$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa File: 9850d129-378e-38bd-a615-acb2a6e4e18b.roa (raw, json) Hash identifier: kJjCvXmDAj7XWXNF9Zaor5Ns5WoHUl+yo6GVlFGBzRo= Subject key identifier: C5:8B:31:E6:C2:DE:A6:56:65:D8:44:EF:1E:B0:AF:8F:B8:14:D0:D2 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACF79623ED936C38BC280 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 19795 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cf:79:62:3e:d9:36:c3:8b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=cfa96ff6-672d-4a47-bd11-f19485e63ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:0e:d9:77:93:1c:4d:4f:e7:34:99:c2:80: 29:fc:e0:4a:bb:46:bc:8f:a5:b5:10:4a:8b:59:b7: bc:6c:f9:3d:ab:cf:ce:dc:6a:0b:20:9e:1d:86:d5: 93:bf:75:14:59:e7:09:43:cc:84:ff:9b:2d:a9:9e: 8b:92:8c:32:5c:1a:a4:ce:f9:b9:0c:2b:79:0c:9a: 32:09:42:ed:b8:64:81:54:cc:6a:23:42:ce:7c:30: ac:97:6a:8f:db:ba:90:d3:fb:fe:c7:a7:66:96:c4: 18:24:7d:9c:78:90:e3:83:8d:b5:a0:03:c4:eb:8f: 61:f4:61:b7:3b:99:09:d5:57:2e:28:36:94:40:55: 1e:a7:ab:25:62:f1:fc:21:2a:e6:46:ef:0d:80:ce: ae:6a:ce:e6:79:e9:38:f7:24:2a:3a:9d:90:e1:71: 87:c8:b9:5c:c5:86:d9:1e:57:ca:06:95:93:14:17: 2c:fe:da:a5:45:6f:6e:68:60:9d:eb:ef:b6:16:96: 95:97:88:06:7f:56:34:ac:35:ce:b6:e7:e8:2a:d0: 2f:9e:8c:f1:31:04:99:c9:1a:27:51:df:40:1b:eb: 07:9c:9f:ec:65:20:29:d8:87:44:40:06:64:36:66: 1a:df:94:f1:9d:73:58:9b:21:b6:3d:6f:05:78:c1: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8B:31:E6:C2:DE:A6:56:65:D8:44:EF:1E:B0:AF:8F:B8:14:D0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ee:f7:3b:7d:bf:1a:28:82:fb:2f:d8:85:bb:8a:cb:20:b8: dc:d8:7b:a3:22:c0:bd:14:db:f0:79:1a:44:46:f9:11:c9:31: c8:ab:17:91:4c:4b:41:a6:8c:da:61:0d:52:a5:ab:b0:19:2b: 22:79:8c:55:8d:b0:74:1a:e5:5d:9e:b8:df:93:a7:ca:99:97: e6:97:e3:b6:d7:e1:fe:1e:6b:53:62:66:3a:8a:5e:59:b6:ae: 51:26:b6:37:6c:5a:8d:7c:e3:72:e5:29:5f:2f:bc:11:3c:1a: de:70:77:87:a3:2b:07:a0:28:86:16:ed:d5:3d:85:6f:cf:44: 54:87:03:06:fc:c5:b1:9d:8b:1a:dc:4a:57:80:34:6d:62:dd: dc:2b:95:c9:eb:ea:01:25:ba:0d:56:22:c0:c9:b1:6e:5a:ce: 3f:3a:c1:1a:45:68:27:3f:d1:f0:1e:fb:bb:11:10:19:33:17: b7:93:89:a0:23:3d:70:2d:7a:09:89:34:52:3f:21:98:3a:e0: c0:a4:ba:4e:1b:c1:97:3e:e5:ab:1b:43:92:8e:01:dd:6c:08: 3f:58:47:d3:d6:05:bc:bf:38:92:48:f1:4b:ec:19:b4:d8:f7: d5:86:84:7b:99:44:d1:d1:cc:af:48:69:e6:44:35:c4:f9:c4: 7a:28:af:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss95Yj7ZNsOLwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk Y2ZhOTZmZjYtNjcyZC00YTQ3LWJkMTEtZjE5NDg1ZTYzZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2EO2XeTHE1P5zSZwoAp/OBKu0a8j6W1EEqL Wbe8bPk9q8/O3GoLIJ4dhtWTv3UUWecJQ8yE/5stqZ6LkowyXBqkzvm5DCt5DJoy CULtuGSBVMxqI0LOfDCsl2qP27qQ0/v+x6dmlsQYJH2ceJDjg421oAPE649h9GG3 O5kJ1VcuKDaUQFUep6slYvH8ISrmRu8NgM6uas7meek49yQqOp2Q4XGHyLlcxYbZ HlfKBpWTFBcs/tqlRW9uaGCd6++2FpaVl4gGf1Y0rDXOtufoKtAvnozxMQSZyRon Ud9AG+sHnJ/sZSAp2IdEQAZkNmYa35TxnXNYmyG2PW8FeMEkgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWLMebC3qZWZdhE7x6wr4+4FNDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOTg1MGQxMjktMzc4ZS0z OGJkLWE2MTUtYWNiMmE2ZTRlMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbu9zt9vxoogvsv2IW7issguNzYe6MiwL0U2/B5GkRG+RHJMcirF5FM S0GmjNphDVKlq7AZKyJ5jFWNsHQa5V2euN+Tp8qZl+aX47bX4f4ea1NiZjqKXlm2 rlEmtjdsWo1843LlKV8vvBE8Gt5wd4ejKwegKIYW7dU9hW/PRFSHAwb8xbGdixrc SleANG1i3dwrlcnr6gElug1WIsDJsW5azj86wRpFaCc/0fAe+7sREBkzF7eTiaAj PXAtegmJNFI/IZg64MCkuk4bwZc+5asbQ5KOAd1sCD9YR9PWBby/OJJI8UvsGbTY 99WGhHuZRNHRzK9IaeZENcT5xHoor0k= -----END CERTIFICATE-----Generated at Sun Jun 29 16:49:36 2025 by rpki-client