$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa File: 88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa (raw, json) Hash identifier: 749gYJlK/ZKMrb/eLN+zrFYaKtnW9hIbo2fpTcWymHs= Subject key identifier: 5B:19:A9:ED:2E:DC:30:70:12:22:B9:6F:F0:FE:9F:8B:2B:5D:1A:7D Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F43285849FF62638C1ECB3A49CE602900 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa Signing time: Wed 28 May 2025 00:23:12 +0000 ROA not before: Wed 28 May 2025 00:23:12 +0000 ROA not after: Tue 26 Aug 2025 00:23:12 +0000 asID: 16509 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:62:63:8c:1e:cb:3a:49:ce:60:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: May 28 00:23:12 2025 GMT Not After : Aug 26 00:23:12 2025 GMT Subject: CN=e2d1e707-8a8b-4880-9e6e-7bddab8bc2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:a8:9b:8b:52:09:60:91:61:06:25:37:ce: dd:cf:44:0b:aa:4c:31:fe:4f:9b:55:71:dd:cf:84: b6:1e:ca:92:61:ec:5e:f0:b6:44:ff:79:99:24:e7: 85:7e:39:d9:08:cd:12:4c:5d:f1:d4:9f:73:98:75: ee:30:00:d7:fc:78:44:a8:01:4c:15:d1:aa:c5:27: 4f:06:d1:8a:dd:ef:5e:f9:9c:48:74:a6:99:b6:b6: 1d:67:6e:f9:01:a6:28:52:26:0b:c2:d1:7a:c0:50: 6d:6a:64:9f:6d:02:1c:ca:8b:65:22:32:0d:8a:3a: 17:b7:92:80:d2:76:92:cb:53:b0:4d:4d:3a:9f:30: 2c:7c:32:d1:0d:fa:fd:78:e1:f3:08:98:dd:07:6a: 3c:98:75:98:c0:6a:ad:5c:8e:9f:b7:e0:44:85:14: 2b:9e:f3:e7:fe:fb:c3:f9:f4:20:e9:13:d1:89:27: 38:fc:6a:7b:0d:9d:f0:ed:2a:67:a3:cb:99:23:ca: 8a:6b:c2:1e:26:e0:0e:40:bf:c6:e5:4a:ec:ef:7f: 4d:99:d3:a2:09:b8:09:d2:16:49:3d:70:6e:dc:22: ad:fe:a3:8f:0a:a3:f9:64:3b:e7:2a:8b:57:b1:80: 6b:56:66:8b:1c:91:59:21:b5:fa:27:13:36:40:fd: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:A9:ED:2E:DC:30:70:12:22:B9:6F:F0:FE:9F:8B:2B:5D:1A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e8:6d:53:be:90:f7:74:bb:9c:31:a2:64:7b:19:34:51:23: 64:b2:5b:c5:a2:91:66:ab:28:5f:d3:ef:16:ff:af:0d:0b:27: 95:15:e2:bb:cd:58:a2:89:22:8f:89:01:ad:f2:72:b2:d8:27: 97:61:b5:2b:51:07:5a:a5:16:d6:7d:ef:a0:05:20:aa:3e:91: 09:a3:fd:df:40:2a:e4:dc:6c:ff:49:d8:93:72:14:ec:0f:05: c6:6b:8f:d3:37:06:25:f4:68:43:38:e2:f0:8f:f4:9b:30:0d: 70:9f:77:29:36:11:31:e6:2a:ba:73:2d:ce:b3:04:5e:1f:72: 2c:c6:32:91:40:ca:f4:8a:3a:9d:c2:83:c7:90:6f:b5:e2:23: 8a:b7:16:77:61:8c:65:72:9c:3e:4e:44:79:2f:89:83:1f:d6: dc:14:76:eb:33:1f:ba:11:88:27:a7:a4:ea:f1:c5:86:18:fd: ab:9f:8d:8f:71:64:b3:a9:c6:28:b5:53:87:8f:75:d1:0e:04: ff:be:ed:e3:6a:c5:c7:08:1b:2e:a7:b9:2e:a0:a4:46:89:89: c0:ae:4c:e8:38:3c:b8:5f:20:e9:03:33:75:f0:1c:f1:73:46: 96:d1:ec:c2:55:80:f0:77:46:91:17:51:56:88:81:ab:8e:66: 38:ef:9f:e1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEn/YmOMHss6Sc5gKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI1MDUyODAwMjMxMloXDTI1MDgyNjAwMjMxMlowLzEtMCsGA1UEAxMk ZTJkMWU3MDctOGE4Yi00ODgwLTllNmUtN2JkZGFiOGJjMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzOom4tSCWCRYQYlN87dz0QLqkwx/k+bVXHd z4S2HsqSYexe8LZE/3mZJOeFfjnZCM0STF3x1J9zmHXuMADX/HhEqAFMFdGqxSdP BtGK3e9e+ZxIdKaZtrYdZ275AaYoUiYLwtF6wFBtamSfbQIcyotlIjINijoXt5KA 0naSy1OwTU06nzAsfDLRDfr9eOHzCJjdB2o8mHWYwGqtXI6ft+BEhRQrnvPn/vvD +fQg6RPRiSc4/Gp7DZ3w7Spno8uZI8qKa8IeJuAOQL/G5Urs739NmdOiCbgJ0hZJ PXBu3CKt/qOPCqP5ZDvnKotXsYBrVmaLHJFZIbX6JxM2QP2SrQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFsZqe0u3DBwEiK5b/D+n4srXRp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvODhjNWE3YzAtZWM5Yy0z N2E4LTllZTQtYWY0NTBhYTRkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFfobVO+kPd0u5wxomR7GTRRI2SyW8WikWarKF/T7xb/rw0L J5UV4rvNWKKJIo+JAa3ycrLYJ5dhtStRB1qlFtZ976AFIKo+kQmj/d9AKuTcbP9J 2JNyFOwPBcZrj9M3BiX0aEM44vCP9JswDXCfdyk2ETHmKrpzLc6zBF4fcizGMpFA yvSKOp3Cg8eQb7XiI4q3FndhjGVynD5ORHkviYMf1twUduszH7oRiCenpOrxxYYY /aufjY9xZLOpxii1U4ePddEOBP++7eNqxccIGy6nuS6gpEaJicCuTOg4PLhfIOkD M3XwHPFzRpbR7MJVgPB3RpEXUVaIgauOZjjvn+E= -----END CERTIFICATE-----Generated at Fri Jun 6 18:27:37 2025 by rpki-client