$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d86ad38e-5a24-35d1-b714-58c23bec5ba4.roa File: d86ad38e-5a24-35d1-b714-58c23bec5ba4.roa (raw, json) Hash identifier: QZgw3I1EmI0CCp1yGb7UIG1vEkJ3wazfQU3ZYMaJZn8= Subject key identifier: 6B:EB:4B:49:77:19:BE:22:CF:4C:3E:72:91:65:D1:62:8F:ED:86:ED Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F43285849ADAA204F1F05C11982C71D40 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d86ad38e-5a24-35d1-b714-58c23bec5ba4.roa Signing time: Mon 28 Apr 2025 17:51:27 +0000 ROA not before: Mon 28 Apr 2025 17:51:27 +0000 ROA not after: Sun 27 Jul 2025 17:51:27 +0000 asID: 6208 IP address blocks: 200.5.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:aa:20:4f:1f:05:c1:19:82:c7:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Apr 28 17:51:27 2025 GMT Not After : Jul 27 17:51:27 2025 GMT Subject: CN=0ccbc2f3-416a-4268-a1ad-4a1fcdf07e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:9e:fc:e5:b0:d6:2b:e1:23:ba:61:8c:b0: 98:d4:2e:62:43:c5:07:96:c0:63:1c:6c:f0:c3:83: 3e:8f:d0:df:a8:82:1a:c6:eb:1d:be:ae:e5:27:12: 9c:92:a3:c2:52:89:92:31:bc:ae:c1:53:69:60:68: fa:0c:a7:67:d6:8c:1b:1d:64:be:bb:3a:3e:0f:01: 04:1a:50:58:89:f4:53:7f:bb:00:c8:be:68:c3:d2: 39:d9:45:b5:b0:08:eb:48:1f:c8:f2:65:72:23:18: 39:3b:e5:b2:49:55:2d:ad:b2:16:74:c5:4d:67:c6: 28:b7:3c:8d:47:31:bb:f4:0f:80:0f:96:c7:6d:52: 00:1c:2c:32:66:29:3f:0b:18:6f:db:af:d2:37:7a: 13:46:ea:a1:c2:76:58:d7:db:48:9f:f0:46:7c:44: 52:15:84:13:57:01:40:30:1f:d8:cf:3d:15:9f:db: d1:2c:08:f8:af:7e:8c:c0:3a:95:cd:77:fb:0d:b7: e5:c8:18:49:71:1c:b8:a3:b4:6b:35:80:a1:b2:6e: 02:d7:ce:33:23:dc:c2:cc:cc:4a:ae:bb:b6:f1:83: 48:67:57:8a:2e:7c:52:a7:d2:ba:da:d4:a7:32:d0: 41:e0:23:04:92:bb:62:5c:b8:24:b4:e5:a0:92:bc: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EB:4B:49:77:19:BE:22:CF:4C:3E:72:91:65:D1:62:8F:ED:86:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d86ad38e-5a24-35d1-b714-58c23bec5ba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 200.5.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f4:52:19:68:a2:8f:8c:22:07:86:a0:73:5d:7e:17:f8:a9: 93:80:e7:89:f4:26:33:1b:bb:4c:76:05:83:03:f7:10:31:0c: 82:d1:a1:b6:bf:10:13:1a:37:da:19:39:ba:04:48:9d:bd:42: 04:4b:34:10:d3:0e:07:a3:7c:6a:51:de:db:5a:ad:76:cb:9a: a7:c0:55:b8:ff:d5:e6:a1:1b:b1:7f:07:2e:bd:c4:5b:0a:90: a0:d4:ca:dd:8f:d5:5e:b5:28:6d:49:4b:b9:d5:a5:79:fa:80: a0:f2:e3:47:0c:92:e8:83:a8:75:1f:36:d1:76:92:56:20:f3: 28:49:9a:8f:1c:48:8a:73:e5:70:78:de:9c:cf:62:5f:da:83: a4:14:5e:7e:8b:8c:c7:45:1e:d6:e8:e0:a2:c4:46:60:31:df: 31:9e:0d:89:74:91:7c:a6:18:d2:18:2b:25:fe:51:33:fe:c9: 06:60:c3:32:7b:59:9b:04:9b:b5:0a:a1:60:dc:c0:a6:61:90: 12:1c:e2:df:5e:a9:47:20:8f:da:11:a6:9e:0c:b4:91:99:cc: e3:49:20:0f:72:48:a6:0c:4e:98:92:b9:85:bb:de:ee:1a:40: 52:4f:89:18:bc:b4:42:23:aa:28:b8:b5:7f:23:33:ea:43:08: b2:59:2b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtqiBPHwXBGYLHHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MDQyODE3NTEyN1oXDTI1MDcyNzE3NTEyN1owLzEtMCsGA1UEAxMk MGNjYmMyZjMtNDE2YS00MjY4LWExYWQtNGExZmNkZjA3ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsGe/OWw1ivhI7phjLCY1C5iQ8UHlsBjHGzw w4M+j9DfqIIaxusdvq7lJxKckqPCUomSMbyuwVNpYGj6DKdn1owbHWS+uzo+DwEE GlBYifRTf7sAyL5ow9I52UW1sAjrSB/I8mVyIxg5O+WySVUtrbIWdMVNZ8YotzyN RzG79A+AD5bHbVIAHCwyZik/Cxhv26/SN3oTRuqhwnZY19tIn/BGfERSFYQTVwFA MB/Yzz0Vn9vRLAj4r36MwDqVzXf7DbflyBhJcRy4o7RrNYChsm4C184zI9zCzMxK rru28YNIZ1eKLnxSp9K62tSnMtBB4CMEkrtiXLgktOWgkrx/FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvrS0l3Gb4iz0w+cpFl0WKP7YbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvZDg2YWQzOGUtNWEyNC0z NWQxLWI3MTQtNThjMjNiZWM1YmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD70Uhlooo+MIgeGoHNdfhf4qZOA54n0JjMbu0x2BYMD9xAxDILRoba/ EBMaN9oZOboESJ29QgRLNBDTDgejfGpR3ttarXbLmqfAVbj/1eahG7F/By69xFsK kKDUyt2P1V61KG1JS7nVpXn6gKDy40cMkuiDqHUfNtF2klYg8yhJmo8cSIpz5XB4 3pzPYl/ag6QUXn6LjMdFHtbo4KLERmAx3zGeDYl0kXymGNIYKyX+UTP+yQZgwzJ7 WZsEm7UKoWDcwKZhkBIc4t9eqUcgj9oRpp4MtJGZzONJIA9ySKYMTpiSuYW73u4a QFJPiRi8tEIjqii4tX8jM+pDCLJZK6k= -----END CERTIFICATE-----Generated at Wed May 7 18:39:04 2025 by rpki-client