$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa File: a98d5494-4572-385b-afc9-1ffafc221b11.roa (raw, json) Hash identifier: 6bLmDBPmoVKr7LjFNjADjZF/umbkEmKr5oSXrQEiyjo= Subject key identifier: 6F:F8:E4:A8:FE:67:D5:43:2D:B9:33:20:B5:62:12:AC:55:69:E2:45 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584A0D6A829E2B4739D0CE536480 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 396954 IP address blocks: 192.88.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:82:9e:2b:47:39:d0:ce:53:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=fcb8ca2b-97d0-4907-a50b-8d696d8b6c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:11:68:85:f0:b5:09:47:6f:bd:f1:ad:02: 59:77:c1:63:06:b9:81:ab:30:5a:be:14:20:e9:ee: 41:2e:99:75:a1:84:0a:60:09:c3:fb:f9:89:39:b2: 37:83:0a:99:57:b0:e2:cc:eb:e8:18:84:49:60:32: 38:0d:21:25:8d:5d:e0:e3:97:7d:10:15:20:44:a7: 3f:c9:d7:25:4c:a4:3e:c8:82:fa:e6:0c:c0:99:aa: d7:81:78:aa:bd:03:ee:8c:5f:15:9d:7b:d4:03:b6: cc:10:ce:65:e6:2b:df:78:40:7c:46:74:ba:18:80: 3b:fa:54:fb:a1:f3:63:9c:83:38:ec:63:1f:12:82: cc:36:bf:01:e1:6b:7c:01:75:aa:f7:e9:42:9f:a5: 2e:b8:9a:c8:a2:82:1b:f7:20:4f:1d:5a:18:90:90: 93:b2:b2:99:89:8a:88:b4:3d:59:1c:84:23:e2:44: 26:cd:42:d3:d4:84:d9:ab:7d:69:4a:ef:89:4f:1f: f3:ef:b1:1d:3d:ef:9d:df:eb:83:a7:20:bd:04:31: 86:f7:9b:bd:76:d0:92:70:9c:d5:0f:17:2f:49:f0: bd:40:b4:57:c2:d5:4d:89:c9:73:64:21:1d:dc:bf: 0a:00:e9:7a:09:2c:6a:3b:b0:a8:d4:39:30:71:bb: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F8:E4:A8:FE:67:D5:43:2D:B9:33:20:B5:62:12:AC:55:69:E2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/a98d5494-4572-385b-afc9-1ffafc221b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 192.88.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7e:66:3f:7b:f2:e9:0e:7b:87:57:38:da:df:75:ce:80:39: 6c:d7:f5:af:91:cd:43:2e:99:dd:d5:12:ae:7e:8f:c6:c1:3e: 60:ae:c1:03:2d:09:2c:e3:25:ff:d6:85:a3:75:96:7e:af:56: c3:48:76:a7:54:7b:09:c5:83:b6:6e:18:e7:d4:41:d4:30:69: 10:b8:8f:90:e5:ee:f5:6a:7c:92:f7:f0:18:5c:8c:42:27:00: c4:42:07:34:44:71:75:f3:88:53:de:9e:aa:4c:15:d9:21:29: 22:68:35:1e:7d:a1:cb:91:0e:81:5a:77:d6:be:a0:e9:93:1e: dd:43:76:4e:9f:63:95:bd:69:d9:fe:96:e1:89:47:b8:87:0f: 6a:87:21:3a:66:ea:e4:67:b3:4b:03:2c:7e:4d:2a:14:67:9a: 62:fe:9d:b3:01:15:58:5d:03:fd:0b:89:7b:c9:2a:a0:28:c3: 19:00:05:37:73:cc:95:27:cc:14:df:0f:96:81:8d:fb:fa:a9: 97:87:08:cb:57:6e:10:e1:83:97:48:86:0d:37:70:72:74:05: a7:10:c6:b0:c7:f8:4f:5b:45:1c:14:be:ee:a9:12:f3:30:3c: 5b:fb:46:40:62:cb:28:d0:01:db:e2:e4:07:ce:a0:c6:70:a3: 61:ca:ec:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoKeK0c50M5TZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZmNiOGNhMmItOTdkMC00OTA3LWE1MGItOGQ2OTZkOGI2Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8wRaIXwtQlHb73xrQJZd8FjBrmBqzBavhQg 6e5BLpl1oYQKYAnD+/mJObI3gwqZV7DizOvoGIRJYDI4DSEljV3g45d9EBUgRKc/ ydclTKQ+yIL65gzAmarXgXiqvQPujF8VnXvUA7bMEM5l5ivfeEB8RnS6GIA7+lT7 ofNjnIM47GMfEoLMNr8B4Wt8AXWq9+lCn6UuuJrIooIb9yBPHVoYkJCTsrKZiYqI tD1ZHIQj4kQmzULT1ITZq31pSu+JTx/z77EdPe+d3+uDpyC9BDGG95u9dtCScJzV DxcvSfC9QLRXwtVNiclzZCEd3L8KAOl6CSxqO7Co1DkwcbsHgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/45Kj+Z9VDLbkzILViEqxVaeJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvYTk4ZDU0OTQtNDU3Mi0z ODViLWFmYzktMWZmYWZjMjIxYjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ+Zj978ukOe4dXONrfdc6AOWzX9a+RzUMumd3VEq5+j8bBPmCuwQMt CSzjJf/WhaN1ln6vVsNIdqdUewnFg7ZuGOfUQdQwaRC4j5Dl7vVqfJL38BhcjEIn AMRCBzREcXXziFPenqpMFdkhKSJoNR59ocuRDoFad9a+oOmTHt1Ddk6fY5W9adn+ luGJR7iHD2qHITpm6uRns0sDLH5NKhRnmmL+nbMBFVhdA/0LiXvJKqAowxkABTdz zJUnzBTfD5aBjfv6qZeHCMtXbhDhg5dIhg03cHJ0BacQxrDH+E9bRRwUvu6pEvMw PFv7RkBiyyjQAdvi5AfOoMZwo2HK7CE= -----END CERTIFICATE-----Generated at Tue Jul 1 04:07:56 2025 by rpki-client