$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa File: d507668b-e70a-32a7-9458-c5a581f7b715.roa (raw, json) Hash identifier: Dlfjk6qCimAT8kEdHvC8kCUhA5hVL7Rr/YRBF6EPEOk= Subject key identifier: D0:8B:79:F7:6F:7E:3A:07:12:99:C2:1C:D1:41:FA:3A:11:2D:29:20 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A3A1573B80F84695657D5F800 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:73:b8:0f:84:69:56:57:d5:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=7351e2f1-2780-4244-986c-1d9e4807a20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:92:47:fa:3f:3a:b1:73:3f:25:2b:bf:26: b5:79:25:fa:72:42:12:a1:2c:d7:c6:8c:f2:87:32: c7:43:27:4b:a0:6f:5e:c5:0f:ec:08:55:55:08:e1: 20:47:66:06:e7:14:fa:de:39:9f:24:3f:5b:46:68: 44:2c:11:35:90:1d:83:4b:b1:8e:5c:d8:69:52:72: 5b:d9:8c:f2:2d:02:4d:cb:cf:47:4c:d2:91:f0:71: db:69:e1:c9:a5:32:4c:1a:b3:e0:08:06:73:10:1b: d9:79:c9:52:7b:19:70:7d:36:3e:97:94:f6:8b:54: f9:5f:64:dd:0a:64:90:3a:a9:e8:ac:dd:96:a0:a5: 04:d7:17:0a:6a:05:6f:ed:18:68:b7:06:bf:f0:ee: e2:0a:94:d5:54:29:61:99:00:0f:5f:e2:f1:92:af: 85:25:01:8d:40:05:20:d4:91:1b:1d:22:6b:96:85: af:2e:6c:40:69:6f:f2:c1:5b:a7:f5:b3:f8:f5:30: 9c:79:40:58:8f:b7:0f:fa:f7:8a:d7:75:34:64:93: 34:e2:e0:da:bd:3f:e2:e7:95:86:1d:b4:6e:c4:d7: 31:3a:83:89:0f:1b:f5:68:01:60:2d:0a:f6:bf:d9: 44:fc:1e:fb:3e:e0:a2:5e:11:7e:47:8a:7d:12:df: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8B:79:F7:6F:7E:3A:07:12:99:C2:1C:D1:41:FA:3A:11:2D:29:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ad:a7:db:af:f7:5d:71:94:14:6c:2a:53:a1:e2:41:23:2b: e6:89:b5:3e:c2:60:f0:5b:c7:4e:5d:12:9e:9d:d3:cf:cd:ac: b7:9b:5c:85:28:50:9e:59:e1:56:53:3d:85:31:b3:5b:5f:c4: f5:d9:0a:8d:8c:27:d4:f1:62:15:73:db:a0:89:46:fa:d8:92: 0b:45:54:6f:60:dc:42:a4:b9:8b:a2:38:91:cc:44:59:16:c9: 31:fe:1c:87:d5:47:40:57:a9:e3:17:15:c9:07:9a:16:cc:f4: 61:90:e5:73:32:fc:00:8d:fc:4e:f3:74:ed:0b:5a:1b:23:e0: 05:3f:ec:cb:78:6a:87:02:48:0b:51:3a:6a:8e:5b:83:c8:08: 9f:7d:bc:e0:85:ed:32:ea:8e:8b:eb:a0:46:82:3a:a4:3c:29: 66:3e:92:70:b1:34:b8:c5:5f:fb:e2:3b:bf:a5:04:b9:df:e6: 9e:ac:71:51:f4:c4:3e:b8:ad:99:21:19:00:fd:5e:60:ab:af: 84:c1:bf:eb:60:b2:a8:2d:3e:92:c5:0f:2c:53:37:77:69:ad: 5e:a7:c2:c4:9e:d7:43:ca:97:57:a3:dd:0f:37:29:95:4e:c7: e0:17:f9:09:04:53:09:2e:a0:30:d0:eb:83:9a:d5:37:63:69: 39:c8:c7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXO4D4RpVlfV+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NzM1MWUyZjEtMjc4MC00MjQ0LTk4NmMtMWQ5ZTQ4MDdhMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkimSR/o/OrFzPyUrvya1eSX6ckISoSzXxozy hzLHQydLoG9exQ/sCFVVCOEgR2YG5xT63jmfJD9bRmhELBE1kB2DS7GOXNhpUnJb 2YzyLQJNy89HTNKR8HHbaeHJpTJMGrPgCAZzEBvZeclSexlwfTY+l5T2i1T5X2Td CmSQOqnorN2WoKUE1xcKagVv7Rhotwa/8O7iCpTVVClhmQAPX+Lxkq+FJQGNQAUg 1JEbHSJrloWvLmxAaW/ywVun9bP49TCceUBYj7cP+veK13U0ZJM04uDavT/i55WG HbRuxNcxOoOJDxv1aAFgLQr2v9lE/B77PuCiXhF+R4p9Et/AYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCLefdvfjoHEpnCHNFB+joRLSkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZDUwNzY2OGItZTcwYS0z MmE3LTk0NTgtYzVhNTgxZjdiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACStp9uv911xlBRsKlOh4kEjK+aJtT7CYPBbx05dEp6d08/NrLebXIUo UJ5Z4VZTPYUxs1tfxPXZCo2MJ9TxYhVz26CJRvrYkgtFVG9g3EKkuYuiOJHMRFkW yTH+HIfVR0BXqeMXFckHmhbM9GGQ5XMy/ACN/E7zdO0LWhsj4AU/7Mt4aocCSAtR OmqOW4PICJ99vOCF7TLqjovroEaCOqQ8KWY+knCxNLjFX/viO7+lBLnf5p6scVH0 xD64rZkhGQD9XmCrr4TBv+tgsqgtPpLFDyxTN3dprV6nwsSe10PKl1ej3Q83KZVO x+AX+QkEUwkuoDDQ64Oa1TdjaTnIx2c= -----END CERTIFICATE-----Generated at Sun Jun 29 04:21:13 2025 by rpki-client