing time: Wed 11 Jun 2025 20:57:36 +0000 ROA not before: Wed 11 Jun 2025 20:57:36 +0000 ROA not after: Tue 09 Sep 2025 20:57:36 +0000 asID: 20 IP address blocks: 192.5.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:28:dc:9c:12:d2:56:ee:4e:2b:24:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Jun 11 20:57:36 2025 GMT Not After : Sep 9 20:57:36 2025 GMT Subject: CN=6dffea36-58fb-4757-8ac8-c1889847eee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:64:d8:bd:ab:77:36:a0:8d:79:b7:74:08:40: 39:e1:f4:4c:a1:29:cc:da:d6:5f:a1:6f:b2:d6:23: 71:cb:98:6a:1b:82:63:36:d4:f8:b2:13:63:ca:b8: 19:de:a3:5b:08:5c:12:49:e3:1d:4a:3e:ac:0d:16: 04:a9:44:84:16:3d:2d:a0:a7:74:df:c4:cd:9c:2e: 1d:ad:3c:7b:4a:2a:99:89:83:25:30:57:98:79:17: 42:f2:14:df:9f:f2:17:81:26:29:f3:fb:2e:d2:c7: 33:d4:c9:b6:a9:35:ff:79:76:e8:dc:67:bc:ea:95: cd:45:69:9e:7a:54:c2:bd:f9:f6:fb:9e:3f:e5:cb: de:ec:12:21:9d:56:f2:64:16:a7:30:9a:1e:95:4c: 03:79:e5:11:3c:e6:5c:71:34:76:cd:fd:d7:df:39: d9:ea:5f:89:1f:b9:7c:be:fd:e4:e9:e4:5f:7c:f4: 06:8b:12:05:13:1b:f4:71:bf:2b:99:36:30:7b:5c: 24:42:60:f6:5b:11:c1:89:d3:45:67:79:20:82:e4: d9:10:96:a8:48:08:54:7d:48:ce:3b:bc:8a:22:e0: 5c:ec:75:b9:82:f4:cd:51:65:17:2e:77:2c:b4:3b: c7:2d:88:63:6c:cc:2b:fb:2b:49:f3:2c:11:bd:87: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CD:A3:24:27:48:62:A2:3F:66:6F:FB:37:75:CE:9E:36:0E:4A:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/6638f874-6d79-393c-8793-4fb63bc1f4dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 192.5.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c6:0a:1d:b6:62:75:e4:78:d2:ec:7f:17:19:ae:18:92:81: 8c:26:c4:83:98:25:9a:90:e5:be:fd:25:60:ca:be:99:6e:b4: f5:48:63:2f:e7:d7:48:0b:8d:7c:a2:d4:2c:bd:f8:e5:a6:20: 1e:06:0a:2d:d9:42:9f:88:38:fe:44:6e:f8:38:75:6b:6f:01: 67:64:a3:7d:b7:dc:a9:87:4e:12:c9:35:89:a1:1f:79:af:57: ac:02:b8:62:3d:cf:cf:f8:35:26:86:e2:4a:21:2e:d3:dd:f5: f8:83:bf:7a:53:44:2e:fb:dc:e1:2b:29:d9:59:93:b0:bb:ec: 19:68:a7:66:64:37:1a:b9:a4:5c:ce:15:51:b1:32:15:3d:86: fe:03:8e:0e:b0:fe:54:dd:3c:73:87:63:41:0e:10:6a:33:d2: 7f:d9:58:a3:59:fe:a3:fe:b7:35:50:a0:75:d4:fd:4c:30:5c: db:f4:8c:d6:c1:a9:16:0f:a2:c6:73:5e:38:d8:c1:83:c2:85: a6:56:f3:7d:b2:b1:65:69:2d:e0:5c:73:2c:b3:d8:db:e0:a8: 69:4a:ac:61:03:59:66:b1:01:c3:20:61:90:55:11:d0:97:4e: 32:82:76:79:e3:08:e6:2a:22:59:8f:0b:fc:25:7b:ff:b5:aa: 4a:ef:6b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoo3JwS0lbuTiskMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI1MDYxMTIwNTczNloXDTI1MDkwOTIwNTczNlowLzEtMCsGA1UEAxMk NmRmZmVhMzYtNThmYi00NzU3LThhYzgtYzE4ODk4NDdlZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGTYvat3NqCNebd0CEA54fRMoSnM2tZfoW+y 1iNxy5hqG4JjNtT4shNjyrgZ3qNbCFwSSeMdSj6sDRYEqUSEFj0toKd038TNnC4d rTx7SiqZiYMlMFeYeRdC8hTfn/IXgSYp8/su0scz1Mm2qTX/eXbo3Ge86pXNRWme elTCvfn2+54/5cve7BIhnVbyZBanMJoelUwDeeURPOZccTR2zf3X3znZ6l+JH7l8 vv3k6eRffPQGixIFExv0cb8rmTYwe1wkQmD2WxHBidNFZ3kgguTZEJaoSAhUfUjO O7yKIuBc7HW5gvTNUWUXLncstDvHLYhjbMwr+ytJ8ywRvYeyjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPNoyQnSGKiP2Zv+zd1zp42DkoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvNjYzOGY4NzQtNmQ3OS0z OTNjLTg3OTMtNGZiNjNiYzFmNGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3GCh22YnXkeNLsfxcZrhiSgYwmxIOYJZqQ5b79JWDKvplutPVIYy/n 10gLjXyi1Cy9+OWmIB4GCi3ZQp+IOP5Ebvg4dWtvAWdko3233KmHThLJNYmhH3mv V6wCuGI9z8/4NSaG4kohLtPd9fiDv3pTRC773OErKdlZk7C77Blop2ZkNxq5pFzO FVGxMhU9hv4Djg6w/lTdPHOHY0EOEGoz0n/ZWKNZ/qP+tzVQoHXU/UwwXNv0jNbB qRYPosZzXjjYwYPChaZW832ysWVpLeBccyyz2NvgqGlKrGEDWWaxAcMgYZBVEdCX TjKCdnnjCOYqIlmPC/wle/+1qkrva34= -----END CERTIFICATE-----Generated at Wed Jul 2 04:19:52 2025 by rpki-client