$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/dc0f5b59-b3d1-3f18-8c6b-8d0b2d4c2df4.roa File: dc0f5b59-b3d1-3f18-8c6b-8d0b2d4c2df4.roa (raw, json) Hash identifier: ubTa0DTlW/te+78slHLq+NPjdiLn85wks0aY791AmS0= Subject key identifier: 66:FF:59:55:07:9C:E3:FB:7D:96:49:52:84:AB:4B:1A:FC:01:47:52 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A3A15799F76B5F4DE5E826D80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/dc0f5b59-b3d1-3f18-8c6b-8d0b2d4c2df4.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 19795 IP address blocks: 208.85.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:79:9f:76:b5:f4:de:5e:82:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=e58b3898-5086-4ded-a6c2-fd29aaf650a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:17:af:29:0b:7b:04:bc:09:6e:be:cd:c5: 18:cc:ae:2d:8b:aa:64:48:27:f7:71:d2:3a:95:00: 73:24:ee:76:00:12:0a:3b:13:51:29:77:11:24:38: 4a:8e:72:ce:96:1a:a6:68:74:57:96:57:24:41:54: 13:33:e3:2e:1c:7c:ee:f3:76:68:e4:6d:76:a5:e9: f6:ca:c8:7b:9a:a9:0d:81:51:c1:3c:d3:c7:18:67: 3e:61:1c:90:43:16:09:5e:86:98:7d:e9:54:c4:4e: 11:d4:64:e5:8e:67:bf:a2:26:f4:42:99:d4:44:d8: a5:bd:51:5b:2f:14:e8:dc:7b:e6:80:b1:15:df:8c: 85:6f:9a:78:3c:d4:01:c3:fa:78:d2:24:7e:30:2b: d5:07:f1:d8:ae:39:55:76:23:d3:75:65:a6:9d:51: 7e:fe:ea:1b:fe:c8:3e:66:2d:9a:7a:a4:5a:f7:d0: 47:aa:0b:c1:7d:9a:01:a8:a5:45:7d:92:97:b1:10: 74:5d:53:81:f7:3a:49:74:c2:ed:2d:19:93:4f:a2: 99:e8:26:19:db:2a:d4:0d:c7:86:26:d0:74:6a:f8: c4:58:25:64:07:37:dc:b3:64:f9:a5:6f:59:05:17: 38:bd:cd:7d:ea:5a:c2:4b:d3:b4:45:ce:77:f6:55: b0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FF:59:55:07:9C:E3:FB:7D:96:49:52:84:AB:4B:1A:FC:01:47:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/dc0f5b59-b3d1-3f18-8c6b-8d0b2d4c2df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:94:c6:b1:93:36:46:68:71:4d:f5:06:f2:c9:19:7a:23:78: 38:a3:02:8a:98:dd:21:fa:3d:44:16:1b:29:c4:39:28:64:e3: 17:0d:29:99:6f:bb:33:a8:be:ee:38:40:24:95:20:70:c7:a9: 5d:ea:b7:08:ad:89:2f:28:5c:76:cb:64:e7:58:d2:f1:4e:b7: 78:cc:cf:79:f3:1a:c1:eb:64:3d:a6:87:20:3d:f9:99:26:37: a4:f1:80:a0:e8:2f:f3:cb:5f:85:61:dc:4d:28:a6:3d:83:88: 1b:ad:ae:5d:47:f4:5b:5e:a0:a9:e4:04:13:9d:37:3d:77:80: 09:ba:88:21:da:7f:48:e0:ec:a2:84:8a:0c:8a:9b:d3:5a:03: 30:47:8d:0e:23:35:81:82:00:28:cd:8c:3f:b3:82:86:78:34: 8a:42:5d:4b:c4:c9:e2:63:0f:0c:95:ef:10:bb:ee:1d:3e:e2: 94:8c:ad:7c:12:f0:a0:1f:b0:0d:87:e5:49:3a:89:af:5c:b2: d4:ac:24:64:da:8a:a9:5b:83:fe:33:33:a4:44:61:b0:fd:d1: 71:e0:bd:d7:32:a0:0f:28:4b:e8:70:ee:fa:ad:eb:a2:72:67: e2:3d:ff:59:e4:bd:76:bc:83:4b:51:b7:84:6b:c5:17:00:01: dc:a1:a1:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXmfdrX03l6CbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZTU4YjM4OTgtNTA4Ni00ZGVkLWE2YzItZmQyOWFhZjY1MGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7kXrykLewS8CW6+zcUYzK4ti6pkSCf3cdI6 lQBzJO52ABIKOxNRKXcRJDhKjnLOlhqmaHRXllckQVQTM+MuHHzu83Zo5G12pen2 ysh7mqkNgVHBPNPHGGc+YRyQQxYJXoaYfelUxE4R1GTljme/oib0QpnURNilvVFb LxTo3HvmgLEV34yFb5p4PNQBw/p40iR+MCvVB/HYrjlVdiPTdWWmnVF+/uob/sg+ Zi2aeqRa99BHqgvBfZoBqKVFfZKXsRB0XVOB9zpJdMLtLRmTT6KZ6CYZ2yrUDceG JtB0avjEWCVkBzfcs2T5pW9ZBRc4vc196lrCS9O0Rc539lWw2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb/WVUHnOP7fZZJUoSrSxr8AUdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZGMwZjViNTktYjNkMS0z ZjE4LThjNmItOGQwYjJkNGMyZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByUxrGTNkZocU31BvLJGXojeDijAoqY3SH6PUQWGynEOShk4xcNKZlv uzOovu44QCSVIHDHqV3qtwitiS8oXHbLZOdY0vFOt3jMz3nzGsHrZD2mhyA9+Zkm N6TxgKDoL/PLX4Vh3E0opj2DiButrl1H9FteoKnkBBOdNz13gAm6iCHaf0jg7KKE igyKm9NaAzBHjQ4jNYGCACjNjD+zgoZ4NIpCXUvEyeJjDwyV7xC77h0+4pSMrXwS 8KAfsA2H5Uk6ia9cstSsJGTaiqlbg/4zM6REYbD90XHgvdcyoA8oS+hw7vqt66Jy Z+I9/1nkvXa8g0tRt4RrxRcAAdyhoTE= -----END CERTIFICATE-----Generated at Sun Jun 29 10:43:13 2025 by rpki-client