$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa File: b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa (raw, json) Hash identifier: 2kvuhBJbdM+C+kBv2g64TuxezGjznRicL9KscQ35WZ8= Subject key identifier: 17:1B:55:26:3B:02:35:FF:FA:8D:7D:86:11:0C:5A:61:A7:C4:29:11 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A331AE869A49DC0E8EA558F80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 14618 IP address blocks: 208.95.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e8:69:a4:9d:c0:e8:ea:55:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=5b21fb59-edfb-4b8f-ac9e-7142f944d0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:89:52:c8:14:74:a3:e5:0c:4c:34:58:81: 4a:ab:e7:6a:fa:95:57:17:c0:da:d4:6d:8d:f1:9e: 8e:32:27:bd:4e:e8:45:46:84:96:f7:f3:8a:e8:ea: cf:20:e1:91:c2:1f:3f:80:7f:f3:5f:19:4d:2c:c5: f4:d0:96:21:f4:0e:ca:e7:0f:77:a4:64:1d:35:d0: da:7a:10:6e:f8:1b:44:10:ee:86:45:ad:eb:85:ba: 17:0b:51:58:f7:de:11:16:49:71:3f:aa:34:da:43: e1:37:9a:25:20:05:0b:8f:5f:fa:92:23:77:b9:74: a7:54:33:5f:9e:17:1f:0b:ca:8e:09:c2:90:6e:dc: ea:d9:a4:96:7d:31:b8:e1:00:22:d2:3c:bd:a4:ed: 68:b9:a4:13:b0:d9:fa:bc:69:a0:a6:e4:a9:a8:1e: 2d:88:82:88:81:72:ce:e8:6c:9c:7f:ca:95:2f:0b: 6e:9c:7c:b2:e1:6b:20:eb:97:43:4f:89:b1:65:99: 3b:91:ce:f1:15:0e:1a:e6:78:08:2a:33:35:27:6a: 83:b6:b7:f1:ea:ed:5b:f2:84:3b:6c:af:da:56:b0: 6a:27:b0:74:99:51:cc:1f:d9:6b:1c:75:2c:64:77: 48:fb:72:7b:ae:91:d5:85:ac:51:7e:75:7d:dc:d7: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1B:55:26:3B:02:35:FF:FA:8D:7D:86:11:0C:5A:61:A7:C4:29:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b674e2f6-c8dc-37d2-924e-36cf114f50b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a1:6b:30:2e:c5:d9:6a:d8:5e:82:1b:91:fa:76:f4:45:a6: 87:e9:c0:60:ad:43:75:db:f4:57:54:9e:9a:bd:4c:0f:1c:c4: c2:00:0f:d6:06:d1:a7:5f:27:95:95:d4:e6:32:f6:fe:d9:5c: 18:d8:53:75:4a:ca:5e:6e:51:fc:0a:d7:f4:92:6e:b4:88:bc: b6:03:af:7e:f2:4a:20:ae:1b:5c:4a:e3:2c:5d:6b:5f:ad:1b: fa:1d:83:b5:27:cc:b9:39:d3:c5:d0:6c:b0:52:c1:6a:4b:be: 9f:00:4a:fb:29:82:96:36:f1:e7:fd:bb:0b:ae:09:58:dd:c9: 39:62:3b:1e:59:78:7c:03:d4:f0:71:04:64:62:00:29:f3:54: c6:8b:2d:45:ec:69:28:84:5c:3d:49:80:15:da:26:7b:73:8f: 9a:5c:74:a5:a2:9d:e0:42:1f:97:38:0d:ce:50:5f:d3:a6:8f: 7b:b3:e1:ca:47:77:f9:a6:bc:c8:95:af:1e:8a:df:f7:45:f0: a4:f3:00:05:ec:dc:c2:64:4b:b0:fb:26:3a:65:d0:8e:ce:42: 47:f8:33:11:33:cf:a3:4e:a1:39:43:71:b8:b6:d7:1c:53:31: b2:76:00:db:fd:b2:cd:c8:a5:79:c5:34:3d:78:d9:92:a4:1a: 4a:d4:1c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuhppJ3A6OpVj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NWIyMWZiNTktZWRmYi00YjhmLWFjOWUtNzE0MmY5NDRkMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtqJUsgUdKPlDEw0WIFKq+dq+pVXF8Da1G2N 8Z6OMie9TuhFRoSW9/OK6OrPIOGRwh8/gH/zXxlNLMX00JYh9A7K5w93pGQdNdDa ehBu+BtEEO6GRa3rhboXC1FY994RFklxP6o02kPhN5olIAULj1/6kiN3uXSnVDNf nhcfC8qOCcKQbtzq2aSWfTG44QAi0jy9pO1ouaQTsNn6vGmgpuSpqB4tiIKIgXLO 6Gycf8qVLwtunHyy4Wsg65dDT4mxZZk7kc7xFQ4a5ngIKjM1J2qDtrfx6u1b8oQ7 bK/aVrBqJ7B0mVHMH9lrHHUsZHdI+3J7rpHVhaxRfnV93NdCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcbVSY7AjX/+o19hhEMWmGnxCkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjY3NGUyZjYtYzhkYy0z N2QyLTkyNGUtMzZjZjExNGY1MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqhazAuxdlq2F6CG5H6dvRFpofpwGCtQ3Xb9FdUnpq9TA8cxMIAD9YG 0adfJ5WV1OYy9v7ZXBjYU3VKyl5uUfwK1/SSbrSIvLYDr37ySiCuG1xK4yxda1+t G/odg7UnzLk508XQbLBSwWpLvp8ASvspgpY28ef9uwuuCVjdyTliOx5ZeHwD1PBx BGRiACnzVMaLLUXsaSiEXD1JgBXaJntzj5pcdKWineBCH5c4Dc5QX9Omj3uz4cpH d/mmvMiVrx6K3/dF8KTzAAXs3MJkS7D7Jjpl0I7OQkf4MxEzz6NOoTlDcbi21xxT MbJ2ANv9ss3IpXnFND142ZKkGkrUHEY= -----END CERTIFICATE-----Generated at Sun Jun 29 01:28:37 2025 by rpki-client