$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa File: 8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa (raw, json) Hash identifier: F9EoZAXVulgXZ0z386A5Up5OCbIEG54KxnlLvtLxUEg= Subject key identifier: B5:47:88:F8:79:67:99:5B:11:56:67:8C:38:29:2D:88:02:A1:12:61 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACA68AF5D76884BCA7080 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 16509 IP address blocks: 208.85.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:ca:68:af:5d:76:88:4b:ca:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=45c4ae8c-a61c-447b-a831-4b34a57aa77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:8b:ba:e7:05:78:cc:3c:06:9e:17:2c:5a: ed:ae:92:a2:e4:e1:cf:90:a7:95:c3:18:3e:4b:ec: 07:5f:63:71:31:3c:71:c3:ff:eb:30:6c:34:4a:70: 03:9c:47:7c:2d:3b:13:70:2d:96:0b:63:60:49:e5: 84:99:ba:6c:0c:c6:e9:c6:99:8f:23:65:82:4e:04: 83:52:2f:dd:bd:d5:5f:7c:38:78:88:3b:b3:01:71: ef:4f:57:ed:46:a4:d3:19:75:67:cd:12:c8:c9:bf: 5e:7f:a7:a4:63:6c:f7:53:99:0a:cc:8a:78:ed:d9: 1d:5d:5f:0d:56:b7:5e:20:c5:66:19:f7:da:d5:b1: 3c:83:00:ea:0f:e9:9c:b9:92:c0:99:29:23:8d:bb: 8a:51:e5:5c:a1:4f:d6:a3:5f:0b:3b:30:ec:5f:dd: 26:4a:d0:e2:19:ba:33:d5:c2:36:36:dd:fa:17:76: a3:fa:f7:68:a5:a9:98:a9:2a:03:3a:65:d1:b4:b6: 63:30:a9:04:a9:9f:61:08:f3:42:ac:f6:77:46:70: ec:fa:61:3a:d2:7f:a2:38:d1:77:be:99:e1:4e:2e: db:7e:89:fd:b0:80:ef:5f:0c:9c:fb:f8:7f:88:2c: d6:c1:6e:7b:ac:df:43:a2:f4:29:04:74:d0:86:38: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:47:88:F8:79:67:99:5B:11:56:67:8C:38:29:2D:88:02:A1:12:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a6:a5:f7:02:c3:20:bf:dc:cf:d1:29:76:b4:ff:4c:a7:21: e3:48:ee:77:82:0d:95:58:57:b8:3b:39:3a:a1:4a:4e:b0:4e: 56:6e:16:14:57:4e:04:0e:a6:54:02:9d:24:9b:9f:03:59:70: 5b:81:df:82:75:1f:6c:58:69:df:98:99:da:59:a7:62:6e:65: ff:1c:5f:bd:32:95:37:5c:b6:2e:af:8e:a6:f1:3f:fe:bb:4a: 9c:09:5b:c3:63:8c:94:86:c6:18:31:61:71:5f:31:15:68:45: e9:77:ff:ab:6d:10:f2:18:b9:c5:a1:95:a9:6e:08:ef:96:ff: 83:f4:4d:a7:d7:72:6e:9c:90:0e:a0:49:10:0c:82:1a:33:22: 28:27:96:8f:17:a9:33:de:a2:72:67:05:1b:15:c9:0b:5a:29: c3:77:5b:ad:d7:74:c9:a1:61:ee:57:0a:44:d4:74:b2:9d:dd: 8c:74:56:d6:c1:3c:25:15:6f:9f:6a:ba:ab:fc:af:a2:69:2f: 1c:c5:3f:94:0f:7e:1f:b4:ea:d6:9f:2a:c7:68:12:16:3c:aa: 82:6c:a4:51:62:20:ef:b2:c5:fc:5a:b4:cc:b2:b0:0a:c3:84: 81:09:fa:58:02:d8:02:f4:40:6c:8d:96:c0:01:bd:a3:96:50: d0:f6:47:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Sspor112iEvKcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk NDVjNGFlOGMtYTYxYy00NDdiLWE4MzEtNGIzNGE1N2FhNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYSLuucFeMw8Bp4XLFrtrpKi5OHPkKeVwxg+ S+wHX2NxMTxxw//rMGw0SnADnEd8LTsTcC2WC2NgSeWEmbpsDMbpxpmPI2WCTgSD Ui/dvdVffDh4iDuzAXHvT1ftRqTTGXVnzRLIyb9ef6ekY2z3U5kKzIp47dkdXV8N VrdeIMVmGffa1bE8gwDqD+mcuZLAmSkjjbuKUeVcoU/Wo18LOzDsX90mStDiGboz 1cI2Nt36F3aj+vdopamYqSoDOmXRtLZjMKkEqZ9hCPNCrPZ3RnDs+mE60n+iONF3 vpnhTi7bfon9sIDvXwyc+/h/iCzWwW57rN9DovQpBHTQhjj7IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVHiPh5Z5lbEVZnjDgpLYgCoRJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOGQxMmVkNGItMjlmZi0z Yzg4LTkxZDUtYjI5N2FkZGM0NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADimpfcCwyC/3M/RKXa0/0ynIeNI7neCDZVYV7g7OTqhSk6wTlZuFhRX TgQOplQCnSSbnwNZcFuB34J1H2xYad+YmdpZp2JuZf8cX70ylTdcti6vjqbxP/67 SpwJW8NjjJSGxhgxYXFfMRVoRel3/6ttEPIYucWhlaluCO+W/4P0TafXcm6ckA6g SRAMghozIignlo8XqTPeonJnBRsVyQtaKcN3W63XdMmhYe5XCkTUdLKd3Yx0VtbB PCUVb59quqv8r6JpLxzFP5QPfh+06tafKsdoEhY8qoJspFFiIO+yxfxatMyysArD hIEJ+lgC2AL0QGyNlsABvaOWUND2R9o= -----END CERTIFICATE-----Generated at Tue Jul 1 08:55:21 2025 by rpki-client