$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa File: 9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa (raw, json) Hash identifier: 7J0WEY0Z6ZP7JOV75R+YpKZpdt49unQ+zmSzmQ4zO5k= Subject key identifier: C0:86:54:80:FA:1D:20:30:12:77:81:3D:EA:4C:C3:4F:D5:4F:67:69 Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584A30503FF16EE66C7D61497600 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 208.88.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:3f:f1:6e:e6:6c:7d:61:49:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=96e6457b-28cf-4f24-a318-1ae57881b77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:5c:cf:f7:45:43:4c:ee:a9:4c:da:ef:9e: e0:79:22:e7:1a:12:1b:5a:85:27:cd:0a:52:83:cd: b4:78:4b:f2:44:50:ca:74:79:3f:74:e4:1b:d7:c2: 7b:11:6e:f7:66:d0:52:d2:cd:8f:55:c5:c8:83:ba: 2b:91:7c:33:9b:07:5b:1f:92:f6:85:17:a5:b9:61: 69:ca:70:3c:1b:2d:e3:c2:0a:f0:e8:55:c7:74:c6: cc:56:4e:e4:32:d7:11:74:ca:71:0e:69:fb:60:5a: dd:3a:e9:48:8e:a0:15:4f:49:49:dd:b9:7a:f0:c7: 36:0b:e4:ba:41:80:30:bc:1b:ea:01:f8:e4:98:14: 32:0c:6f:59:ed:59:7d:93:e8:a2:7e:4f:bb:dc:6d: fc:26:fc:c5:7c:d8:d0:f1:3d:0d:31:6b:f7:aa:aa: 45:8a:15:45:05:83:fd:f6:5c:cd:87:55:65:53:e0: 1d:4d:92:07:b0:57:47:71:0d:c5:91:50:0c:8b:77: 8b:a2:09:a8:27:5b:c8:31:52:a5:41:83:a9:e1:92: e3:fc:ab:9b:4f:ac:65:32:83:78:da:13:f1:2f:9d: cf:91:0d:7b:81:91:56:e2:66:ac:ae:da:68:66:0a: 87:94:8d:20:7d:1d:4f:ae:ea:2f:9b:6c:83:88:e5: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:86:54:80:FA:1D:20:30:12:77:81:3D:EA:4C:C3:4F:D5:4F:67:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0d:38:45:32:b2:23:ad:79:6e:ea:4c:af:fa:95:2a:ca:76: e2:26:02:44:9a:e9:c1:41:37:94:ac:0a:20:2b:26:f9:c7:5b: 0c:f5:c7:1d:27:ea:1a:d8:e7:52:d4:ec:1f:10:bc:32:69:3f: a9:bc:34:d7:36:04:4d:5b:7f:fd:db:de:00:6b:59:d2:0f:9c: 8a:99:89:ce:e8:72:37:11:76:42:bc:29:8f:37:ae:ee:29:69: 65:2e:99:e8:24:9f:96:52:a7:44:89:ae:fe:ef:25:3b:b9:08: 14:d6:dc:c0:34:18:7b:02:07:af:b7:0c:bf:e4:17:28:c2:1c: b5:d2:6f:a0:df:7e:73:41:5e:25:9e:b1:23:23:03:88:92:45: e4:d4:d3:06:65:b1:a0:96:43:b2:8d:31:51:f0:f6:46:80:07: a6:45:75:bc:97:f4:25:fb:4f:fb:57:4a:97:c5:8f:8b:3d:bf: 15:1c:dc:b8:75:4e:d9:83:10:5f:49:65:0b:28:f3:7a:5d:a4: fa:4b:9b:f9:e6:b3:b9:11:cf:5d:5f:1f:4c:9a:57:10:56:ec: db:49:73:84:08:73:58:41:87:39:11:53:38:d8:a6:c2:fb:b4: f8:2e:61:bc:bd:33:b6:f2:7b:16:14:8f:e1:e4:83:00:08:fc: 9f:06:97:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUD/xbuZsfWFJdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTZlNjQ1N2ItMjhjZi00ZjI0LWEzMTgtMWFlNTc4ODFiNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIRcz/dFQ0zuqUza757geSLnGhIbWoUnzQpS g820eEvyRFDKdHk/dOQb18J7EW73ZtBS0s2PVcXIg7orkXwzmwdbH5L2hReluWFp ynA8Gy3jwgrw6FXHdMbMVk7kMtcRdMpxDmn7YFrdOulIjqAVT0lJ3bl68Mc2C+S6 QYAwvBvqAfjkmBQyDG9Z7Vl9k+iifk+73G38JvzFfNjQ8T0NMWv3qqpFihVFBYP9 9lzNh1VlU+AdTZIHsFdHcQ3FkVAMi3eLogmoJ1vIMVKlQYOp4ZLj/KubT6xlMoN4 2hPxL53PkQ17gZFW4masrtpoZgqHlI0gfR1Pruovm2yDiOVkHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCGVID6HSAwEneBPepMw0/VT2dpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvOWRiMzBmNjQtN2UwYi0z NjA4LWI3YmQtNzZmY2U4ZDc2ZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsNOEUysiOteW7qTK/6lSrKduImAkSa6cFBN5SsCiArJvnHWwz1xx0n 6hrY51LU7B8QvDJpP6m8NNc2BE1bf/3b3gBrWdIPnIqZic7ocjcRdkK8KY83ru4p aWUumegkn5ZSp0SJrv7vJTu5CBTW3MA0GHsCB6+3DL/kFyjCHLXSb6DffnNBXiWe sSMjA4iSReTU0wZlsaCWQ7KNMVHw9kaAB6ZFdbyX9CX7T/tXSpfFj4s9vxUc3Lh1 TtmDEF9JZQso83pdpPpLm/nms7kRz11fH0yaVxBW7NtJc4QIc1hBhzkRUzjYpsL7 tPguYby9M7byexYUj+HkgwAI/J8Gl8A= -----END CERTIFICATE-----Generated at Sun Jun 29 07:43:27 2025 by rpki-client