$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa File: 90a9dec8-a24a-3de0-9901-58e74af63e3e.roa (raw, json) Hash identifier: YFjMWxBPmxAbbLZfTrWSKOh596sifZMtB+YQrZBnGoA= Subject key identifier: 6C:2C:6A:97:BB:DC:D8:D1:0F:F5:25:49:D5:3F:50:79:80:47:85:6D Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F43285849CBCF96867AB7018DDC1B1880 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 22147 IP address blocks: 208.118.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:96:86:7a:b7:01:8d:dc:1b:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=3756db6d-3216-4877-bd1e-592e9dbcc562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:4f:90:fc:bc:47:6e:87:5e:15:c2:76:2c: ac:3c:c5:c9:00:22:7b:b4:68:89:90:3f:91:ca:9c: 47:9e:3f:40:1b:fc:09:c5:ec:2f:5f:0e:e4:ea:43: 2c:ca:0a:37:8c:86:68:e5:d3:85:d5:e9:4d:f1:b9: 04:47:54:a6:86:e1:df:96:b1:2f:0c:ec:d0:8a:2f: e5:fa:1a:8e:c4:03:2f:45:bf:60:a7:9f:ca:fb:c6: 27:00:40:11:84:6e:84:1d:81:23:eb:b7:22:30:c2: 13:4d:dc:95:75:36:e0:b7:86:91:05:cc:49:00:57: 8c:a7:57:33:97:ef:49:65:32:f1:f4:46:23:06:16: 2c:f0:e0:87:a0:e7:5e:6c:4d:ad:dd:cf:80:0c:3c: 63:1f:18:38:c2:8d:ab:f0:6a:25:d9:ac:2a:3b:e4: aa:f1:2b:35:c2:d6:23:c4:d1:7a:20:31:59:95:15: d5:f6:3a:8d:26:e1:aa:f4:dc:38:30:42:a9:4e:aa: 14:48:d5:0e:a4:ab:21:89:76:7e:f4:76:3b:c9:67: 04:22:08:25:e3:53:bc:3c:95:8f:4b:3d:b7:cd:a3: e9:5d:09:ce:79:40:8a:90:75:eb:5b:7f:b9:6a:c4: 5c:7c:f7:20:00:5e:d3:d5:0b:64:d5:96:16:2f:04: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2C:6A:97:BB:DC:D8:D1:0F:F5:25:49:D5:3F:50:79:80:47:85:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:53:d1:05:66:18:ed:14:06:2e:6f:7c:b2:c2:99:ab:2e:7b: d9:43:78:ef:5c:92:90:64:6d:71:73:cb:c8:40:e7:4b:bb:65: aa:a0:e1:7f:af:ed:5f:83:e4:82:88:7d:d6:58:67:f8:a9:19: f9:03:cb:fe:f7:1d:4e:20:74:bb:0d:9d:01:a3:9a:7d:61:f3: 9d:e9:41:31:81:b1:55:4c:8f:f4:ef:10:f0:80:b9:38:24:12: 99:5d:12:0c:a1:33:87:f2:48:93:3b:81:bb:60:fb:be:81:c6: c3:65:76:9f:47:d6:ee:b2:6d:af:f8:8f:e3:96:25:b2:f7:86: 99:b8:02:2e:2d:9b:95:f6:db:3f:86:85:59:6c:37:e5:9f:44: d0:aa:32:d4:4f:79:ea:f3:cf:49:73:df:10:01:c0:0d:2d:d6: ff:0a:45:e2:26:eb:f5:00:cd:26:65:73:11:78:6e:4f:70:0b: 92:0c:95:b8:f4:08:d4:14:e0:c3:41:bf:d3:0b:8b:4b:95:af: 83:48:25:62:b2:e4:06:e4:bc:d5:0d:ea:fc:06:b3:5e:f9:12: 32:b6:f3:b9:ab:ff:62:7b:dd:c0:53:9c:1c:c2:c4:c3:d2:f1: e6:97:28:4a:fc:26:b8:eb:0a:32:67:c4:5e:19:c4:b7:a5:6c: 42:b1:a1:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5aGercBjdwbGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk Mzc1NmRiNmQtMzIxNi00ODc3LWJkMWUtNTkyZTlkYmNjNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA365PkPy8R26HXhXCdiysPMXJACJ7tGiJkD+R ypxHnj9AG/wJxewvXw7k6kMsygo3jIZo5dOF1elN8bkER1SmhuHflrEvDOzQii/l +hqOxAMvRb9gp5/K+8YnAEARhG6EHYEj67ciMMITTdyVdTbgt4aRBcxJAFeMp1cz l+9JZTLx9EYjBhYs8OCHoOdebE2t3c+ADDxjHxg4wo2r8Gol2awqO+Sq8Ss1wtYj xNF6IDFZlRXV9jqNJuGq9Nw4MEKpTqoUSNUOpKshiXZ+9HY7yWcEIggl41O8PJWP Sz23zaPpXQnOeUCKkHXrW3+5asRcfPcgAF7T1Qtk1ZYWLwTREQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwsape73NjRD/UlSdU/UHmAR4VtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTBhOWRlYzgtYTI0YS0z ZGUwLTk5MDEtNThlNzRhZjYzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRT0QVmGO0UBi5vfLLCmasue9lDeO9ckpBkbXFzy8hA50u7Zaqg4X+v 7V+D5IKIfdZYZ/ipGfkDy/73HU4gdLsNnQGjmn1h853pQTGBsVVMj/TvEPCAuTgk EpldEgyhM4fySJM7gbtg+76BxsNldp9H1u6yba/4j+OWJbL3hpm4Ai4tm5X22z+G hVlsN+WfRNCqMtRPeerzz0lz3xABwA0t1v8KReIm6/UAzSZlcxF4bk9wC5IMlbj0 CNQU4MNBv9MLi0uVr4NIJWKy5AbkvNUN6vwGs175EjK287mr/2J73cBTnBzCxMPS 8eaXKEr8JrjrCjJnxF4ZxLelbEKxoTc= -----END CERTIFICATE-----Generated at Mon Jun 30 10:30:14 2025 by rpki-client