$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa File: 9e385ca2-c418-3d2f-acb5-00a220501733.roa (raw, json) Hash identifier: 1pbvE/wdNodW0OvULv/Xx8c/bOjbF1AteedTASbf3HA= Subject key identifier: 69:45:EB:39:EC:4F:61:5E:36:E4:89:69:4F:8C:C5:83:F4:02:2D:9F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACF880821AA2FAD8DDF80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 19795 IP address blocks: 208.85.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cf:88:08:21:aa:2f:ad:8d:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=0f6ea79e-e90f-4e7e-9506-986ad3a733c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:a4:aa:76:27:cb:0e:57:24:99:1f:4a:6d: 3b:bd:e9:69:2e:e1:d8:ef:a6:e3:00:6f:28:8d:da: 3f:99:68:d2:76:68:2f:79:e5:b6:75:ed:f0:23:7e: b0:ac:59:c0:3b:39:a8:4d:0d:37:7c:59:2e:20:f9: 5e:f6:76:49:af:07:a1:8e:06:21:c0:7a:1f:84:d8: 2e:8a:37:2e:31:43:62:19:45:25:d6:18:3d:97:92: 08:84:08:45:3a:4a:7b:4d:57:c2:e3:55:6f:f7:b5: 81:85:43:49:cf:c4:3a:1b:9c:3d:5b:45:68:5c:65: bc:ad:61:f1:3d:f3:39:cd:07:20:84:9c:6e:96:c8: 72:cf:20:c1:22:64:fa:37:e8:3b:a8:45:37:ec:c2: 97:74:30:4c:64:17:ea:9c:e5:3a:e9:06:47:ad:c7: 9d:98:44:01:95:f5:81:56:13:ad:77:64:dd:d8:55: 69:a1:27:8f:67:7a:51:c7:6e:30:5d:0e:47:a0:da: 6c:b2:13:e6:55:22:3a:14:88:a4:1b:80:ec:dc:05: 15:7d:67:0b:5c:41:e5:17:74:6d:02:11:a9:c4:da: ac:cc:f6:96:79:d4:52:5e:17:90:bc:17:05:6d:ac: 59:b1:df:15:4c:28:54:be:05:e8:c5:89:f6:11:e6: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:45:EB:39:EC:4F:61:5E:36:E4:89:69:4F:8C:C5:83:F4:02:2D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:91:27:d4:c9:4e:61:c1:8f:1e:19:55:dc:9a:c8:1d:16:25: 76:b7:68:e7:de:d1:70:e2:36:24:34:fc:67:84:31:25:96:39: 34:27:87:1e:84:7e:7b:e7:58:a8:a0:59:3a:23:7f:e4:44:46: 79:52:f9:b1:d5:27:92:1f:b1:73:28:e7:2d:09:44:fe:2c:db: 2e:91:94:9f:19:a5:ca:c3:90:0e:79:f9:7b:14:dd:b7:d8:30: e1:db:f7:1f:1e:90:86:b3:d1:c8:50:62:07:2f:50:4c:ef:8e: 54:46:cf:f7:a3:9b:7d:29:f8:a4:c1:33:fd:b4:27:a3:84:29: c0:54:ed:7f:26:fb:a3:4f:a8:7c:06:21:bf:8e:3a:24:e4:8a: 76:b0:72:36:8b:69:42:59:37:bb:8b:3f:22:8f:e8:f4:ac:c6: 53:b4:fe:1a:25:af:65:a2:3a:6c:31:bf:4d:e1:91:dc:f0:1a: f2:61:0f:8c:42:22:a3:e6:7e:a0:f9:67:de:7c:d3:17:c6:15: 05:07:33:cc:ae:d0:62:e5:79:e0:6f:36:0a:98:16:07:d5:d2: 55:d0:8d:7a:dc:b9:53:c1:27:05:c3:97:35:ba:3b:41:ea:b5: cc:d3:5a:9c:c7:33:83:a5:d5:a6:f7:db:c5:ec:72:24:90:33: 31:8b:a9:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss+ICCGqL62N34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MGY2ZWE3OWUtZTkwZi00ZTdlLTk1MDYtOTg2YWQzYTczM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFqkqnYnyw5XJJkfSm07velpLuHY76bjAG8o jdo/mWjSdmgveeW2de3wI36wrFnAOzmoTQ03fFkuIPle9nZJrwehjgYhwHofhNgu ijcuMUNiGUUl1hg9l5IIhAhFOkp7TVfC41Vv97WBhUNJz8Q6G5w9W0VoXGW8rWHx PfM5zQcghJxulshyzyDBImT6N+g7qEU37MKXdDBMZBfqnOU66QZHrcedmEQBlfWB VhOtd2Td2FVpoSePZ3pRx24wXQ5HoNpsshPmVSI6FIikG4Ds3AUVfWcLXEHlF3Rt AhGpxNqszPaWedRSXheQvBcFbaxZsd8VTChUvgXoxYn2EebZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlF6znsT2FeNuSJaU+MxYP0Ai2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWUzODVjYTItYzQxOC0z ZDJmLWFjYjUtMDBhMjIwNTAxNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImRJ9TJTmHBjx4ZVdyayB0WJXa3aOfe0XDiNiQ0/GeEMSWWOTQnhx6E fnvnWKigWTojf+RERnlS+bHVJ5IfsXMo5y0JRP4s2y6RlJ8ZpcrDkA55+XsU3bfY MOHb9x8ekIaz0chQYgcvUEzvjlRGz/ejm30p+KTBM/20J6OEKcBU7X8m+6NPqHwG Ib+OOiTkinawcjaLaUJZN7uLPyKP6PSsxlO0/holr2WiOmwxv03hkdzwGvJhD4xC IqPmfqD5Z9580xfGFQUHM8yu0GLleeBvNgqYFgfV0lXQjXrcuVPBJwXDlzW6O0Hq tczTWpzHM4Ol1ab328XsciSQMzGLqS4= -----END CERTIFICATE-----Generated at Mon Jun 30 14:11:11 2025 by rpki-client