$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa File: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (raw, json) Hash identifier: HeWKkvmfX9hA/6DNZuzk/CytVWhIjKrU2YjefcffPMw= Subject key identifier: A4:D2:5A:7B:0D:09:B9:3D:F4:46:E2:51:64:5F:DF:95:8E:B4:0C:7B Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F43285849DB2A2DF7D2D89D6EA93D5AAC Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa Signing time: Thu 15 May 2025 01:00:47 +0000 ROA not before: Thu 15 May 2025 01:00:47 +0000 ROA not after: Wed 13 Aug 2025 01:00:47 +0000 asID: 16437 IP address blocks: 208.88.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:2a:2d:f7:d2:d8:9d:6e:a9:3d:5a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: May 15 01:00:47 2025 GMT Not After : Aug 13 01:00:47 2025 GMT Subject: CN=23e73b5c-289f-48a9-b7ca-d062dcc17da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7f:68:70:b1:16:66:e3:0a:89:be:97:f7:54: 18:20:4a:6a:74:77:f6:cd:65:5e:c0:e8:7f:7a:3d: f8:9c:28:78:e2:1b:0d:9a:69:e2:ad:65:3a:8a:55: 6f:2c:34:76:57:a2:36:40:e9:ca:a5:7d:54:34:cf: d4:50:3d:43:89:1f:8c:d5:6e:12:52:2a:a7:20:98: fd:a1:67:3a:f0:72:d7:24:ee:23:58:ec:48:d7:6f: 45:4d:c3:c9:39:3b:c2:ff:41:2e:46:e8:81:53:95: 3e:62:32:63:34:6a:b2:8e:cd:47:60:92:1d:08:9b: cb:3f:88:0d:c1:32:96:82:67:59:9f:43:d5:ad:65: c0:c2:92:6c:89:7f:17:e5:93:3a:25:25:65:e5:e1: 48:0d:1a:2a:ce:44:99:93:f8:f6:4b:fc:58:e5:0c: 55:85:86:2b:83:bc:b4:14:03:72:11:5f:8a:45:df: 29:fe:64:07:da:46:e0:b3:19:4b:14:66:54:7c:9f: 8e:0a:82:43:a1:f8:d1:25:66:e5:97:54:87:1f:40: b1:db:48:8b:32:fe:b6:0a:a5:db:ce:9b:c1:eb:5d: d9:40:c2:55:5a:f7:4c:87:78:17:1b:13:e9:29:7c: 7f:54:2d:28:99:41:1c:b3:eb:1f:7e:c5:29:29:28: 19:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D2:5A:7B:0D:09:B9:3D:F4:46:E2:51:64:5F:DF:95:8E:B4:0C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fe:17:d5:34:ab:19:48:99:e6:65:e1:88:8c:fe:ed:7a:85: ea:e7:e9:62:e0:fe:4c:94:56:47:f5:2f:17:98:a6:c4:50:17: f8:4e:2a:38:ec:45:9e:0b:48:00:80:2c:aa:46:4d:0b:fb:09: 0e:a2:6e:fe:bd:f7:fa:3f:dd:6e:81:7a:8f:a3:51:d3:90:7e: 65:d5:2b:d5:70:6b:e7:99:23:fc:56:1b:ff:1f:79:32:3b:97: 61:10:4a:3d:a2:1c:d9:15:41:2a:0d:83:f9:1c:a1:c6:dd:66: 44:f0:54:23:a4:65:d8:7e:ed:05:5e:99:3c:46:31:84:2a:be: d6:02:40:05:79:67:57:30:08:ad:99:97:dd:fd:59:bb:18:ca: c0:6a:af:8b:65:ed:8d:c5:64:43:e0:e1:40:02:ed:54:92:49: fe:29:e9:6e:14:84:5c:9f:cd:e4:ea:1e:a3:be:4b:9b:0f:2e: 67:2f:80:30:6d:40:87:6b:88:f5:8e:b5:0d:ff:f0:33:80:cd: a6:a6:8f:b6:77:fc:e4:27:9a:2b:70:a3:bd:fc:86:d1:a1:56: ba:fb:19:57:05:5c:56:ab:75:f8:49:2b:82:fe:07:1f:ca:d0: 92:0e:2c:db:44:30:2d:18:fb:e8:ec:06:c3:6e:72:7a:59:d3: 44:4d:2c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnbKi330tidbqk9WqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk MjNlNzNiNWMtMjg5Zi00OGE5LWI3Y2EtZDA2MmRjYzE3ZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn9ocLEWZuMKib6X91QYIEpqdHf2zWVewOh/ ej34nCh44hsNmmnirWU6ilVvLDR2V6I2QOnKpX1UNM/UUD1DiR+M1W4SUiqnIJj9 oWc68HLXJO4jWOxI129FTcPJOTvC/0EuRuiBU5U+YjJjNGqyjs1HYJIdCJvLP4gN wTKWgmdZn0PVrWXAwpJsiX8X5ZM6JSVl5eFIDRoqzkSZk/j2S/xY5QxVhYYrg7y0 FANyEV+KRd8p/mQH2kbgsxlLFGZUfJ+OCoJDofjRJWbll1SHH0Cx20iLMv62CqXb zpvB613ZQMJVWvdMh3gXGxPpKXx/VC0omUEcs+sffsUpKSgZewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTSWnsNCbk99EbiUWRf35WOtAx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNGE3ZTFkYmQtNDcwNC0z NDJiLWI3NDEtNTZiMGM4ZTc1OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT+F9U0qxlImeZl4YiM/u16hern6WLg/kyUVkf1LxeYpsRQF/hOKjjs RZ4LSACALKpGTQv7CQ6ibv699/o/3W6Beo+jUdOQfmXVK9Vwa+eZI/xWG/8feTI7 l2EQSj2iHNkVQSoNg/kcocbdZkTwVCOkZdh+7QVemTxGMYQqvtYCQAV5Z1cwCK2Z l939WbsYysBqr4tl7Y3FZEPg4UAC7VSSSf4p6W4UhFyfzeTqHqO+S5sPLmcvgDBt QIdriPWOtQ3/8DOAzaamj7Z3/OQnmitwo738htGhVrr7GVcFXFardfhJK4L+Bx/K 0JIOLNtEMC0Y++jsBsNucnpZ00RNLFE= -----END CERTIFICATE-----Generated at Fri Jun 6 16:11:51 2025 by rpki-client