$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa File: 12875a52-35c3-3708-ba26-fcd580857baa.roa (raw, json) Hash identifier: Z6UDRnzOwBgHDZQeqcNtl7teKfMMqtPQxZNMjZ2AtaM= Subject key identifier: AE:36:89:3B:3B:82:F6:FB:31:FB:C1:17:19:09:0B:1C:6A:4F:F7:A9 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACFA206A04D2B18023C80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 14618 IP address blocks: 208.85.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cf:a2:06:a0:4d:2b:18:02:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=dae82437-7be7-4109-8f5a-703ee0152279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:a0:ae:aa:29:a4:4d:47:78:e7:42:1d:cc: 5c:c1:a8:00:60:c1:94:e5:a9:96:e5:e5:ff:d1:a3: 85:da:3a:7b:4a:bb:7a:45:f6:4c:cd:57:9a:31:e9: ec:47:b3:88:96:0f:95:5a:a8:b6:95:0b:75:9e:7f: 04:f8:6d:7c:24:f2:95:83:d9:be:16:b4:7c:d8:25: b8:11:96:e6:3f:8e:ba:4b:61:d9:8b:42:de:a9:33: 1d:0d:ed:9c:5e:ac:25:9f:0d:1a:a4:0f:c9:c9:15: 1e:90:f8:9b:1c:73:da:27:34:43:bf:81:f0:6e:a0: 12:64:bd:d8:36:1d:45:7b:f9:1c:40:bd:3d:a8:21: bd:a7:b8:8a:2a:28:b3:59:2f:ed:66:f2:a7:eb:c6: 08:0f:52:a9:3e:68:62:35:8a:16:59:a6:26:21:9e: cb:b2:2d:46:c6:9d:f4:27:cd:97:a2:37:f4:21:5f: 7d:1c:14:17:7e:b4:d7:0a:05:76:89:a6:a1:d2:e0: f5:a9:cf:a4:06:56:8f:9c:57:ba:2f:a7:91:e1:55: 2d:40:22:3e:f6:47:b7:b4:c7:af:b1:f8:62:a4:ef: 3c:12:cd:d1:2a:e7:9b:c6:6c:0b:6e:ae:6a:f8:77: ff:c0:19:e6:48:40:73:79:c2:db:89:68:8a:1e:94: ed:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:36:89:3B:3B:82:F6:FB:31:FB:C1:17:19:09:0B:1C:6A:4F:F7:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/12875a52-35c3-3708-ba26-fcd580857baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c6:2f:21:d2:3c:cd:99:7f:61:cc:65:e8:5c:52:46:4a:e0: c7:cb:1b:c6:b5:01:06:e4:2b:45:8f:70:bc:c5:a9:c4:c0:6e: 3c:cd:78:5b:b1:26:ba:ac:bb:1f:ed:48:20:3d:07:d5:d1:79: 96:5b:74:c3:29:8f:bf:8f:2b:ad:da:21:8a:a1:c2:a8:99:d9: f4:2d:5b:fc:a1:6d:22:7c:fb:27:a5:26:25:60:a4:a3:fb:56: cc:10:ce:62:09:3f:77:ea:ee:64:89:e9:8d:bc:d3:1b:ca:55: 65:07:65:a3:6b:bf:7b:6f:51:df:02:1d:d7:d4:3c:c5:31:02: 62:d3:ce:e9:61:3b:e2:9e:8b:ea:c8:8d:e1:cb:63:2e:69:9d: 88:ed:af:29:58:b2:0a:3c:44:29:39:96:83:b7:fb:5f:66:7a: f8:9b:81:e0:f8:24:d9:7a:84:29:c3:e3:98:b7:65:cb:c1:f6: d1:73:21:ac:20:3e:bb:87:94:8f:b3:5b:9b:cf:27:d1:34:54: 26:04:d3:ea:f6:c7:e8:5f:1f:39:66:30:33:59:2c:32:2d:5d: d0:1d:f1:28:42:fc:38:a0:a7:fd:72:18:18:ab:01:21:71:b2: b8:35:79:c1:d3:ae:7b:1f:9b:b6:ec:d4:3e:59:72:31:7b:32: 47:ad:4a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss+iBqBNKxgCPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZGFlODI0MzctN2JlNy00MTA5LThmNWEtNzAzZWUwMTUyMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFSgrqoppE1HeOdCHcxcwagAYMGU5amW5eX/ 0aOF2jp7Srt6RfZMzVeaMensR7OIlg+VWqi2lQt1nn8E+G18JPKVg9m+FrR82CW4 EZbmP466S2HZi0LeqTMdDe2cXqwlnw0apA/JyRUekPibHHPaJzRDv4HwbqASZL3Y Nh1Fe/kcQL09qCG9p7iKKiizWS/tZvKn68YID1KpPmhiNYoWWaYmIZ7Lsi1Gxp30 J82Xojf0IV99HBQXfrTXCgV2iaah0uD1qc+kBlaPnFe6L6eR4VUtQCI+9ke3tMev sfhipO88Es3RKuebxmwLbq5q+Hf/wBnmSEBzecLbiWiKHpTtUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK42iTs7gvb7MfvBFxkJCxxqT/epMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMTI4NzVhNTItMzVjMy0z NzA4LWJhMjYtZmNkNTgwODU3YmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnGLyHSPM2Zf2HMZehcUkZK4MfLG8a1AQbkK0WPcLzFqcTAbjzNeFux Jrqsux/tSCA9B9XReZZbdMMpj7+PK63aIYqhwqiZ2fQtW/yhbSJ8+yelJiVgpKP7 VswQzmIJP3fq7mSJ6Y280xvKVWUHZaNrv3tvUd8CHdfUPMUxAmLTzulhO+Kei+rI jeHLYy5pnYjtrylYsgo8RCk5loO3+19mevibgeD4JNl6hCnD45i3ZcvB9tFzIawg PruHlI+zW5vPJ9E0VCYE0+r2x+hfHzlmMDNZLDItXdAd8ShC/Digp/1yGBirASFx srg1ecHTrnsfm7bs1D5ZcjF7MketSkQ= -----END CERTIFICATE-----Generated at Tue Jul 1 08:15:07 2025 by rpki-client