$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa File: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (raw, json) Hash identifier: W+m9rCTwJOTwrmZaYD7xm/a8e1GAk1ZXVcOTxXTpIds= Subject key identifier: 04:75:30:DF:9D:64:C1:F9:C0:71:BF:F7:BC:A4:00:8E:33:E6:4B:07 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584A0C05489E66634365A5D641A0 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 395644 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:48:9e:66:63:43:65:a5:d6:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4734f3fb-43a1-4cba-93b8-c2ebcc9d5cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:3a:af:e6:75:bb:01:1c:de:6a:f6:d9:dc: 5c:dc:d5:b9:fd:70:9f:24:2c:8e:54:e2:25:2b:9d: 02:e5:bc:61:c0:c0:6b:21:56:87:2f:14:b6:99:f7: 71:57:6b:7d:33:eb:55:b0:ba:ee:3d:23:88:f9:16: 64:2f:11:d3:d8:8e:b1:99:6f:a2:74:a6:28:c7:5a: 46:43:87:6e:38:a1:e8:6c:e0:bf:08:0c:f0:f3:a0: 63:fe:0f:2c:f9:2a:25:21:95:3d:25:3d:0c:3e:12: bf:24:52:30:0b:1f:57:ef:f8:b9:1a:31:b0:d2:33: 0e:3e:b2:1c:e9:01:59:c0:b0:77:51:76:45:d3:a2: 8b:2c:5f:10:95:bc:9b:b1:2a:dc:98:95:c7:e7:9a: bb:23:c5:64:84:42:0c:58:0a:6e:72:88:47:cd:44: 08:2a:b7:37:e3:4c:52:03:74:6a:e5:ce:37:6b:5a: 58:76:38:7b:85:8c:1d:19:84:17:0d:ba:01:08:f7: 5e:96:6d:d0:00:87:59:1a:ed:ef:e2:02:dc:67:c4: 34:16:5e:ff:34:35:97:17:6c:89:15:81:7c:57:63: 18:8c:40:bc:ce:1c:f9:e0:6f:56:87:b6:78:02:70: ed:60:63:59:d9:b1:6f:2e:22:09:bb:ca:1e:38:1e: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:75:30:DF:9D:64:C1:F9:C0:71:BF:F7:BC:A4:00:8E:33:E6:4B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7d:c8:5d:37:e5:a9:25:26:4d:cf:01:15:0a:bd:ea:8b:d8: 8c:c1:70:49:80:35:b0:64:c3:65:0c:ec:ab:c2:71:5a:e6:76: ec:0a:37:e3:a0:dc:f2:dd:aa:03:94:5b:41:af:58:b6:53:b7: 38:f2:f0:dd:39:e7:d4:f3:06:43:aa:99:0c:c2:5d:28:58:e1: 8f:68:a7:2c:95:5d:ab:62:5d:71:6e:41:87:50:71:d7:83:23: 52:3a:61:68:cb:dd:aa:18:b9:49:4d:5d:30:97:ef:e8:da:d8: bd:33:32:80:9d:35:9f:ac:90:3e:ce:62:e0:d2:76:22:8e:72: 6d:f2:df:91:e2:62:c7:52:68:20:31:f2:34:f0:49:b5:7f:23: 5b:6b:a5:9a:6d:1d:05:37:7c:71:60:61:d9:12:6f:ac:25:2d: 70:60:b1:ac:21:03:20:ab:5c:0c:60:03:ba:a7:1b:07:bb:20: f4:38:4f:00:56:56:f2:16:3d:e6:59:9c:66:6d:99:0b:29:ce: 01:41:25:aa:5f:ad:c8:33:b4:9f:9b:6a:2a:04:ea:35:e5:d9: 0e:2e:19:4f:48:c0:1f:ef:4d:f2:38:6e:96:55:21:f1:1f:31: f8:24:a5:8b:12:37:32:e2:82:f7:fc:31:85:5f:7f:ea:c6:57: 4b:35:05:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUieZmNDZaXWQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDczNGYzZmItNDNhMS00Y2JhLTkzYjgtYzJlYmNjOWQ1Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT06r+Z1uwEc3mr22dxc3NW5/XCfJCyOVOIl K50C5bxhwMBrIVaHLxS2mfdxV2t9M+tVsLruPSOI+RZkLxHT2I6xmW+idKYox1pG Q4duOKHobOC/CAzw86Bj/g8s+SolIZU9JT0MPhK/JFIwCx9X7/i5GjGw0jMOPrIc 6QFZwLB3UXZF06KLLF8QlbybsSrcmJXH55q7I8VkhEIMWApucohHzUQIKrc340xS A3Rq5c43a1pYdjh7hYwdGYQXDboBCPdelm3QAIdZGu3v4gLcZ8Q0Fl7/NDWXF2yJ FYF8V2MYjEC8zhz54G9Wh7Z4AnDtYGNZ2bFvLiIJu8oeOB7DXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR1MN+dZMH5wHG/97ykAI4z5ksHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMWY1ZmFiMjQtNmFlMy0z NjlhLTg0NWItMmI1ODc5NDg5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV9yF035aklJk3PARUKveqL2IzBcEmANbBkw2UM7KvCcVrmduwKN+Og 3PLdqgOUW0GvWLZTtzjy8N0559TzBkOqmQzCXShY4Y9opyyVXatiXXFuQYdQcdeD I1I6YWjL3aoYuUlNXTCX7+ja2L0zMoCdNZ+skD7OYuDSdiKOcm3y35HiYsdSaCAx 8jTwSbV/I1trpZptHQU3fHFgYdkSb6wlLXBgsawhAyCrXAxgA7qnGwe7IPQ4TwBW VvIWPeZZnGZtmQspzgFBJapfrcgztJ+baioE6jXl2Q4uGU9IwB/vTfI4bpZVIfEf MfgkpYsSNzLigvf8MYVff+rGV0s1BYk= -----END CERTIFICATE-----Generated at Mon Jun 30 19:45:26 2025 by rpki-client