$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa File: 5e0a4b4d-6867-3931-a668-268f7f2e4994.roa (raw, json) Hash identifier: d9iTowSpXUvT/92jeaBtFLQi/QyhzyHdoO/OUxbSngc= Subject key identifier: 8D:AD:C3:40:4C:DF:07:F4:FC:27:74:99:9D:DB:A2:F1:90:8B:86:F5 Certificate issuer: /CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72 Certificate serial: 010D0C9F4328584A4C3B13392968D42DF4C24680 Authority key identifier: 67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 16509 IP address blocks: 88.218.35.0/24 maxlen: 24 188.241.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:13:39:29:68:d4:2d:f4:c2:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=b433be20-1844-4e41-9224-3f62529d7a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:16:29:42:58:0d:86:e4:7c:b2:5c:41:d9: 20:c3:45:6c:78:15:84:b4:e9:4c:a8:b7:0a:f4:89: ad:ea:fe:53:bd:ee:f3:e9:69:ee:c8:d7:3d:7e:cb: 53:91:22:e5:90:2e:5b:6a:8a:77:b9:68:24:61:6d: a2:c2:54:81:d4:35:8c:a6:9e:2d:2a:35:19:d8:9a: e2:60:5c:c0:f5:3c:ab:9e:13:80:76:ae:4b:ba:0d: 58:b8:8e:e4:41:bf:64:8c:36:10:39:88:ff:6b:90: b8:c9:34:c0:bf:39:7c:f7:55:50:e4:64:f7:0f:8a: 76:43:f1:6e:2c:af:7e:54:2a:54:df:2d:9f:e5:f8: 6c:2c:f3:a6:a0:4f:9a:e7:bc:63:fc:33:fb:50:83: 33:b9:cd:cd:8f:ad:e7:a1:57:3b:5f:87:29:c2:32: ee:a6:a5:c7:f0:a4:37:50:41:89:12:05:34:06:f7: a7:67:ca:cb:b1:ed:de:c1:09:87:3e:95:a1:eb:0a: 5b:cb:6c:1f:37:76:01:c9:72:aa:35:c0:a7:9f:80: ff:6a:35:bf:41:3b:0d:a8:f7:6e:a2:cf:89:09:a6: 76:15:27:46:2b:a1:31:6f:67:ef:24:9e:e4:67:e7: c6:d7:ac:14:8d:5d:e1:22:27:2d:23:e5:b9:15:06: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AD:C3:40:4C:DF:07:F4:FC:27:74:99:9D:DB:A2:F1:90:8B:86:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl X509v3 Authority Key Identifier: keyid:67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer sbgp-ipAddrBlock: critical IPv4: 88.218.35.0/24 188.241.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f4:ed:c1:01:cb:d0:33:ea:83:a7:a2:b1:0e:73:19:e5:6a: cc:0a:a8:70:11:b7:0d:ee:7c:c5:41:90:cf:61:8c:8c:94:b1: fc:a1:ef:7a:57:de:77:1d:ad:89:f0:b0:f0:d0:ab:8d:8b:5a: 61:fd:5c:f8:ab:de:d5:93:6a:fd:f8:96:ae:66:e5:36:5d:af: c7:da:98:00:d7:64:28:75:96:97:a1:1d:74:5d:31:9f:2d:11: de:93:40:c2:1e:f5:fb:11:26:3f:da:a3:66:07:9a:83:36:77: 6c:e8:4c:61:98:51:87:a4:fb:5e:cd:20:0c:df:41:ad:a3:f1: 8d:98:2b:f2:4a:da:f2:5b:df:3d:c2:03:0c:3a:d1:bc:88:8e: 6e:ac:dd:21:b3:82:09:c6:4d:70:83:5b:93:ea:fe:6c:22:b0: 38:5f:5c:e9:62:61:e0:ca:e9:92:a3:92:81:e7:e3:d0:b2:bd: ea:3b:76:2a:ed:41:81:84:06:1c:92:ae:e8:ca:4b:67:b1:65: 3e:86:29:97:dc:b3:0e:63:64:9d:04:c3:45:72:2d:75:0a:65: bd:c6:85:e0:71:61:50:50:2b:ff:6c:9e:46:c3:b2:1a:5e:dc: 4a:f3:3c:02:83:e8:24:81:82:fe:6b:6e:99:01:84:7f:36:34: 64:65:11:b1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpMOxM5KWjULfTCRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzYTQxNmYtNmYzNi00NGM2LTg0ZWYtOGQ1MzE0YjEw YTcyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk YjQzM2JlMjAtMTg0NC00ZTQxLTkyMjQtM2Y2MjUyOWQ3YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrAWKUJYDYbkfLJcQdkgw0VseBWEtOlMqLcK 9Imt6v5Tve7z6WnuyNc9fstTkSLlkC5baop3uWgkYW2iwlSB1DWMpp4tKjUZ2Jri YFzA9TyrnhOAdq5Lug1YuI7kQb9kjDYQOYj/a5C4yTTAvzl891VQ5GT3D4p2Q/Fu LK9+VCpU3y2f5fhsLPOmoE+a57xj/DP7UIMzuc3Nj63noVc7X4cpwjLupqXH8KQ3 UEGJEgU0BvenZ8rLse3ewQmHPpWh6wpby2wfN3YByXKqNcCnn4D/ajW/QTsNqPdu os+JCaZ2FSdGK6Exb2fvJJ7kZ+fG16wUjV3hIictI+W5FQZIwwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI2tw0BM3wf0/Cd0mZ3bovGQi4b1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZTNh NDE2Zi02ZjM2LTQ0YzYtODRlZi04ZDUzMTRiMTBhNzIvNWUwYTRiNGQtNjg2Ny0z OTMxLWE2NjgtMjY4ZjdmMmU0OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2UzYTQxNmYtNmYzNi00NGM2LTg0 ZWYtOGQ1MzE0YjEwYTcyLzNlM2E0MTZmLTZmMzYtNDRjNi04NGVmLThkNTMxNGIx MGE3Mi5jcmwwHwYDVR0jBBgwFoAUZ5zppAiCqwb8ORObK2jcJYdA8pswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZTNhNDE2Zi02ZjM2LTQ0YzYtODRlZi04ZDUz MTRiMTBhNzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNojAwQA vPHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALD07cEBy9Az6oOnorEOcxnlaswKqHARtw3ufMVBkM9hjIyU sfyh73pX3ncdrYnwsPDQq42LWmH9XPir3tWTav34lq5m5TZdr8famADXZCh1lpeh HXRdMZ8tEd6TQMIe9fsRJj/ao2YHmoM2d2zoTGGYUYek+17NIAzfQa2j8Y2YK/JK 2vJb3z3CAww60byIjm6s3SGzggnGTXCDW5Pq/mwisDhfXOliYeDK6ZKjkoHn49Cy veo7dirtQYGEBhySrujKS2exZT6GKZfcsw5jZJ0Ew0VyLXUKZb3GheBxYVBQK/9s nkbDshpe3ErzPAKD6CSBgv5rbpkBhH82NGRlEbE= -----END CERTIFICATE-----Generated at Mon Jun 30 14:55:02 2025 by rpki-client