$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa File: 5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa (raw, json) Hash identifier: B4QhJ2zgVDDzvoJR3rq9RfMWcjgpyY3G6Aof75vCLQc= Subject key identifier: 99:4D:D0:FE:1D:7C:C4:5E:49:F6:16:DE:92:57:65:C2:1E:1E:96:70 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A3A1579D49940E89B5F58EA80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 19795 IP address blocks: 208.85.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:79:d4:99:40:e8:9b:5f:58:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=b016dae3-4347-4cff-bd56-e8d83d1af7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:da:21:06:e8:e5:03:36:3d:51:6e:70:9b: 24:85:12:03:92:da:09:65:45:7d:b9:0a:c6:1f:5d: 92:e2:e9:99:a2:80:69:89:d7:1d:34:46:c0:31:a8: d9:bc:d5:bf:60:51:25:a9:6f:4d:07:22:2d:7f:99: e2:32:4d:e8:89:dd:7c:81:6a:75:76:94:b3:3b:6a: e1:7f:0e:1a:5b:9e:97:69:7a:f4:d3:5a:9c:f1:04: bd:03:0a:5b:0d:af:17:97:33:0f:53:d1:00:be:b5: 8a:18:c0:88:b3:eb:6c:c4:45:e1:c6:ec:88:02:eb: 7c:51:ee:c8:53:2a:cc:aa:25:e1:99:3a:4e:f3:7a: f0:1f:c3:4a:15:0a:98:4d:07:42:e4:34:e1:35:52: b6:d8:a4:1d:f9:f8:45:6e:af:01:32:9d:e1:47:6b: 8a:5c:d1:05:e1:48:88:a0:9b:87:6d:13:e7:39:5e: a3:74:3b:18:e2:a5:27:ef:05:53:64:00:58:f0:b1: 26:c8:cf:07:0f:f0:3b:34:c2:94:a8:37:0e:27:29: a7:50:cb:14:24:c0:2b:f5:ee:4f:ee:5f:bd:b0:5f: 0b:b9:1c:29:68:42:ea:c8:75:9e:4f:0d:73:d1:1d: 34:87:ca:4a:ec:27:d6:18:a9:52:46:ed:eb:04:35: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4D:D0:FE:1D:7C:C4:5E:49:F6:16:DE:92:57:65:C2:1E:1E:96:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:62:66:01:39:59:b3:78:a4:bb:1c:e9:2e:99:c9:12:cb:c4: f0:66:82:35:41:79:09:4f:01:8a:6b:51:a5:dc:71:6a:43:7f: d5:48:0e:e4:54:09:c6:ef:49:7c:5f:e0:00:65:ef:04:31:53: 09:36:82:df:f9:e5:e4:04:89:00:87:f3:4c:78:5d:07:7c:4c: 37:76:3f:81:05:93:22:fc:4e:2d:1a:87:5f:76:a5:8f:7f:e9: 63:c9:4b:a6:67:6c:99:a0:95:ad:cc:e7:93:86:2f:2e:d1:a0: 2f:b2:84:ec:df:e8:4d:d4:98:8f:91:91:c4:ff:e7:75:03:24: 6d:1e:45:e4:ac:eb:f7:67:c1:5b:fa:f0:76:05:84:e9:93:53: 10:dd:ee:d7:d6:15:66:64:fc:8e:2c:f5:b5:b9:6f:06:b2:88: 26:e4:de:26:9e:9f:18:1f:53:43:fb:de:f7:37:50:dd:7b:17: 66:b8:60:5f:99:33:6b:b7:4c:05:f2:5a:76:94:bc:97:da:83: 4c:4d:8d:7c:ba:23:ef:3c:f9:60:f5:6e:e9:39:2a:a0:96:76: d0:d0:88:0e:5b:fb:98:60:ad:e5:55:e6:d1:9b:00:d2:2c:3e: 0e:ee:3f:54:34:e8:5b:a8:4a:90:0c:1c:63:8c:d9:00:0e:43: 93:0a:21:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXnUmUDom19Y6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YjAxNmRhZTMtNDM0Ny00Y2ZmLWJkNTYtZThkODNkMWFmN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/aIQbo5QM2PVFucJskhRIDktoJZUV9uQrG H12S4umZooBpidcdNEbAMajZvNW/YFElqW9NByItf5niMk3oid18gWp1dpSzO2rh fw4aW56XaXr001qc8QS9AwpbDa8XlzMPU9EAvrWKGMCIs+tsxEXhxuyIAut8Ue7I UyrMqiXhmTpO83rwH8NKFQqYTQdC5DThNVK22KQd+fhFbq8BMp3hR2uKXNEF4UiI oJuHbRPnOV6jdDsY4qUn7wVTZABY8LEmyM8HD/A7NMKUqDcOJymnUMsUJMAr9e5P 7l+9sF8LuRwpaELqyHWeTw1z0R00h8pK7CfWGKlSRu3rBDV+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlN0P4dfMReSfYW3pJXZcIeHpZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNWE4YmUzNGItOGNmMi0z ZGUyLTkxYzctYTE2OWRlZTdiNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFliZgE5WbN4pLsc6S6ZyRLLxPBmgjVBeQlPAYprUaXccWpDf9VIDuRU CcbvSXxf4ABl7wQxUwk2gt/55eQEiQCH80x4XQd8TDd2P4EFkyL8Ti0ah192pY9/ 6WPJS6ZnbJmgla3M55OGLy7RoC+yhOzf6E3UmI+RkcT/53UDJG0eReSs6/dnwVv6 8HYFhOmTUxDd7tfWFWZk/I4s9bW5bwayiCbk3iaenxgfU0P73vc3UN17F2a4YF+Z M2u3TAXyWnaUvJfag0xNjXy6I+88+WD1buk5KqCWdtDQiA5b+5hgreVV5tGbANIs Pg7uP1Q06FuoSpAMHGOM2QAOQ5MKIVs= -----END CERTIFICATE-----Generated at Sun Jun 29 10:44:37 2025 by rpki-client