$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa File: 4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa (raw, json) Hash identifier: DSe+5xF1OrqdrsexLJ2/7O5pV6AdkW/aj3bDALv1L7Q= Subject key identifier: E3:3D:AA:02:CA:6B:52:A9:88:08:29:E3:5A:0C:C8:A5:F9:57:84:81 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A3A1573CCB07259A85B931800 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:73:cc:b0:72:59:a8:5b:93:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=7d18a7c8-21b3-43e5-ad05-f2960659fad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:5b:a2:90:83:a1:10:0d:ac:e5:38:70:30: 64:47:4b:cc:d6:0d:4e:ac:8d:d3:27:a7:21:31:b8: 86:d4:b7:09:2a:d7:69:06:4b:d4:3a:9e:dd:93:4f: 88:d2:fe:98:db:62:41:de:f3:3a:21:8a:83:4b:33: 17:0b:db:9f:29:8f:f2:b9:c5:1d:23:56:8b:85:4f: f7:a5:91:f6:8b:37:bc:a0:38:ee:b4:20:da:25:f5: 07:fb:0d:64:3f:cf:a0:a1:61:31:c9:69:8d:48:43: ca:cf:a6:9c:b7:15:e1:f3:04:dc:c0:17:dc:ac:03: a5:44:37:92:1d:04:00:10:98:81:34:c5:00:8e:7c: 32:11:17:e9:f1:20:4a:3f:38:ef:f9:56:10:1f:12: dd:ab:03:29:18:80:cf:76:ed:e4:43:55:25:06:40: 0a:3f:9a:bd:53:c3:b9:55:90:3c:87:ee:19:4b:6b: fb:da:24:ca:99:d3:03:7c:6d:d5:0f:ec:19:79:2c: 3a:0d:63:31:26:21:e2:16:8f:39:36:1d:24:35:9f: b5:e1:21:83:11:ba:dd:f2:d7:b9:ec:39:da:dd:0e: de:02:a5:24:ab:6c:60:88:92:07:8f:5a:c3:16:62: 97:44:5d:5f:01:c5:ee:00:fa:b2:8f:49:78:f6:79: 87:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3D:AA:02:CA:6B:52:A9:88:08:29:E3:5A:0C:C8:A5:F9:57:84:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:39:57:8f:83:b4:bb:82:8c:63:4c:8c:3b:26:84:fd:86:d2: 32:a9:c6:22:4c:66:03:e1:1e:42:af:48:35:8e:f0:7d:8e:32: 90:df:9d:d4:c7:b9:1f:01:0a:d5:bf:f3:26:8d:49:20:44:55: c7:bb:44:2f:34:17:3a:89:16:a5:47:9f:a4:76:45:0f:07:20: 41:54:36:f1:7f:3b:96:cf:f2:0f:60:50:ca:59:82:fd:7c:6d: e6:24:09:7d:3f:80:fc:80:d0:1d:3e:0f:3a:31:de:ce:97:4b: 4d:b8:9f:9f:01:6c:19:f2:f0:3a:25:6e:5e:38:52:23:53:09: 85:12:5e:74:3a:e8:e9:33:ec:95:01:81:46:69:4d:4a:31:ff: 61:ae:96:15:2d:9c:0e:40:5e:94:d9:44:ce:b6:be:e4:02:6b: 0e:fc:4d:39:23:9e:e9:44:49:e5:85:a1:19:bd:ad:80:f2:aa: a5:c1:e2:54:4b:e8:4c:e2:cb:16:3a:69:f7:59:73:a5:d5:49: 7b:ca:d2:64:e8:3d:95:4d:9a:a0:8b:d0:06:83:88:43:39:95: 07:01:ee:26:cc:e6:e3:7a:99:77:09:da:75:88:0e:73:57:82: 6b:b2:66:ab:3d:cd:b6:a7:c6:5f:72:8a:b5:54:14:2e:d4:c6: ce:42:ad:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXPMsHJZqFuTGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk N2QxOGE3YzgtMjFiMy00M2U1LWFkMDUtZjI5NjA2NTlmYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwJbopCDoRANrOU4cDBkR0vM1g1OrI3TJ6ch MbiG1LcJKtdpBkvUOp7dk0+I0v6Y22JB3vM6IYqDSzMXC9ufKY/yucUdI1aLhU/3 pZH2ize8oDjutCDaJfUH+w1kP8+goWExyWmNSEPKz6actxXh8wTcwBfcrAOlRDeS HQQAEJiBNMUAjnwyERfp8SBKPzjv+VYQHxLdqwMpGIDPdu3kQ1UlBkAKP5q9U8O5 VZA8h+4ZS2v72iTKmdMDfG3VD+wZeSw6DWMxJiHiFo85Nh0kNZ+14SGDEbrd8te5 7Dna3Q7eAqUkq2xgiJIHj1rDFmKXRF1fAcXuAPqyj0l49nmHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM9qgLKa1KpiAgp41oMyKX5V4SBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNGU0YzBlODEtZTE2Zi0z ZTg4LThlZjMtZWU0Zjg0NWFjOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ5V4+DtLuCjGNMjDsmhP2G0jKpxiJMZgPhHkKvSDWO8H2OMpDfndTH uR8BCtW/8yaNSSBEVce7RC80FzqJFqVHn6R2RQ8HIEFUNvF/O5bP8g9gUMpZgv18 beYkCX0/gPyA0B0+Dzox3s6XS024n58BbBny8Dolbl44UiNTCYUSXnQ66Okz7JUB gUZpTUox/2GulhUtnA5AXpTZRM62vuQCaw78TTkjnulESeWFoRm9rYDyqqXB4lRL 6EziyxY6afdZc6XVSXvK0mToPZVNmqCL0AaDiEM5lQcB7ibM5uN6mXcJ2nWIDnNX gmuyZqs9zbanxl9yirVUFC7Uxs5CrRA= -----END CERTIFICATE-----Generated at Sun Jun 29 01:05:59 2025 by rpki-client