$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa File: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (raw, json) Hash identifier: mbS1vShYGuL+JMhOdpZ1528O0jSTr1i47g4IL+C68Rg= Subject key identifier: C2:20:7D:F2:3F:13:86:F6:74:20:E6:32:F1:A1:EE:82:C3:31:D9:FC Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584A07D52EB63FA3B5ADD61C2168 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2e:b6:3f:a3:b5:ad:d6:1c:21:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=a4d38d89-0eec-4d2b-b5ac-a22ee120533d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bf:5c:62:fe:bd:eb:94:a4:0b:ff:eb:f1:b0: 3d:d7:14:b8:02:c3:7b:82:b1:eb:d6:c1:e0:f8:12: aa:b3:b4:01:dd:e2:53:4c:b1:36:23:16:15:0a:91: de:9b:ff:bb:3d:c1:00:af:87:00:45:a0:f9:4e:81: 86:14:4e:85:b9:fd:a1:92:78:80:4b:cf:45:bd:25: ac:2d:06:4b:11:63:31:72:5a:87:77:e3:69:f3:f0: ab:6c:01:9b:75:61:fb:3a:b7:46:03:44:d0:57:b2: 88:e4:a6:63:87:96:e6:95:4a:07:a1:63:8b:59:99: 4c:99:08:fc:c1:bf:7c:f7:bd:a0:7c:cf:6f:27:55: f1:76:00:33:c9:26:fd:92:8b:9b:1b:e0:16:47:2c: 9b:a5:48:74:a8:d2:c3:af:9f:3a:64:28:e8:49:6d: 3b:1d:2e:bc:95:39:68:78:ec:f5:0a:c2:7e:b4:8c: cc:ca:b4:43:d6:cd:1c:19:99:5d:1b:cf:0a:d1:e3: b8:8f:d0:c3:54:d1:07:37:9c:2d:9e:16:28:56:f0: b9:7c:94:81:e4:7b:7e:31:f2:9a:2e:6d:a0:a9:5c: e1:00:7f:6d:9c:22:5d:ac:3b:a4:11:c9:9b:d6:11: 40:66:be:47:a2:01:8e:47:96:01:d7:00:df:5b:e3: 12:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:20:7D:F2:3F:13:86:F6:74:20:E6:32:F1:A1:EE:82:C3:31:D9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:fa:c9:d8:c9:62:96:96:52:b8:4a:91:0b:48:38:b7:90:db: d5:95:8d:44:7f:ef:f6:18:b7:23:fb:08:a4:58:6a:d2:fb:77: 33:d3:10:b6:07:65:ff:9b:36:9c:53:dd:99:21:6e:eb:91:c6: 75:c1:1e:cc:e2:37:5f:77:85:8a:2a:5c:ce:86:31:6e:84:e7: 6e:43:7a:a7:72:8f:24:e7:d9:6f:2e:d4:54:8f:66:b6:7f:84: 42:40:cf:1a:8d:20:52:4f:ef:ff:03:4f:85:77:24:2d:e9:65: 1d:18:2d:4b:8e:f2:0b:9a:73:e7:82:27:6c:58:89:7d:de:c1: f0:08:34:39:7b:be:e0:58:21:be:a6:c5:88:4e:4f:0c:df:02: 0a:57:0f:3a:16:d9:1e:b8:c3:df:69:87:18:17:65:2b:9a:60: be:e3:8e:d0:f7:96:56:0f:f7:ff:1c:46:a3:4d:2b:d6:78:14: 18:b7:23:af:9f:61:dd:6f:e0:bb:0b:57:8b:a9:0f:30:39:15: 24:9c:72:e3:d0:87:0a:e2:aa:ef:90:51:8e:d5:8a:c7:48:ee: 36:1b:c6:70:bc:93:c6:69:5e:5d:7f:8d:fb:f2:b3:fb:ad:4c: 1f:e0:8f:20:1a:03:47:9d:63:a7:9e:8f:36:89:eb:64:aa:cc: 90:2a:a1:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1S62P6O1rdYcIWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk YTRkMzhkODktMGVlYy00ZDJiLWI1YWMtYTIyZWUxMjA1MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb9cYv6965SkC//r8bA91xS4AsN7grHr1sHg +BKqs7QB3eJTTLE2IxYVCpHem/+7PcEAr4cARaD5ToGGFE6Fuf2hkniAS89FvSWs LQZLEWMxclqHd+Np8/CrbAGbdWH7OrdGA0TQV7KI5KZjh5bmlUoHoWOLWZlMmQj8 wb98972gfM9vJ1XxdgAzySb9koubG+AWRyybpUh0qNLDr586ZCjoSW07HS68lTlo eOz1CsJ+tIzMyrRD1s0cGZldG88K0eO4j9DDVNEHN5wtnhYoVvC5fJSB5Ht+MfKa Lm2gqVzhAH9tnCJdrDukEcmb1hFAZr5HogGOR5YB1wDfW+MSJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIgffI/E4b2dCDmMvGh7oLDMdn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvNDZmNGY4NGEtZjc0Ny0z Y2FhLWJiZDAtNzA1NzFjYmVkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH6ydjJYpaWUrhKkQtIOLeQ29WVjUR/7/YYtyP7CKRYatL7dzPTELYH Zf+bNpxT3ZkhbuuRxnXBHsziN193hYoqXM6GMW6E525DeqdyjyTn2W8u1FSPZrZ/ hEJAzxqNIFJP7/8DT4V3JC3pZR0YLUuO8guac+eCJ2xYiX3ewfAINDl7vuBYIb6m xYhOTwzfAgpXDzoW2R64w99phxgXZSuaYL7jjtD3llYP9/8cRqNNK9Z4FBi3I6+f Yd1v4LsLV4upDzA5FSSccuPQhwriqu+QUY7VisdI7jYbxnC8k8ZpXl1/jfvys/ut TB/gjyAaA0edY6eejzaJ62SqzJAqoTo= -----END CERTIFICATE-----Generated at Fri Jun 6 19:33:17 2025 by rpki-client