$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa File: 8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa (raw, json) Hash identifier: +58QAhVdUZtEgYwple3oMXfkjF2JbmPFOtA2C8RHQjk= Subject key identifier: 5A:FA:A2:32:C7:73:FC:36:79:2F:06:4D:9D:30:AF:E7:60:47:6F:29 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F43285849B6DF4D8EF0FA3F9FE3A4F100 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 54054 IP address blocks: 199.168.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4d:8e:f0:fa:3f:9f:e3:a4:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=92606403-4059-4d4b-872b-abc0f5dbc12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:9c:0b:a9:8c:4a:4a:95:01:75:c9:2a:63: 6f:d9:0f:d5:54:1b:32:a0:08:ae:f8:a8:e9:d7:53: ee:b6:28:11:75:d4:f7:c8:c7:1b:6e:88:f6:27:e8: be:69:6e:a0:fe:7b:5d:70:42:f4:e9:24:69:fc:4c: e1:4c:d9:4c:6c:e6:7a:37:65:5f:6f:6f:5c:88:2b: 7e:f0:c2:e5:0b:c5:85:93:3a:f5:45:ef:ba:9d:ed: 8e:05:4c:48:06:30:76:90:89:29:10:3b:82:70:cd: e4:84:15:a6:50:81:e1:cd:4a:39:23:d9:ba:6f:85: 25:61:fd:d8:a8:f8:7a:6f:d7:68:55:ac:b1:fd:a8: 3e:a2:7a:fc:dd:93:fa:d9:b1:38:69:b3:1c:5a:fd: 95:0a:bc:ce:81:b4:1e:c9:73:7a:08:8c:73:09:23: 03:2c:9f:f5:f7:4e:e6:2e:9f:2d:0c:70:61:c8:c8: f3:f4:a0:05:06:1a:c8:18:e2:7a:8d:41:2f:04:9a: 0a:47:1f:18:58:38:b3:ec:b6:47:c5:bf:21:c6:9d: a3:ab:04:ca:9d:5c:39:78:ee:8c:22:cd:6e:ee:54: b8:d9:8e:53:6c:a8:d9:7b:89:59:d2:0e:39:1e:cc: 82:9a:5c:7c:53:75:ac:25:c1:72:84:80:9b:a2:28: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:A2:32:C7:73:FC:36:79:2F:06:4D:9D:30:AF:E7:60:47:6F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/8c39e9e5-bff9-3bf9-b082-a78db797d7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 199.168.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e8:43:95:5b:f1:94:d0:38:a5:48:41:8d:1f:c4:aa:99:3e: be:6b:28:18:3a:be:c5:1d:a3:d2:44:c4:f1:9f:97:91:e8:68: a5:13:89:f2:b0:81:62:e3:47:09:7d:f3:cd:e5:dd:89:33:00: 13:8b:ff:af:e5:eb:95:78:f1:7f:66:d7:ab:72:6f:83:36:bf: c7:70:d7:26:94:dd:96:33:6e:c5:db:6d:6a:c6:22:d4:05:a8: e1:f5:31:e6:2a:a6:15:79:40:b4:46:3a:79:7c:e9:1a:a1:a3: 16:76:3f:00:af:6e:a2:75:5d:87:67:df:90:d8:de:12:9e:0f: d5:94:b2:ca:74:4b:5b:cd:73:a4:65:a5:35:16:84:92:80:1a: f6:7a:01:a1:74:3f:3b:ca:d7:38:04:01:89:29:ba:0f:68:e3: e0:85:9f:15:62:d0:ca:8d:54:50:22:fc:c4:01:07:c0:82:96: e2:8a:04:c1:4f:20:7e:c6:ea:a8:83:43:73:c2:9c:94:14:cf: 6c:a1:f7:f2:54:fb:9d:cd:6f:55:3f:71:55:e6:b4:eb:57:d4: ee:27:ed:a2:0d:3d:9e:17:ae:c1:88:76:65:de:77:16:5f:31: af:8c:8f:94:5e:d0:36:70:39:12:92:e1:71:cf:36:d0:92:75: 88:25:f7:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2302O8Po/n+Ok8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk OTI2MDY0MDMtNDA1OS00ZDRiLTg3MmItYWJjMGY1ZGJjMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ+cC6mMSkqVAXXJKmNv2Q/VVBsyoAiu+Kjp 11PutigRddT3yMcbboj2J+i+aW6g/ntdcEL06SRp/EzhTNlMbOZ6N2Vfb29ciCt+ 8MLlC8WFkzr1Re+6ne2OBUxIBjB2kIkpEDuCcM3khBWmUIHhzUo5I9m6b4UlYf3Y qPh6b9doVayx/ag+onr83ZP62bE4abMcWv2VCrzOgbQeyXN6CIxzCSMDLJ/1907m Lp8tDHBhyMjz9KAFBhrIGOJ6jUEvBJoKRx8YWDiz7LZHxb8hxp2jqwTKnVw5eO6M Is1u7lS42Y5TbKjZe4lZ0g45HsyCmlx8U3WsJcFyhICboigTZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr6ojLHc/w2eS8GTZ0wr+dgR28pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvOGMzOWU5ZTUtYmZmOS0z YmY5LWIwODItYTc4ZGI3OTdkN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHoQ5Vb8ZTQOKVIQY0fxKqZPr5rKBg6vsUdo9JExPGfl5HoaKUTifKw gWLjRwl9883l3YkzABOL/6/l65V48X9m16tyb4M2v8dw1yaU3ZYzbsXbbWrGItQF qOH1MeYqphV5QLRGOnl86RqhoxZ2PwCvbqJ1XYdn35DY3hKeD9WUssp0S1vNc6Rl pTUWhJKAGvZ6AaF0PzvK1zgEAYkpug9o4+CFnxVi0MqNVFAi/MQBB8CCluKKBMFP IH7G6qiDQ3PCnJQUz2yh9/JU+53Nb1U/cVXmtOtX1O4n7aINPZ4XrsGIdmXedxZf Ma+Mj5Re0DZwORKS4XHPNtCSdYgl95s= -----END CERTIFICATE-----Generated at Tue May 6 08:13:31 2025 by rpki-client