$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c6a62984-7ffb-3004-ba71-493828c719c7.roa File: c6a62984-7ffb-3004-ba71-493828c719c7.roa (raw, json) Hash identifier: aU1VYldB4tLq+CVuaJyRcNHGv9Hjhrhi9zHjJ5oq3Qg= Subject key identifier: F5:09:C3:9C:96:43:2A:0B:BD:EC:39:D2:D7:20:7E:63:84:17:3E:23 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A3A1579F8E9320A0948A00A00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c6a62984-7ffb-3004-ba71-493828c719c7.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 19795 IP address blocks: 208.95.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:79:f8:e9:32:0a:09:48:a0:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=13f19c2a-68b8-4020-876d-8c44d205fe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:11:fb:aa:71:19:52:12:d1:bc:b3:59:c8: 7c:e6:1d:65:27:18:d3:4f:5a:f5:e4:0d:74:c8:fc: 1d:83:e7:13:48:9a:56:a6:49:46:6d:33:67:1b:e0: 28:9b:fc:3c:a2:bd:50:74:f8:06:37:e1:6e:e8:c4: ae:cc:d3:b0:c6:e2:8c:6c:a0:ff:b6:df:fb:51:55: e1:a2:3b:8b:98:3a:ff:9d:90:ae:0a:00:0b:07:61: ed:64:24:0d:26:f2:44:a9:77:de:95:e9:9f:2e:49: de:13:6c:55:5e:ed:d8:a6:63:3f:9e:c8:64:23:ae: e0:be:4a:ed:7b:a4:56:06:51:bc:71:f7:50:72:ae: ab:cb:98:0b:d4:ec:84:1f:b4:d4:5d:e1:8b:3f:66: 33:d4:5b:aa:47:73:8a:b3:0f:3e:85:89:2c:14:26: 88:31:d7:e6:56:c1:43:07:42:93:a7:8e:3f:14:01: 1f:c2:58:8d:1d:e1:a1:39:c6:06:83:10:d2:23:59: 68:19:a4:26:2d:07:e7:f5:7b:2d:86:81:d2:87:8c: 0a:b9:6e:ce:af:45:c3:0a:03:91:f4:34:35:9a:1e: 17:43:1f:11:a0:14:26:2c:6c:5b:92:cb:08:14:36: 57:13:c2:97:c8:a9:e6:66:f3:6f:77:66:ea:7f:28: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:09:C3:9C:96:43:2A:0B:BD:EC:39:D2:D7:20:7E:63:84:17:3E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c6a62984-7ffb-3004-ba71-493828c719c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b8:e4:04:cd:de:0a:43:54:82:60:8f:da:6e:6d:ac:96:7e: 42:3a:46:e9:5c:85:4b:e9:3f:66:f2:fc:90:f2:ff:c0:20:ad: 30:e8:30:cc:56:2e:9e:1a:98:6d:76:8e:53:cd:41:69:fb:6b: c4:89:11:16:91:67:c3:36:94:7d:f6:54:31:f9:2b:08:39:21: 48:1b:8c:49:c1:d3:2e:6b:61:10:5f:36:d7:63:49:31:67:3b: 85:71:df:24:5f:9a:75:90:13:e9:28:da:c0:4f:0c:b8:f4:f2: b8:e5:09:d7:f4:f1:85:1c:e3:79:31:db:31:4d:3c:5b:e0:1e: 06:72:08:ce:1e:f9:a4:e0:5d:df:50:76:cf:43:f4:d7:a9:a2: 55:ce:da:f2:b7:d3:5a:49:f0:6b:a6:d4:f9:2e:4a:de:98:95: fb:28:8e:40:78:22:57:91:37:c1:49:7b:cc:82:76:fc:bd:8d: e9:73:64:6c:0d:6a:18:cd:2f:24:c7:20:de:e3:de:16:b4:1d: 4b:fe:40:b8:d6:43:a4:bc:82:33:fc:6d:c5:c9:12:b5:cc:76: e9:ac:c2:1b:52:79:af:38:ac:5a:21:20:62:80:b3:58:22:d5: e2:eb:97:87:fc:4d:61:34:86:8e:c1:b2:91:8a:25:0b:92:1e: 70:b0:72:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXn46TIKCUigCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MTNmMTljMmEtNjhiOC00MDIwLTg3NmQtOGM0NGQyMDVmZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3AR+6pxGVIS0byzWch85h1lJxjTT1r15A10 yPwdg+cTSJpWpklGbTNnG+Aom/w8or1QdPgGN+Fu6MSuzNOwxuKMbKD/tt/7UVXh ojuLmDr/nZCuCgALB2HtZCQNJvJEqXfelemfLkneE2xVXu3YpmM/nshkI67gvkrt e6RWBlG8cfdQcq6ry5gL1OyEH7TUXeGLP2Yz1FuqR3OKsw8+hYksFCaIMdfmVsFD B0KTp44/FAEfwliNHeGhOcYGgxDSI1loGaQmLQfn9XsthoHSh4wKuW7Or0XDCgOR 9DQ1mh4XQx8RoBQmLGxbkssIFDZXE8KXyKnmZvNvd2bqfyjTVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUJw5yWQyoLvew50tcgfmOEFz4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzZhNjI5ODQtN2ZmYi0z MDA0LWJhNzEtNDkzODI4YzcxOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa45ATN3gpDVIJgj9pubayWfkI6RulchUvpP2by/JDy/8AgrTDoMMxW Lp4amG12jlPNQWn7a8SJERaRZ8M2lH32VDH5Kwg5IUgbjEnB0y5rYRBfNtdjSTFn O4Vx3yRfmnWQE+ko2sBPDLj08rjlCdf08YUc43kx2zFNPFvgHgZyCM4e+aTgXd9Q ds9D9NepolXO2vK301pJ8Gum1PkuSt6YlfsojkB4IleRN8FJe8yCdvy9jelzZGwN ahjNLyTHIN7j3ha0HUv+QLjWQ6S8gjP8bcXJErXMdumswhtSea84rFohIGKAs1gi 1eLrl4f8TWE0ho7BspGKJQuSHnCwctA= -----END CERTIFICATE-----Generated at Tue Jul 1 02:33:21 2025 by rpki-client