$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/300e2cdd-747b-3d19-9518-b3b8ce7c1528.roa File: 300e2cdd-747b-3d19-9518-b3b8ce7c1528.roa (raw, json) Hash identifier: WIJRzRDbYcTvX1hLOmjdfe6ZIn1VtYCxzwbvTy17pBM= Subject key identifier: 1B:E0:8C:8A:C3:09:B2:86:A8:E1:FB:E8:09:60:29:44:FA:1F:13:F6 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F43285849EA83C2589B24581E00857A80 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/300e2cdd-747b-3d19-9518-b3b8ce7c1528.roa Signing time: Tue 20 May 2025 12:58:27 +0000 ROA not before: Tue 20 May 2025 12:58:27 +0000 ROA not after: Mon 18 Aug 2025 12:58:27 +0000 asID: 0 IP address blocks: 192.26.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:83:c2:58:9b:24:58:1e:00:85:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: May 20 12:58:27 2025 GMT Not After : Aug 18 12:58:27 2025 GMT Subject: CN=72cc27a8-8106-4a70-bb80-50428fa0e95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:53:67:c2:bb:50:d5:5f:e4:d1:fb:51:b6: 63:87:09:71:08:52:1d:21:aa:f3:f5:2a:bb:56:06: ea:8b:41:a5:d2:5a:36:d2:8a:2e:91:f3:a2:3f:8f: d5:d4:d6:56:38:7d:19:6c:df:fe:b2:6c:0f:b8:80: 7c:95:c6:ac:59:04:bd:c4:99:65:5d:4d:c4:a2:f2: aa:e5:78:59:b3:b2:69:9f:41:b6:02:3a:57:1e:d2: ec:3b:e7:f5:17:5b:77:dd:a1:b7:1a:2f:d8:2d:28: 04:cc:8c:24:96:d6:7c:09:db:b9:a8:22:a5:10:5c: 11:4c:6c:08:e9:b5:44:02:0f:eb:0c:17:71:8a:45: fa:5d:fd:d0:b7:d7:e1:2d:cc:8a:7a:16:46:fc:47: ef:6a:f0:e7:9f:7c:8e:09:66:81:81:c2:ce:2a:a2: 5d:2b:d8:7b:6c:5d:5f:e8:18:22:9e:dd:33:6e:8e: 21:75:93:15:65:a7:93:5b:c9:a0:50:ac:cc:3c:dc: c3:f9:8e:ed:c0:93:d3:b8:81:4c:33:37:81:b0:2a: 30:a4:28:3f:e8:f4:06:ed:e4:7d:5f:bb:7b:7b:d6: 72:1c:18:ee:71:cc:bb:62:63:83:d5:18:c3:d7:f6: 0d:55:3b:5d:77:a0:3d:fb:5d:7a:9c:04:45:52:ff: ff:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E0:8C:8A:C3:09:B2:86:A8:E1:FB:E8:09:60:29:44:FA:1F:13:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/300e2cdd-747b-3d19-9518-b3b8ce7c1528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 192.26.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:31:5a:d8:a2:d1:3e:1b:69:2b:2f:3d:6f:5f:0d:41:bb:cf: c6:85:63:be:3a:61:a0:9b:f4:c3:88:67:56:34:f9:80:29:92: a5:fb:97:7b:b5:e1:e1:ce:12:4c:3c:55:60:a5:e8:f6:5b:de: 81:80:3d:5b:fc:9e:fe:eb:6d:6e:39:35:4f:55:4d:fe:fb:e7: 1b:f3:47:b8:25:d0:02:8a:3d:5b:0b:53:2e:7a:a7:fd:b5:bf: 28:de:b0:d8:ac:2a:81:28:c3:00:af:ca:24:fe:ef:be:44:e5: 85:82:aa:63:8b:4d:99:c7:f9:11:99:70:f7:09:bc:e3:49:fc: c7:2c:d6:e5:32:8f:90:85:3c:91:5f:98:f4:fe:ad:b9:89:ce: 80:50:ce:36:ab:d9:8c:69:db:17:db:a2:08:db:4a:26:c1:74: 56:5d:33:5d:35:7f:09:56:bb:bc:7e:3d:92:b0:61:a3:54:b0: 7c:98:44:b4:d5:4a:ae:29:fd:81:0b:fc:77:44:78:b9:ac:15: 4b:5f:74:fd:44:cc:8a:6b:61:26:72:a6:9e:ab:17:c2:1c:d3: 82:15:5f:b9:f7:4f:23:76:0a:5f:80:cd:10:39:1c:e3:64:0d: eb:3b:5a:e6:43:cd:f7:c3:95:2c:77:fa:e4:f2:ec:a2:21:76: 88:39:15:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqg8JYmyRYHgCFeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDUyMDEyNTgyN1oXDTI1MDgxODEyNTgyN1owLzEtMCsGA1UEAxMk NzJjYzI3YTgtODEwNi00YTcwLWJiODAtNTA0MjhmYTBlOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYNTZ8K7UNVf5NH7UbZjhwlxCFIdIarz9Sq7 Vgbqi0Gl0lo20ooukfOiP4/V1NZWOH0ZbN/+smwPuIB8lcasWQS9xJllXU3EovKq 5XhZs7Jpn0G2AjpXHtLsO+f1F1t33aG3Gi/YLSgEzIwkltZ8Cdu5qCKlEFwRTGwI 6bVEAg/rDBdxikX6Xf3Qt9fhLcyKehZG/EfvavDnn3yOCWaBgcLOKqJdK9h7bF1f 6Bgint0zbo4hdZMVZaeTW8mgUKzMPNzD+Y7twJPTuIFMMzeBsCowpCg/6PQG7eR9 X7t7e9ZyHBjuccy7YmOD1RjD1/YNVTtdd6A9+116nARFUv//YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvgjIrDCbKGqOH76AlgKUT6HxP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvMzAwZTJjZGQtNzQ3Yi0z ZDE5LTk1MTgtYjNiOGNlN2MxNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAxWtii0T4baSsvPW9fDUG7z8aFY746YaCb9MOIZ1Y0+YApkqX7l3u1 4eHOEkw8VWCl6PZb3oGAPVv8nv7rbW45NU9VTf775xvzR7gl0AKKPVsLUy56p/21 vyjesNisKoEowwCvyiT+775E5YWCqmOLTZnH+RGZcPcJvONJ/Mcs1uUyj5CFPJFf mPT+rbmJzoBQzjar2Yxp2xfbogjbSibBdFZdM101fwlWu7x+PZKwYaNUsHyYRLTV Sq4p/YEL/HdEeLmsFUtfdP1EzIprYSZypp6rF8Ic04IVX7n3TyN2Cl+AzRA5HONk Des7WuZDzffDlSx3+uTy7KIhdog5FRM= -----END CERTIFICATE-----Generated at Sun Jun 29 17:47:19 2025 by rpki-client