$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa File: 904b080a-8e57-3918-95ab-750f6766dc80.roa (raw, json) Hash identifier: 7uoOSdYyj357kEr5t858VdcKBRJeTqR3V04sGqkVj/U= Subject key identifier: 2A:6D:A2:6F:A4:9F:A1:17:55:34:07:EF:AB:47:2C:B6:BD:66:E5:E4 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F43285849D164FDBCAF0D1989A9D0EE00 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 13649 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fd:bc:af:0d:19:89:a9:d0:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=cb848159-34dd-492f-af1a-a6615b76c2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:73:ac:1d:5a:ea:14:97:2f:d3:fc:a8:8f:2b: bb:32:3f:bd:3d:36:2c:07:fa:73:66:d4:d7:7b:7b: fd:71:4d:08:cc:22:52:cb:43:cb:d1:0e:f0:26:cf: b8:1e:5b:28:2e:04:ff:c6:d0:e1:e6:b2:08:05:c4: 36:c4:80:a9:ce:b6:2a:7e:86:ac:6e:b1:7e:e5:ba: 5c:6a:a8:b5:14:fb:9f:1c:47:56:e0:62:39:c4:04: c1:56:d0:1a:24:42:1f:5c:ce:56:a0:58:8a:f9:70: 82:d8:0d:4d:f3:36:10:64:37:8b:25:6f:46:38:fc: 15:da:d2:a1:fb:1d:24:4d:fe:a9:e7:3d:78:f0:f3: bc:b9:3a:43:fa:c9:6d:7a:cc:56:9e:3d:eb:f7:49: c3:23:dc:9d:70:d4:9b:d3:c9:98:9a:74:06:6d:a7: d6:ed:6a:cb:2b:f6:e1:eb:ce:b4:20:ae:6e:3b:5d: 4c:76:8a:ad:14:80:66:5b:f9:46:cb:5f:17:a6:e4: e6:95:87:d0:30:ee:53:7e:60:24:f2:b3:c0:66:04: f8:85:09:f7:89:69:57:ba:39:ff:cc:1a:99:78:28: 4b:c2:f9:c0:26:f3:26:cb:de:19:15:6a:96:cd:4d: b7:ac:32:d1:7a:9e:ea:fe:df:b8:d4:8c:93:c0:5d: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6D:A2:6F:A4:9F:A1:17:55:34:07:EF:AB:47:2C:B6:BD:66:E5:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fd:c9:ca:b7:fd:4a:d0:9e:6e:40:88:94:5c:0c:f9:16:21: 4c:6e:fc:93:a1:03:40:f0:be:b7:e2:2d:26:90:ef:03:e1:aa: 4a:24:0b:4e:94:bd:0b:5b:68:68:fa:0a:e5:b7:c4:91:0a:6a: fa:9a:46:d9:11:9b:4a:43:bc:60:19:6f:f7:38:1a:24:fb:1c: 5e:47:09:1f:b5:37:2f:2c:93:1e:16:9f:f3:92:fd:87:6f:84: 15:88:1c:1c:bc:90:06:97:50:e2:0b:16:8d:03:25:82:d3:fc: 50:35:b8:ea:b7:1b:44:68:1b:72:ff:36:d5:60:44:25:f4:92: 37:d2:bc:29:79:a8:27:2c:20:d7:5a:c8:06:8c:d6:22:fa:e1: a8:35:61:98:bd:bf:18:20:b1:ed:97:64:f2:9e:fe:27:5f:2d: 8d:3b:9f:d2:a1:b2:f5:df:53:e1:51:29:89:3f:4f:b9:61:21: ed:15:82:5c:dc:d2:22:b0:98:4e:cd:e7:99:c4:e2:9e:80:da: e6:3d:11:ec:46:bc:74:8b:7f:7d:0d:86:a0:98:1f:42:6a:42: 40:4b:10:4f:eb:bb:3c:0d:74:e4:c9:53:d6:ed:70:dc:92:57: 4a:eb:03:04:ed:b5:d9:f0:3b:a8:b9:11:93:87:88:8c:49:39: 9a:dd:63:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZP28rw0ZianQ7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk Y2I4NDgxNTktMzRkZC00OTJmLWFmMWEtYTY2MTViNzZjMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXOsHVrqFJcv0/yojyu7Mj+9PTYsB/pzZtTX e3v9cU0IzCJSy0PL0Q7wJs+4HlsoLgT/xtDh5rIIBcQ2xICpzrYqfoasbrF+5bpc aqi1FPufHEdW4GI5xATBVtAaJEIfXM5WoFiK+XCC2A1N8zYQZDeLJW9GOPwV2tKh +x0kTf6p5z148PO8uTpD+sltesxWnj3r90nDI9ydcNSb08mYmnQGbafW7WrLK/bh 6860IK5uO11MdoqtFIBmW/lGy18XpuTmlYfQMO5TfmAk8rPAZgT4hQn3iWlXujn/ zBqZeChLwvnAJvMmy94ZFWqWzU23rDLRep7q/t+41IyTwF0OdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCptom+kn6EXVTQH76tHLLa9ZuXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvOTA0YjA4MGEtOGU1Ny0z OTE4LTk1YWItNzUwZjY3NjZkYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn9ycq3/UrQnm5AiJRcDPkWIUxu/JOhA0DwvrfiLSaQ7wPhqkokC06U vQtbaGj6CuW3xJEKavqaRtkRm0pDvGAZb/c4GiT7HF5HCR+1Ny8skx4Wn/OS/Ydv hBWIHBy8kAaXUOILFo0DJYLT/FA1uOq3G0RoG3L/NtVgRCX0kjfSvCl5qCcsINda yAaM1iL64ag1YZi9vxggse2XZPKe/idfLY07n9KhsvXfU+FRKYk/T7lhIe0Vglzc 0iKwmE7N55nE4p6A2uY9EexGvHSLf30NhqCYH0JqQkBLEE/ruzwNdOTJU9btcNyS V0rrAwTttdnwO6i5EZOHiIxJOZrdYzo= -----END CERTIFICATE-----Generated at Sun May 11 18:55:39 2025 by rpki-client