$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/5ac22895-93b0-3a89-8396-5d9f7bc4a0fc.roa File: 5ac22895-93b0-3a89-8396-5d9f7bc4a0fc.roa (raw, json) Hash identifier: D7xP2hC9cXigaz85gwKfbvpERxlKNlVvr01S+Gsj23w= Subject key identifier: EE:8E:F5:58:67:D3:57:AE:D5:73:F9:B6:EE:64:FF:F3:9D:AF:E5:0B Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F43285849BDDA2B838E1DAAB107D90540 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/5ac22895-93b0-3a89-8396-5d9f7bc4a0fc.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 396952 IP address blocks: 208.87.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2b:83:8e:1d:aa:b1:07:d9:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=d4e91649-cd23-4a25-9ec2-4c4caf64a3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c6:53:93:2c:1a:29:23:7a:5b:e1:18:26:45: a7:6b:4a:b3:58:f6:b4:f0:58:f3:e6:45:1e:76:a7: 7f:df:1b:78:c3:f0:76:1f:73:26:06:27:29:4e:fe: b0:1f:a2:bf:09:8a:1d:68:62:aa:a9:78:2c:c2:46: 52:74:f9:6e:c1:ce:27:56:38:d0:f1:bb:ab:d0:de: d9:68:39:57:18:7b:3e:c7:95:2a:1c:52:d5:f5:f9: ba:7b:f2:92:ec:0f:03:e6:a1:cf:69:ce:bc:51:18: c9:c2:9d:af:c2:70:7f:47:06:ba:77:13:03:d4:e6: 8d:9c:ab:96:8b:f6:86:6f:a9:f0:f7:3f:c8:d0:8c: 88:c9:6a:f7:01:05:08:f9:1c:f3:84:3f:1d:61:01: 07:41:3d:f9:51:3e:91:46:93:b2:eb:c2:68:57:2d: de:95:e3:c2:e2:b7:fb:9d:5f:24:93:07:25:75:2c: 5f:c8:39:d6:d9:8e:28:6e:b8:40:29:d2:51:5c:3d: 14:03:00:f1:7b:0f:69:65:03:16:20:89:4c:9d:69: d4:fe:f5:7e:8b:52:92:6c:fe:51:24:c8:d3:e1:10: 48:bf:24:94:50:06:26:fe:b1:c6:1f:1f:eb:19:82: a1:97:f0:ff:13:32:b6:b2:28:40:a5:09:cc:a2:de: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8E:F5:58:67:D3:57:AE:D5:73:F9:B6:EE:64:FF:F3:9D:AF:E5:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/5ac22895-93b0-3a89-8396-5d9f7bc4a0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 208.87.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:28:2c:7c:e5:ef:c0:c7:ab:b6:39:c9:15:c3:d3:79:e9:37: fb:c2:7b:2b:6a:90:d9:89:51:be:05:81:98:2d:a2:d4:68:eb: 36:61:b6:22:dd:d0:14:b8:d7:fb:89:f3:77:8a:fb:c9:16:df: b6:cf:05:48:96:9f:3e:24:46:79:52:e6:4d:79:c5:8a:21:c3: 72:d7:14:bf:3f:df:41:d6:8d:4f:ff:0f:51:24:c7:1c:e3:1d: 4c:a7:55:c0:0d:15:95:f8:52:27:6b:80:f6:5f:73:53:76:04: 03:13:a5:2e:41:7b:93:5f:3c:f4:09:19:f9:3c:30:df:d9:49: a0:08:f8:18:09:c2:30:fb:89:22:a1:d6:7d:94:6f:18:a5:82: 52:d5:86:92:ad:08:85:92:cd:a4:37:4f:6f:6c:13:eb:4b:a6: af:ae:57:35:f0:df:51:51:dd:2d:ea:fb:c2:78:7f:c3:0b:ff: ca:1b:9f:9a:ce:9c:a5:36:0b:7e:df:58:1e:56:d0:33:76:9f: 71:48:dd:ef:dc:f9:c0:2c:31:d1:52:db:a6:86:b9:ec:16:fb: b2:6f:2b:1c:6b:24:d3:7a:52:49:30:e2:ac:18:fe:8d:95:f8: 59:df:20:dd:cc:48:50:76:34:9e:fa:99:18:a3:81:67:98:36: 14:0a:87:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iuDjh2qsQfZBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZDRlOTE2NDktY2QyMy00YTI1LTllYzItNGM0Y2FmNjRhM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcZTkywaKSN6W+EYJkWna0qzWPa08Fjz5kUe dqd/3xt4w/B2H3MmBicpTv6wH6K/CYodaGKqqXgswkZSdPluwc4nVjjQ8bur0N7Z aDlXGHs+x5UqHFLV9fm6e/KS7A8D5qHPac68URjJwp2vwnB/Rwa6dxMD1OaNnKuW i/aGb6nw9z/I0IyIyWr3AQUI+RzzhD8dYQEHQT35UT6RRpOy68JoVy3elePC4rf7 nV8kkwcldSxfyDnW2Y4obrhAKdJRXD0UAwDxew9pZQMWIIlMnWnU/vV+i1KSbP5R JMjT4RBIvySUUAYm/rHGHx/rGYKhl/D/EzK2sihApQnMot57qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6O9Vhn01eu1XP5tu5k//Odr+ULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvNWFjMjI4OTUtOTNiMC0z YTg5LTgzOTYtNWQ5ZjdiYzRhMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FejMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8oLHzl78DHq7Y5yRXD03npN/vCeytqkNmJUb4FgZgtotRo6zZhtiLd 0BS41/uJ83eK+8kW37bPBUiWnz4kRnlS5k15xYohw3LXFL8/30HWjU//D1Ekxxzj HUynVcANFZX4UidrgPZfc1N2BAMTpS5Be5NfPPQJGfk8MN/ZSaAI+BgJwjD7iSKh 1n2UbxilglLVhpKtCIWSzaQ3T29sE+tLpq+uVzXw31FR3S3q+8J4f8ML/8obn5rO nKU2C37fWB5W0DN2n3FI3e/c+cAsMdFS26aGuewW+7JvKxxrJNN6Ukkw4qwY/o2V +FnfIN3MSFB2NJ76mRijgWeYNhQKhxA= -----END CERTIFICATE-----Generated at Wed May 14 12:28:20 2025 by rpki-client