$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa File: 67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa (raw, json) Hash identifier: vSddSsgUl9UvDgzI/vMpxAsUP6X7twIEA4VE8u9yG5Q= Subject key identifier: 6F:C9:E1:E6:BE:78:0F:DC:B6:49:D9:6F:6A:83:EF:52:27:B5:24:76 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A3A15798A4ED685A5C9BF14C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 208.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:79:8a:4e:d6:85:a5:c9:bf:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=a2a329f6-6173-418e-9e2e-43cfd80ed143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:03:08:59:01:c6:69:4a:db:ea:50:cf:8a: 1d:97:2b:76:72:7b:0b:20:78:b1:5b:5e:25:23:ed: 2f:c0:6b:53:d9:aa:8b:5d:15:78:06:61:87:ec:99: 51:5e:0a:b9:3f:0c:de:5a:38:2c:0d:41:7e:09:7c: 1f:34:90:b9:27:c5:23:95:a5:ee:e5:4c:65:18:e3: 20:8c:eb:64:32:d9:5a:71:a0:d1:7b:da:b4:7d:ef: 84:94:af:79:98:0e:5a:03:48:22:e9:85:fd:37:65: 0e:cf:e8:0c:c9:d1:2a:76:70:f4:49:00:6c:26:a5: 1b:5f:96:5f:3f:9f:6d:05:e6:6b:56:35:b0:5f:1b: 04:60:3c:1d:99:9d:dd:f1:2f:27:ba:21:d3:76:7a: 1a:01:a1:54:ad:a7:50:10:9f:e3:4f:77:6d:7f:32: c4:bf:cc:36:de:00:36:2c:d8:4c:aa:cd:a6:1a:36: 01:f8:d7:c3:08:fc:bc:75:77:86:31:fd:75:99:e4: 0a:9e:e8:33:36:23:d4:0c:13:cd:ef:22:4e:90:8e: 7d:aa:b7:ad:10:3d:b7:23:92:72:39:31:2e:32:63: 30:3a:2d:ea:04:1e:46:44:a1:a9:57:7c:46:5e:e8: a1:13:9e:3c:c8:33:ed:99:00:e9:32:3e:1c:a6:8b: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C9:E1:E6:BE:78:0F:DC:B6:49:D9:6F:6A:83:EF:52:27:B5:24:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7d:0b:3f:b1:32:be:98:33:ad:27:86:3d:bd:41:9b:2a:19: 6c:a3:b0:f0:78:d7:c6:ec:86:a0:34:fa:e7:1c:b0:43:8a:1f: 2d:2a:ae:22:5e:41:23:d6:81:30:c6:7a:12:0a:34:5d:58:7d: c6:a6:b0:45:77:c2:a3:af:82:90:44:01:81:60:0b:20:31:03: 9e:6d:17:36:57:6f:98:60:ee:7a:80:91:51:b7:c4:39:bf:a9: 08:72:dd:57:c5:06:d4:49:7a:39:42:ea:33:4e:f2:14:15:5f: 65:08:ed:91:ba:1f:49:cb:ed:25:41:22:92:2b:5a:20:2f:e5: 8b:3a:f6:33:44:12:3b:76:bd:2a:ef:50:bf:4c:1e:92:c6:2f: 13:68:b8:16:8b:83:4e:d1:50:bb:31:2e:e8:c6:d6:5a:8d:6e: e9:2a:69:69:a0:8e:9b:4d:f5:c3:b1:36:5a:50:2c:b1:dc:93: 9a:c8:7f:b6:a1:7a:3c:ce:c0:b6:75:cc:f0:0a:87:83:68:27: 8b:e9:ba:cb:59:d6:97:ff:a3:da:de:a5:a4:4a:9e:06:f2:37: 64:ad:f4:13:f3:13:a0:80:12:26:df:2c:47:ea:69:71:15:58: 5c:2b:fb:a2:48:c5:63:48:3a:09:ba:3f:d2:4a:cf:9f:48:5e: e7:d1:6d:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXmKTtaFpcm/FMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YTJhMzI5ZjYtNjE3My00MThlLTllMmUtNDNjZmQ4MGVkMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzYDCFkBxmlK2+pQz4odlyt2cnsLIHixW14l I+0vwGtT2aqLXRV4BmGH7JlRXgq5PwzeWjgsDUF+CXwfNJC5J8UjlaXu5UxlGOMg jOtkMtlacaDRe9q0fe+ElK95mA5aA0gi6YX9N2UOz+gMydEqdnD0SQBsJqUbX5Zf P59tBeZrVjWwXxsEYDwdmZ3d8S8nuiHTdnoaAaFUradQEJ/jT3dtfzLEv8w23gA2 LNhMqs2mGjYB+NfDCPy8dXeGMf11meQKnugzNiPUDBPN7yJOkI59qretED23I5Jy OTEuMmMwOi3qBB5GRKGpV3xGXuihE548yDPtmQDpMj4cpovDYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/J4ea+eA/ctknZb2qD71IntSR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNjdmNGFiZmMtY2JjOC0z ZDRiLTlkNTYtOTBhZjBkNjBmYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh9Cz+xMr6YM60nhj29QZsqGWyjsPB418bshqA0+uccsEOKHy0qriJe QSPWgTDGehIKNF1YfcamsEV3wqOvgpBEAYFgCyAxA55tFzZXb5hg7nqAkVG3xDm/ qQhy3VfFBtRJejlC6jNO8hQVX2UI7ZG6H0nL7SVBIpIrWiAv5Ys69jNEEjt2vSrv UL9MHpLGLxNouBaLg07RULsxLujG1lqNbukqaWmgjptN9cOxNlpQLLHck5rIf7ah ejzOwLZ1zPAKh4NoJ4vpustZ1pf/o9repaRKngbyN2St9BPzE6CAEibfLEfqaXEV WFwr+6JIxWNIOgm6P9JKz59IXufRbUk= -----END CERTIFICATE-----Generated at Sun Jun 29 01:21:15 2025 by rpki-client