$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa File: 904b080a-8e57-3918-95ab-750f6766dc80.roa (raw, json) Hash identifier: CDP6XKUxnNSJHCA2fJbxyjGTojfljWDKomjdREfhxzM= Subject key identifier: FB:2C:5A:20:6A:8C:BD:3E:48:D5:15:25:E6:77:38:83:69:34:84:E0 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F43285848F216B3562BB031B34418DF80 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa Signing time: Thu 20 Feb 2025 13:18:15 +0000 ROA not before: Thu 20 Feb 2025 13:18:15 +0000 ROA not after: Wed 21 May 2025 12:18:15 +0000 asID: 13649 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:16:b3:56:2b:b0:31:b3:44:18:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Feb 20 13:18:15 2025 GMT Not After : May 21 12:18:15 2025 GMT Subject: CN=c6324253-37fe-4587-b725-0d232e28770e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:be:ca:cd:6a:32:a9:e8:d2:a7:ab:e0:09: b5:0e:f5:b6:5a:c8:7c:a0:16:54:42:cd:6d:f6:38: 52:12:51:fa:01:97:89:78:8a:4c:16:a1:1d:14:63: fe:f3:85:cb:2d:50:bd:44:13:5a:e0:23:ce:c7:59: fc:7f:4f:25:c8:c7:f9:e7:c9:b7:bb:ba:5f:a4:54: e7:70:d9:5f:83:c6:00:1a:17:4f:a4:dd:17:3d:88: f1:d6:75:4f:4b:e0:cb:39:03:63:a5:b1:ac:21:88: 88:a2:e5:c1:ee:b0:4d:f5:c0:95:76:5b:66:f8:dd: 08:7f:03:16:0f:12:bf:1c:85:f8:af:87:b6:17:d1: bb:2a:2a:73:96:6f:ca:15:2d:ef:7d:e4:a2:ec:b2: 4e:9f:74:a0:ff:49:75:c0:86:90:29:50:d9:83:49: 58:94:7c:c3:43:ea:05:e1:23:33:d0:06:ef:fc:31: 02:7b:52:3b:49:d6:3a:c9:c0:00:59:b8:13:c2:a8: 24:b9:8b:a5:3f:ba:db:dc:02:de:9e:d5:b9:b4:06: ad:1e:b2:cb:34:9d:03:29:02:29:b2:46:90:16:1d: 12:8f:09:44:52:e0:6a:b2:f1:23:8a:38:15:18:b9: 80:19:f6:7c:5b:bf:1b:72:9b:1f:04:0f:04:77:68: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2C:5A:20:6A:8C:BD:3E:48:D5:15:25:E6:77:38:83:69:34:84:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:47:12:6c:64:4f:7a:a7:a3:b0:0b:5f:cd:c8:ab:76:99:2d: bf:cf:2d:e1:51:fa:b4:35:8d:20:da:21:9c:4b:1e:c0:9d:83: 2d:01:68:6b:31:42:2d:71:9a:6c:29:76:65:dc:c9:c8:f0:69: 08:e2:40:b3:ba:cf:67:91:c0:c1:8c:0d:3c:fd:3c:08:19:6f: 49:df:f9:6b:cd:b4:dc:60:39:af:8a:cc:cc:9b:cb:13:23:4d: fc:a4:5b:13:99:7f:c9:c9:93:7b:d3:42:fa:a1:05:01:87:1e: 69:bd:f1:72:d2:dd:1a:59:eb:85:6d:1f:f0:6c:11:8b:35:59: 41:b2:97:13:14:67:e1:18:02:8e:57:0a:dc:fc:71:16:6a:e3: bd:c2:0e:2d:3c:57:73:5e:eb:3b:05:5a:c7:86:84:e1:47:2a: 9a:5a:f8:22:22:57:12:ee:f3:ca:17:19:42:6a:f3:ee:6f:99: be:b1:f4:3a:e8:02:a3:99:ce:27:7f:60:65:5c:71:ca:e0:69: a8:4c:8a:c3:a8:f0:03:24:45:35:4c:50:e0:46:e4:42:07:f1: f0:78:4b:26:47:b8:a3:5a:e0:1c:6b:e9:9a:87:f1:45:09:31: 2f:38:75:a9:50:24:53:34:6f:b2:a4:e8:1a:42:c4:57:12:a9: e7:dc:c1:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyFrNWK7Axs0QY34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI1MDIyMDEzMTgxNVoXDTI1MDUyMTEyMTgxNVowLzEtMCsGA1UEAxMk YzYzMjQyNTMtMzdmZS00NTg3LWI3MjUtMGQyMzJlMjg3NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+m+ys1qMqno0qer4Am1DvW2Wsh8oBZUQs1t 9jhSElH6AZeJeIpMFqEdFGP+84XLLVC9RBNa4CPOx1n8f08lyMf558m3u7pfpFTn cNlfg8YAGhdPpN0XPYjx1nVPS+DLOQNjpbGsIYiIouXB7rBN9cCVdltm+N0IfwMW DxK/HIX4r4e2F9G7Kipzlm/KFS3vfeSi7LJOn3Sg/0l1wIaQKVDZg0lYlHzDQ+oF 4SMz0Abv/DECe1I7SdY6ycAAWbgTwqgkuYulP7rb3ALentW5tAatHrLLNJ0DKQIp skaQFh0SjwlEUuBqsvEjijgVGLmAGfZ8W78bcpsfBA8Ed2jV3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPssWiBqjL0+SNUVJeZ3OINpNITgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvOTA0YjA4MGEtOGU1Ny0z OTE4LTk1YWItNzUwZjY3NjZkYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5HEmxkT3qno7ALX83Iq3aZLb/PLeFR+rQ1jSDaIZxLHsCdgy0BaGsx Qi1xmmwpdmXcycjwaQjiQLO6z2eRwMGMDTz9PAgZb0nf+WvNtNxgOa+KzMybyxMj TfykWxOZf8nJk3vTQvqhBQGHHmm98XLS3RpZ64VtH/BsEYs1WUGylxMUZ+EYAo5X Ctz8cRZq473CDi08V3Ne6zsFWseGhOFHKppa+CIiVxLu88oXGUJq8+5vmb6x9Dro AqOZzid/YGVcccrgaahMisOo8AMkRTVMUOBG5EIH8fB4SyZHuKNa4Bxr6ZqH8UUJ MS84dalQJFM0b7Kk6BpCxFcSqefcwR4= -----END CERTIFICATE-----Generated at Thu Mar 13 06:59:37 2025 by rpki-client