$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa File: 3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa (raw, json) Hash identifier: 2jHMyQw1WV7FqJatLXX97DID2aF8jpTfIhiLA2l/NH0= Subject key identifier: 18:FB:34:8A:F5:AC:3F:43:F1:0A:88:02:F0:0E:99:60:EC:E9:6D:44 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A3A1579C19CE356F574081580 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 208.85.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:79:c1:9c:e3:56:f5:74:08:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=8169817f-0ae0-4d89-adef-337b9088bb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:04:23:3b:f1:1d:d2:4d:17:a6:ba:d0:eb: cc:22:cc:86:25:02:cb:e1:f7:c5:35:08:7e:b5:ab: 11:bd:ae:b1:ff:7f:03:f1:89:ac:3e:8d:76:ab:df: eb:08:b5:91:28:73:32:28:e5:24:60:e9:0b:72:8d: 71:d7:bf:15:2c:4e:d3:71:1d:0a:34:5f:eb:06:73: f5:9e:86:e8:cc:aa:c5:fb:ff:fb:73:85:07:78:64: f6:6e:10:8f:ae:96:bb:b4:8f:97:8c:a4:53:ab:46: 1e:fe:f6:f4:fe:69:e5:04:08:9f:93:3f:87:0b:98: 65:c1:5c:b2:cf:3d:90:35:94:91:3b:c7:2e:29:9b: 5f:f1:af:2b:89:f3:47:9a:b8:e0:ed:17:6e:15:c5: 51:f5:c5:1a:c7:75:df:a6:41:e6:7f:f8:d7:78:19: d4:3f:9b:a2:cb:71:61:23:f1:1a:92:8c:66:f2:3f: 9b:e8:ef:a4:80:43:3a:80:71:d2:c9:f6:fa:b8:03: 7a:e8:14:1d:7a:d1:52:ab:97:c4:49:5b:ee:d6:31: d9:3b:0a:2f:ea:21:19:46:da:6f:89:45:05:08:46: 36:a1:d7:ca:93:95:60:18:f9:c1:bb:36:35:30:ad: 46:74:83:8e:8a:ed:2e:56:68:c5:94:ba:65:46:ba: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FB:34:8A:F5:AC:3F:43:F1:0A:88:02:F0:0E:99:60:EC:E9:6D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b3:99:99:ce:5d:8a:df:15:93:8a:42:e2:64:7e:66:f7:67: 58:ba:50:d0:ec:dc:e4:50:78:6e:52:b0:d6:3a:2c:1d:4a:23: 57:65:35:cb:f7:6a:23:68:42:b9:55:0d:dc:c4:19:51:90:c5: 0f:e7:a3:a9:0f:79:92:1d:df:e9:19:96:aa:09:01:b0:ef:87: 9d:58:64:e7:52:03:55:8d:a4:3d:19:6a:85:94:63:72:80:e5: 6d:c2:cc:2c:45:d2:d9:5a:3e:53:d8:0b:50:68:6f:02:cb:3f: 8b:51:a6:bc:a0:e0:25:b8:5e:09:a8:db:6e:5e:1b:a8:54:bf: dd:c9:42:7f:93:4b:0d:97:c7:b8:d7:9d:8b:69:ed:7e:3f:1d: ee:ca:e1:e2:bb:4e:8e:d1:d4:93:e5:38:13:1c:e1:5b:7c:9f: 6b:05:53:5e:0c:36:23:9f:b1:7e:01:47:d1:f7:1c:bf:de:72: 97:ca:3f:1e:fe:68:4b:19:58:62:88:c0:28:45:04:6d:93:25: e5:ac:1b:d6:92:74:e5:3f:cc:d9:49:cf:c4:ba:28:64:8f:fc: e9:cc:c2:bd:47:52:9e:dc:ce:62:3d:39:44:b6:d6:0e:e3:f1: 05:e6:f5:62:97:99:ec:ee:e4:ac:58:be:7e:c8:c5:7e:68:bb: 37:c5:4b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXnBnONW9XQIFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ODE2OTgxN2YtMGFlMC00ZDg5LWFkZWYtMzM3YjkwODhiYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFsEIzvxHdJNF6a60OvMIsyGJQLL4ffFNQh+ tasRva6x/38D8YmsPo12q9/rCLWRKHMyKOUkYOkLco1x178VLE7TcR0KNF/rBnP1 nobozKrF+//7c4UHeGT2bhCPrpa7tI+XjKRTq0Ye/vb0/mnlBAifkz+HC5hlwVyy zz2QNZSRO8cuKZtf8a8rifNHmrjg7RduFcVR9cUax3XfpkHmf/jXeBnUP5uiy3Fh I/Eakoxm8j+b6O+kgEM6gHHSyfb6uAN66BQdetFSq5fESVvu1jHZOwov6iEZRtpv iUUFCEY2odfKk5VgGPnBuzY1MK1GdIOOiu0uVmjFlLplRrp6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBj7NIr1rD9D8QqIAvAOmWDs6W1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvM2JhODRhYjgtMjFhMC0z OTdmLWE0NjctZWU3NmY0Zjk1MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHizmZnOXYrfFZOKQuJkfmb3Z1i6UNDs3ORQeG5SsNY6LB1KI1dlNcv3 aiNoQrlVDdzEGVGQxQ/no6kPeZId3+kZlqoJAbDvh51YZOdSA1WNpD0ZaoWUY3KA 5W3CzCxF0tlaPlPYC1BobwLLP4tRpryg4CW4Xgmo225eG6hUv93JQn+TSw2Xx7jX nYtp7X4/He7K4eK7To7R1JPlOBMc4Vt8n2sFU14MNiOfsX4BR9H3HL/ecpfKPx7+ aEsZWGKIwChFBG2TJeWsG9aSdOU/zNlJz8S6KGSP/OnMwr1HUp7czmI9OUS21g7j 8QXm9WKXmezu5KxYvn7IxX5ouzfFS2o= -----END CERTIFICATE-----Generated at Sun Jun 29 00:33:18 2025 by rpki-client