$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa File: 25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa (raw, json) Hash identifier: y4EMPUWPNFZGMtdnZQyCy668lJO27rGv2WsG2V2g294= Subject key identifier: C0:1E:81:14:00:D2:FC:59:6D:5F:AB:A4:5D:AB:17:F1:7A:12:F7:3B Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584A4110498EE2D8B9D514E9A400 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 64249 IP address blocks: 208.118.228.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:49:8e:e2:d8:b9:d5:14:e9:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=06ae2742-96c2-4f80-a9c8-12a4b5e95978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e3:ba:83:21:22:38:02:61:d7:7a:8a:ff:55: a2:21:67:32:ab:b1:56:81:d2:be:fd:14:6d:f7:68: 5f:b7:da:e4:62:d5:f9:43:a5:33:e8:be:9d:d8:69: 8f:1a:47:f3:d3:77:fc:c0:46:8b:ee:44:cb:5a:dd: 01:ef:4d:17:62:24:31:02:3e:07:51:b2:83:ff:9c: 76:a0:0f:bc:30:8f:e8:34:2e:a8:ec:24:58:92:76: cd:b7:1f:8b:34:fe:30:ec:75:d2:a2:33:fe:b2:39: f6:2e:b8:4a:3f:cd:63:bd:81:54:a4:a6:70:b5:2a: 51:4d:93:69:df:c1:0f:ac:75:cb:27:35:0f:16:b6: fb:98:1d:24:02:3c:e5:45:ee:e0:c3:d6:55:53:2e: c7:5c:91:9c:18:71:ea:73:b7:36:a2:18:97:54:5c: b2:b9:24:01:9d:79:37:48:a6:57:47:97:36:a2:5a: 01:7d:17:e8:a4:31:43:d4:6a:4e:cd:66:e4:1b:39: 9a:4c:20:ea:5e:67:56:64:3c:c7:d5:c6:a9:53:7b: 91:12:e1:9c:99:e2:10:2b:31:ac:f1:48:0f:04:c4: 0a:9e:84:be:22:d9:c4:ee:28:0f:43:7e:25:38:ed: 11:33:5d:cb:1f:29:6b:6c:91:8a:3c:54:0c:19:8c: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1E:81:14:00:D2:FC:59:6D:5F:AB:A4:5D:AB:17:F1:7A:12:F7:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.228.160/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:28:ca:91:7a:00:e2:4f:54:ed:bd:fb:a6:c6:c8:f3:b3:62: 5f:b8:ad:2b:b6:22:1b:59:5d:98:45:93:7b:b2:11:5b:68:49: 43:0e:6c:0e:c7:df:22:d3:24:bd:ac:41:a4:7b:90:59:0c:cb: 3e:17:e2:72:fa:ba:6e:59:b1:4e:65:b0:46:b8:54:26:a5:e0: d2:f7:20:4e:5a:e5:6b:b5:a7:f6:70:67:1c:d5:76:ad:af:fa: 52:3b:a1:fb:1d:78:b8:0a:e3:e1:6c:a7:ad:e1:3d:d4:2e:3f: 6e:7a:94:a3:68:6f:9b:a6:51:85:87:55:32:7f:c1:b6:f0:f7: 05:67:a8:94:48:b2:62:e8:0f:75:76:59:d7:fd:fa:46:5c:22: 99:b2:25:f7:10:61:58:4a:44:cb:76:d1:09:0c:3c:2e:25:97: e9:58:82:82:83:49:85:5d:d6:3a:46:c1:ed:74:c3:f7:9d:50: d7:aa:1c:6f:bf:ce:f1:ae:2c:60:e6:6f:2e:fe:89:c9:1d:e0: 54:76:22:dc:37:d8:20:29:4a:c4:ad:67:d7:f8:a5:67:51:25: f2:de:35:eb:2a:2c:43:6a:bb:0c:f9:73:7a:b7:5f:07:f7:0c: 18:af:9a:df:d0:c8:ea:76:2e:ef:2e:5a:4f:06:f2:8d:80:34: 18:e3:a2:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpBEEmO4ti51RTppAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk MDZhZTI3NDItOTZjMi00ZjgwLWE5YzgtMTJhNGI1ZTk1OTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuO6gyEiOAJh13qK/1WiIWcyq7FWgdK+/RRt 92hft9rkYtX5Q6Uz6L6d2GmPGkfz03f8wEaL7kTLWt0B700XYiQxAj4HUbKD/5x2 oA+8MI/oNC6o7CRYknbNtx+LNP4w7HXSojP+sjn2LrhKP81jvYFUpKZwtSpRTZNp 38EPrHXLJzUPFrb7mB0kAjzlRe7gw9ZVUy7HXJGcGHHqc7c2ohiXVFyyuSQBnXk3 SKZXR5c2oloBfRfopDFD1GpOzWbkGzmaTCDqXmdWZDzH1capU3uREuGcmeIQKzGs 8UgPBMQKnoS+ItnE7igPQ34lOO0RM13LHylrbJGKPFQMGYzLzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMAegRQA0vxZbV+rpF2rF/F6Evc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMjVhMmM0YjgtMmVhYS0z YzhmLWI3ZjMtYTFlYzk1NDcwNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0HbkoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOKMqRegDiT1Ttvfumxsjzs2JfuK0rtiIbWV2YRZN7shFbaElDDmwO x98i0yS9rEGke5BZDMs+F+Jy+rpuWbFOZbBGuFQmpeDS9yBOWuVrtaf2cGcc1Xat r/pSO6H7HXi4CuPhbKet4T3ULj9uepSjaG+bplGFh1Uyf8G28PcFZ6iUSLJi6A91 dlnX/fpGXCKZsiX3EGFYSkTLdtEJDDwuJZfpWIKCg0mFXdY6RsHtdMP3nVDXqhxv v87xrixg5m8u/onJHeBUdiLcN9ggKUrErWfX+KVnUSXy3jXrKixDarsM+XN6t18H 9wwYr5rf0Mjqdi7vLlpPBvKNgDQY46J6 -----END CERTIFICATE-----Generated at Mon Jun 30 01:11:57 2025 by rpki-client