$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/28120986-1d6b-356f-ab6a-a8493a742f70.roa File: 28120986-1d6b-356f-ab6a-a8493a742f70.roa (raw, json) Hash identifier: NkwUcmj7C2b+ptFr3tJmjRbQ8zXInGT1k/FDW9PyMik= Subject key identifier: 99:AE:C2:FD:D6:5E:1C:F5:1D:28:12:D6:74:EF:3A:A2:93:43:56:1C Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACA5A925D0574CAF3D7C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/28120986-1d6b-356f-ab6a-a8493a742f70.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 19795 IP address blocks: 208.85.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:ca:5a:92:5d:05:74:ca:f3:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=a32bf938-6d14-4065-a75e-e2ae6d52bc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d4:f1:03:8c:97:32:19:29:5d:d9:3c:7a:2d: 27:44:1c:4f:1c:84:00:8c:18:67:55:51:02:60:42: fb:fd:e7:a0:64:b1:e8:66:95:1f:7f:96:f9:68:b6: 61:4b:1c:d3:a7:40:d3:c2:15:0e:c4:85:e3:a0:67: 2a:70:41:36:3f:e1:a9:ff:56:75:72:76:ec:cf:bd: c8:66:75:c9:0f:96:dc:1a:76:2b:af:14:92:b8:a3: 44:ce:57:de:b0:b4:f3:9e:05:e7:0b:f7:5e:d6:0e: b4:84:70:e5:73:89:0c:4d:05:0e:d2:5a:68:6c:bb: e8:91:bf:4e:b6:95:aa:b8:1a:2f:93:b5:ff:45:ee: a7:22:ec:4e:da:ca:c3:97:e3:35:8f:b7:64:5b:e8: 1e:58:a7:ab:0c:66:ad:32:bc:79:60:c2:6c:ca:a2: 93:32:f4:36:3d:ae:f3:53:65:7f:81:7e:5b:69:92: 64:9e:9a:0c:6f:80:d3:01:07:34:84:4d:b0:95:53: 67:fa:08:6a:71:6d:c3:8f:b6:cb:c8:ee:82:d4:ea: 54:81:72:85:e1:76:80:12:5d:d9:f3:36:27:64:b8: 10:4d:e0:92:4d:85:a2:80:c7:93:51:8a:68:64:4e: 27:a6:e3:a0:a4:30:86:92:50:25:da:0e:ab:97:15: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AE:C2:FD:D6:5E:1C:F5:1D:28:12:D6:74:EF:3A:A2:93:43:56:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/28120986-1d6b-356f-ab6a-a8493a742f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ba:e7:ed:1f:08:19:87:2d:9a:82:a0:21:f0:6f:81:e8:29: 89:47:d9:e7:ab:e2:63:40:13:c2:de:64:d0:24:6e:ac:d9:a3: 6e:07:58:22:48:db:08:76:a1:16:01:cc:6d:7a:22:af:ff:66: f4:b2:49:7b:f6:1e:8a:18:c4:d6:47:60:0e:1a:15:41:74:c5: 38:5d:1d:e3:3b:86:fe:f2:41:83:ba:4b:76:8c:cf:b5:56:dc: 2a:b1:09:4d:4c:7b:95:60:9f:6e:28:ad:c6:b9:cd:ac:3c:c4: d6:08:85:ef:0f:89:24:2c:77:94:64:32:a4:28:dc:4b:c8:17: 6a:c9:bc:55:3d:e4:5b:57:e3:d7:32:b9:26:e4:77:1e:0f:0b: e7:72:db:ed:e3:6b:5a:39:94:52:5f:66:51:d8:8d:a6:73:48: 04:32:b3:ee:9a:b1:57:2d:b0:f2:e8:66:f5:e6:de:a0:ac:37: 6f:1c:05:cd:c0:67:da:e3:77:a6:1e:9e:23:d5:91:d0:63:79: 7e:e3:a6:11:f8:2a:43:2b:81:75:cd:e3:66:2c:d3:0f:c3:9c: 36:d6:c0:0c:69:fc:87:82:84:67:53:d8:ab:e5:87:0b:b3:8c: fd:b2:91:0a:eb:d9:3d:e8:b4:32:b4:a5:de:24:1a:d3:5f:d8: 33:be:13:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Sspakl0FdMrz18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YTMyYmY5MzgtNmQxNC00MDY1LWE3NWUtZTJhZTZkNTJiYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9TxA4yXMhkpXdk8ei0nRBxPHIQAjBhnVVEC YEL7/eegZLHoZpUff5b5aLZhSxzTp0DTwhUOxIXjoGcqcEE2P+Gp/1Z1cnbsz73I ZnXJD5bcGnYrrxSSuKNEzlfesLTzngXnC/de1g60hHDlc4kMTQUO0lpobLvokb9O tpWquBovk7X/Re6nIuxO2srDl+M1j7dkW+geWKerDGatMrx5YMJsyqKTMvQ2Pa7z U2V/gX5baZJknpoMb4DTAQc0hE2wlVNn+ghqcW3Dj7bLyO6C1OpUgXKF4XaAEl3Z 8zYnZLgQTeCSTYWigMeTUYpoZE4npuOgpDCGklAl2g6rlxVpAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmuwv3WXhz1HSgS1nTvOqKTQ1YcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMjgxMjA5ODYtMWQ2Yi0z NTZmLWFiNmEtYTg0OTNhNzQyZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu65+0fCBmHLZqCoCHwb4HoKYlH2eer4mNAE8LeZNAkbqzZo24HWCJI 2wh2oRYBzG16Iq//ZvSySXv2HooYxNZHYA4aFUF0xThdHeM7hv7yQYO6S3aMz7VW 3CqxCU1Me5Vgn24orca5zaw8xNYIhe8PiSQsd5RkMqQo3EvIF2rJvFU95FtX49cy uSbkdx4PC+dy2+3ja1o5lFJfZlHYjaZzSAQys+6asVctsPLoZvXm3qCsN28cBc3A Z9rjd6YeniPVkdBjeX7jphH4KkMrgXXN42Ys0w/DnDbWwAxp/IeChGdT2Kvlhwuz jP2ykQrr2T3otDK0pd4kGtNf2DO+E1Q= -----END CERTIFICATE-----Generated at Sun Jun 29 16:24:10 2025 by rpki-client