$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/ce40db16-84cc-3e9f-8547-3694743efdf2.roa File: ce40db16-84cc-3e9f-8547-3694743efdf2.roa (raw, json) Hash identifier: 3WdSgnLdNTIYd05GcRBK2WS3/s0g3QKdE8XpKEKC9r4= Subject key identifier: EE:B0:32:2C:1B:22:D3:15:8D:A5:1F:0C:A7:0C:83:16:17:1A:2C:00 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584A0C05504EC5C3B42DB4D1BBC0 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/ce40db16-84cc-3e9f-8547-3694743efdf2.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 53828 IP address blocks: 207.200.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:50:4e:c5:c3:b4:2d:b4:d1:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8c026702-2227-47c5-b7f4-d410a545c813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:e0:1a:bd:ed:a2:72:09:fd:1e:07:a9:5c: 90:15:41:33:4b:4a:50:e2:9a:5f:9e:59:8a:57:11: ce:9b:37:3a:26:97:7b:8e:9e:45:78:03:9a:f1:ef: 64:65:90:25:f6:7b:bb:f5:92:d2:61:08:70:db:75: 2a:06:70:54:21:d4:5f:e3:e3:a3:8d:18:15:34:94: 37:93:39:99:bb:56:f1:c1:f4:3a:95:de:c7:26:a6: db:cc:71:47:6f:6f:0e:34:55:4b:67:92:40:d2:f1: 1b:f3:5f:2a:fc:f4:3f:5f:52:49:8b:7a:e3:32:32: bb:d1:c3:13:6a:78:ae:85:ea:25:7c:41:2c:89:c4: ce:9d:f1:40:ad:dc:e3:b0:a6:db:df:55:fc:6d:19: 48:31:6b:dc:7a:d4:73:d5:60:0a:a0:e5:5a:54:f9: f8:4d:44:14:25:32:54:31:5b:17:0f:1c:53:d9:d0: 4f:93:ad:e7:7c:75:7e:c9:46:3f:5a:94:61:00:d4: 45:9e:e2:22:9f:d8:25:59:fe:e6:80:c8:e1:77:4f: 21:62:2d:2c:ff:28:25:31:58:ea:2b:2c:1c:a3:cb: 2e:35:4e:43:b6:fe:aa:fe:49:94:e2:f0:36:2b:76: a3:96:53:52:64:02:66:11:af:49:bd:6c:27:f0:61: 06:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B0:32:2C:1B:22:D3:15:8D:A5:1F:0C:A7:0C:83:16:17:1A:2C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/ce40db16-84cc-3e9f-8547-3694743efdf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 207.200.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:17:f0:65:44:b0:bb:2e:6f:0b:11:b1:b7:37:89:4b:aa:4f: d1:91:8a:0d:3e:14:94:41:fd:dd:d1:d1:23:fd:4b:f9:4f:5a: 21:36:20:a7:11:ef:9f:a1:11:6a:c2:02:30:01:69:79:41:3e: a0:e0:a4:3e:70:8c:8d:7a:d6:35:b5:b6:22:53:e0:dc:a8:0f: 68:82:b4:6d:f9:af:b6:3d:47:d2:b7:b0:01:a0:d6:f1:4d:e4: 3a:e5:fc:db:61:1b:04:86:90:9f:6e:52:52:15:8c:e9:43:26: 2b:22:7b:87:db:e0:05:33:dd:29:f9:27:6a:52:4f:f3:1a:2a: 1a:21:c3:ce:c0:f2:a1:0e:e8:78:67:50:2b:b0:7d:45:9f:38: 46:63:cb:d2:24:59:25:a3:0c:dc:2c:bf:36:19:66:3d:9c:0f: 93:13:c7:d0:bd:24:23:61:40:5b:5d:b6:c4:ba:cf:aa:10:67: f4:5c:27:13:c6:ef:23:8d:89:d1:2f:f8:fe:b6:11:89:4e:0a: 25:ec:ee:11:8a:0b:33:a6:60:55:ae:7a:d1:12:b2:bf:24:93: e4:8f:c6:ee:8a:52:20:53:6e:96:d6:75:06:bd:4f:8b:66:f4: 06:a2:ed:b0:12:8e:3e:74:59:82:a2:06:83:d5:c3:cc:18:58: 62:bb:90:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVBOxcO0LbTRu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGMwMjY3MDItMjIyNy00N2M1LWI3ZjQtZDQxMGE1NDVjODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa/gGr3tonIJ/R4HqVyQFUEzS0pQ4ppfnlmK VxHOmzc6Jpd7jp5FeAOa8e9kZZAl9nu79ZLSYQhw23UqBnBUIdRf4+OjjRgVNJQ3 kzmZu1bxwfQ6ld7HJqbbzHFHb28ONFVLZ5JA0vEb818q/PQ/X1JJi3rjMjK70cMT aniuheolfEEsicTOnfFArdzjsKbb31X8bRlIMWvcetRz1WAKoOVaVPn4TUQUJTJU MVsXDxxT2dBPk63nfHV+yUY/WpRhANRFnuIin9glWf7mgMjhd08hYi0s/yglMVjq Kywco8suNU5Dtv6q/kmU4vA2K3ajllNSZAJmEa9JvWwn8GEGtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6wMiwbItMVjaUfDKcMgxYXGiwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvY2U0MGRiMTYtODRjYy0z ZTlmLTg1NDctMzY5NDc0M2VmZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz8jAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYX8GVEsLsubwsRsbc3iUuqT9GRig0+FJRB/d3R0SP9S/lPWiE2IKcR 75+hEWrCAjABaXlBPqDgpD5wjI161jW1tiJT4NyoD2iCtG35r7Y9R9K3sAGg1vFN 5Drl/NthGwSGkJ9uUlIVjOlDJisie4fb4AUz3Sn5J2pST/MaKhohw87A8qEO6Hhn UCuwfUWfOEZjy9IkWSWjDNwsvzYZZj2cD5MTx9C9JCNhQFtdtsS6z6oQZ/RcJxPG 7yONidEv+P62EYlOCiXs7hGKCzOmYFWuetESsr8kk+SPxu6KUiBTbpbWdQa9T4tm 9Aai7bASjj50WYKiBoPVw8wYWGK7kOQ= -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:12 2025 by rpki-client