$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa File: 9d90aef9-02c7-3727-846e-6ace0a388a9f.roa (raw, json) Hash identifier: hnXZWbyfpbZH/PEVJBMtKTvYLhFwjtXXlyX3sKiQ4yg= Subject key identifier: D7:69:77:2E:EB:44:A8:3D:8B:F8:E9:64:EA:55:D8:71:42:73:88:14 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACF94FE3CF7E562C44E80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 16509 IP address blocks: 208.85.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cf:94:fe:3c:f7:e5:62:c4:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=dd9deb90-1645-4586-810a-6115245e02b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:a8:9f:9b:9d:b0:96:a2:60:9d:b1:53:4c: 10:f1:d2:ef:8e:cc:8a:d5:3d:b0:91:df:47:c2:64: 8b:dd:aa:bd:56:f6:b7:8c:c5:50:bc:d2:98:ed:a1: c6:8b:9a:58:c1:fd:68:25:94:c4:26:9c:53:c5:93: 6f:6a:3b:7b:9b:7b:f5:86:af:a7:fa:da:27:7c:c3: b9:c2:18:a5:c4:9f:6b:eb:d4:9e:c8:db:38:96:70: 99:42:84:f6:9e:0f:2b:e9:3d:dd:a9:05:39:08:ce: d6:af:33:0d:f2:52:63:fd:64:76:23:90:b8:4b:ba: 9e:17:72:bf:ce:a7:00:02:92:12:f7:05:70:90:d5: e3:a9:00:7b:54:43:b3:46:da:97:f1:97:bf:63:2e: 8e:a7:18:15:2e:97:05:a7:15:9f:59:43:c4:31:81: 2e:4b:46:f4:6e:cb:5e:4d:f2:97:a3:9b:4a:e6:86: 73:89:1b:cc:e6:49:63:40:e9:ff:de:5d:ab:b9:21: 5f:2d:71:eb:2e:03:d0:da:fd:8c:38:92:e4:75:5d: 8d:a2:b2:1a:f8:66:b1:e3:07:1d:29:c0:f6:30:e8: ec:59:cb:16:9e:38:13:f1:81:10:6b:30:ba:13:fb: 20:17:95:70:1c:58:2e:62:d3:a4:f1:bd:3f:80:05: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:77:2E:EB:44:A8:3D:8B:F8:E9:64:EA:55:D8:71:42:73:88:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:78:94:40:9b:92:9f:5d:49:0b:dd:67:76:98:a7:50:82:b6: 60:79:90:ad:1e:d9:4f:b1:6f:55:db:c9:c5:34:72:73:b5:f1: ad:0d:71:81:51:ab:ac:e8:b3:bc:e8:62:21:9a:76:66:9a:ca: c6:4b:90:09:7b:57:4e:2c:0e:54:77:6b:f4:6b:b0:24:bd:2e: 6b:98:03:cf:ec:82:e1:66:a9:f9:9d:5c:f7:25:38:87:cb:b4: fd:fa:f8:03:fc:4f:74:2b:89:f5:f8:fe:d4:b8:75:67:e4:84: ae:03:74:ae:af:3d:50:86:df:46:b2:4d:d6:57:ad:66:03:58: f2:29:9c:8f:fd:15:3d:00:b9:e0:7c:44:bd:c6:93:e8:4b:37: 7d:34:c6:d5:fc:cb:35:9f:03:0d:26:71:2d:57:0e:bf:90:d8: e1:b7:76:4e:8a:05:9c:04:24:dc:1f:40:3c:6d:fb:90:ed:f3: d4:1b:6c:6d:95:89:4f:8a:bc:71:4a:13:e5:9e:53:48:77:5a: 8d:c1:b9:86:69:97:0e:42:70:cd:a3:50:d7:74:06:1b:c1:c8: c3:17:d0:43:57:3a:12:5a:2c:99:18:0e:d0:94:7a:10:7c:3e: 94:42:70:08:d4:c2:88:81:e6:14:f3:d1:ab:4a:27:fe:fc:02: 39:10:91:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss+U/jz35WLEToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZGQ5ZGViOTAtMTY0NS00NTg2LTgxMGEtNjExNTI0NWUwMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutqon5udsJaiYJ2xU0wQ8dLvjsyK1T2wkd9H wmSL3aq9Vva3jMVQvNKY7aHGi5pYwf1oJZTEJpxTxZNvajt7m3v1hq+n+tonfMO5 whilxJ9r69SeyNs4lnCZQoT2ng8r6T3dqQU5CM7WrzMN8lJj/WR2I5C4S7qeF3K/ zqcAApIS9wVwkNXjqQB7VEOzRtqX8Ze/Yy6OpxgVLpcFpxWfWUPEMYEuS0b0bste TfKXo5tK5oZziRvM5kljQOn/3l2ruSFfLXHrLgPQ2v2MOJLkdV2NorIa+Gax4wcd KcD2MOjsWcsWnjgT8YEQazC6E/sgF5VwHFguYtOk8b0/gAUMFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdpdy7rRKg9i/jpZOpV2HFCc4gUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWQ5MGFlZjktMDJjNy0z NzI3LTg0NmUtNmFjZTBhMzg4YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE94lECbkp9dSQvdZ3aYp1CCtmB5kK0e2U+xb1XbycU0cnO18a0NcYFR q6zos7zoYiGadmaaysZLkAl7V04sDlR3a/RrsCS9LmuYA8/sguFmqfmdXPclOIfL tP36+AP8T3QrifX4/tS4dWfkhK4DdK6vPVCG30ayTdZXrWYDWPIpnI/9FT0AueB8 RL3Gk+hLN300xtX8yzWfAw0mcS1XDr+Q2OG3dk6KBZwEJNwfQDxt+5Dt89QbbG2V iU+KvHFKE+WeU0h3Wo3BuYZplw5CcM2jUNd0BhvByMMX0ENXOhJaLJkYDtCUehB8 PpRCcAjUwoiB5hTz0atKJ/78AjkQka0= -----END CERTIFICATE-----Generated at Sun Jun 29 07:55:22 2025 by rpki-client