$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa File: 3f9d2fae-fd49-33bf-8645-afba9150e12c.roa (raw, json) Hash identifier: TZhhMb4orDHz1CYMc7i816IFF/QHAqSQXn9x7gC+ufI= Subject key identifier: 85:C0:0F:65:7E:09:67:53:D0:1D:15:43:0B:35:ED:8F:D3:D4:6F:92 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F43285849D85F8FDCAF92EBDB3B1D2D40 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 5050 IP address blocks: 192.88.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:8f:dc:af:92:eb:db:3b:1d:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=fbff1eb4-2a6f-4c26-aeb2-01b16d2cdb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:06:8c:9a:e7:f0:6c:6e:35:23:a9:4e:48: 35:a0:53:2c:3c:5e:c3:1e:ba:55:e9:1f:fc:04:14: 2d:48:b5:0b:23:c7:4c:f3:d0:1d:25:08:0d:bc:5c: 0b:65:e1:a2:37:5c:64:f5:41:e5:5c:1b:38:e3:ea: 95:0c:a1:3e:f0:42:2e:2b:d6:04:76:af:b3:bf:ed: 7e:ea:08:d5:00:98:25:34:26:bb:50:c2:30:da:ab: 6a:a3:ad:9b:90:82:9b:f8:c1:cc:0e:1f:d0:f7:79: cc:ea:31:39:31:23:ca:9d:9e:16:52:2f:99:ab:29: 4d:6a:8a:c4:1b:08:6a:97:e8:fb:43:7c:53:ca:43: 9a:e4:f1:b4:ae:39:82:35:09:a1:4b:87:aa:23:e0: a3:d7:a5:2d:5b:1c:a2:00:df:a7:40:45:89:4a:45: f9:50:e8:0b:04:6d:0e:a2:2c:eb:57:00:ac:83:7a: fd:d0:a7:93:1d:14:c6:9b:28:16:90:8a:3a:c1:fc: c2:82:f3:30:16:57:0b:a0:02:d3:75:02:2b:55:d9: d7:b1:cc:42:2f:41:ce:06:65:fc:fb:00:61:7f:c2: 78:b4:da:6b:be:8a:64:1e:51:2e:e7:8e:ec:56:61: 31:1b:f4:e5:fa:99:c2:4f:73:fc:83:ae:bb:88:6d: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C0:0F:65:7E:09:67:53:D0:1D:15:43:0B:35:ED:8F:D3:D4:6F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 192.88.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5c:da:ce:3e:2d:e6:47:f6:e0:e6:35:29:59:60:10:e1:fe: 00:32:3a:c5:9e:6d:56:be:33:85:01:39:40:d5:49:35:6f:28: 4f:7e:b8:e1:df:17:42:b8:37:69:61:74:71:ce:d6:b0:71:cd: 24:25:97:88:f6:b4:44:10:66:bd:02:d4:64:df:f8:9b:51:aa: 81:65:68:8b:2c:68:d6:97:44:a4:4f:c2:e4:be:d8:e1:c5:84: 10:ef:14:ee:d7:da:7b:e2:60:13:2d:20:0c:d5:d6:6d:b5:85: 0c:1c:62:c0:76:47:43:90:0d:93:a6:77:67:a2:fe:cf:63:16: d7:be:a6:a9:2e:4a:5b:ad:e0:02:f1:71:6b:83:67:c7:98:77: 9c:1e:0b:08:41:03:af:10:0d:80:ef:3b:d4:27:af:af:78:cc: aa:6c:70:70:53:e6:df:f9:c1:83:9a:7d:3a:f0:bd:2b:e8:2d: e3:4a:60:ae:37:74:f3:27:47:06:5e:e9:88:4f:5b:da:fe:46: 15:ca:d7:ec:db:51:5a:42:72:58:b2:59:e2:f1:0a:fe:d8:c0: 80:96:94:d7:cc:ac:b0:e2:c3:37:78:27:ac:f1:b1:c5:df:b2: 88:75:db:7e:4d:7d:4a:94:5a:3a:05:0d:36:9a:1e:a3:ca:17: ae:c5:bd:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4/cr5Lr2zsdLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZmJmZjFlYjQtMmE2Zi00YzI2LWFlYjItMDFiMTZkMmNkYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXQGjJrn8GxuNSOpTkg1oFMsPF7DHrpV6R/8 BBQtSLULI8dM89AdJQgNvFwLZeGiN1xk9UHlXBs44+qVDKE+8EIuK9YEdq+zv+1+ 6gjVAJglNCa7UMIw2qtqo62bkIKb+MHMDh/Q93nM6jE5MSPKnZ4WUi+ZqylNaorE Gwhql+j7Q3xTykOa5PG0rjmCNQmhS4eqI+Cj16UtWxyiAN+nQEWJSkX5UOgLBG0O oizrVwCsg3r90KeTHRTGmygWkIo6wfzCgvMwFlcLoALTdQIrVdnXscxCL0HOBmX8 +wBhf8J4tNprvopkHlEu547sVmExG/Tl+pnCT3P8g667iG1SPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXAD2V+CWdT0B0VQws17Y/T1G+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvM2Y5ZDJmYWUtZmQ0OS0z M2JmLTg2NDUtYWZiYTkxNTBlMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtc2s4+LeZH9uDmNSlZYBDh/gAyOsWebVa+M4UBOUDVSTVvKE9+uOHf F0K4N2lhdHHO1rBxzSQll4j2tEQQZr0C1GTf+JtRqoFlaIssaNaXRKRPwuS+2OHF hBDvFO7X2nviYBMtIAzV1m21hQwcYsB2R0OQDZOmd2ei/s9jFte+pqkuSlut4ALx cWuDZ8eYd5weCwhBA68QDYDvO9Qnr694zKpscHBT5t/5wYOafTrwvSvoLeNKYK43 dPMnRwZe6YhPW9r+RhXK1+zbUVpCcliyWeLxCv7YwICWlNfMrLDiwzd4J6zxscXf soh1235NfUqUWjoFDTaaHqPKF67FvTM= -----END CERTIFICATE-----Generated at Sun Jun 8 01:42:46 2025 by rpki-client