$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa File: 8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa (raw, json) Hash identifier: Tntb1KS1aM3X51V2wJ6QNNYeWmb3xOGKKQ49oUPinVM= Subject key identifier: 2A:4F:96:9A:A7:C2:92:41:66:8C:CD:76:08:60:55:7F:7E:9B:B9:A4 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FA990DF2B989E172F340 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.85.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fa:99:0d:f2:b9:89:e1:72:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=ebd71a50-f870-4ee5-bdf2-0858246e46f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:11:59:c6:04:4f:ce:bc:bd:55:f9:00:e9: 7a:80:79:86:f8:b8:de:8a:46:21:33:23:71:cf:05: 16:75:8e:bb:0c:1c:7f:8c:15:6c:a2:f1:90:27:f7: dd:bb:43:42:e2:cb:9e:ab:22:74:e9:60:a5:49:b5: 6c:3f:6a:f4:5a:76:7c:41:15:30:df:57:03:75:3f: be:ec:94:59:74:c6:8c:90:23:05:db:69:60:8f:10: 8f:66:ef:86:9b:d9:61:fe:0f:1a:1e:4a:ea:e7:d1: ed:3d:4b:fe:c9:fe:62:e8:bc:95:7d:62:f6:78:91: a0:8e:5c:93:0e:2d:12:a7:5d:ff:33:50:ce:a6:96: 42:75:83:a7:42:ca:d5:84:3d:d1:bf:aa:16:15:eb: 56:5e:0f:61:01:44:75:48:c3:0e:8c:45:87:a9:10: a1:a0:a8:18:a7:3e:21:fc:49:be:87:85:35:d3:df: 18:58:0a:4c:75:6e:a1:4c:01:d2:d4:48:d5:07:ce: e7:b7:e8:4b:20:94:a1:cf:38:fa:57:d3:3e:b9:07: 39:56:88:33:03:48:e8:bd:3c:f6:cf:99:c3:f9:b3: b8:33:91:9f:c7:66:06:be:d3:19:19:3e:6b:91:93: da:cd:a2:15:a1:c5:87:c7:07:48:41:0f:83:a2:ec: d7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4F:96:9A:A7:C2:92:41:66:8C:CD:76:08:60:55:7F:7E:9B:B9:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8d12ed4b-29ff-3c88-91d5-b297addc44ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:10:ca:3e:f3:fb:12:fd:62:ae:21:53:7a:61:e6:14:31:3c: 1f:15:e2:e0:5e:34:b1:42:1b:9d:89:ac:8c:4e:a9:f8:fb:2a: 85:79:72:62:85:72:ba:6f:32:6b:fe:f6:47:dc:16:59:30:81: 37:8b:1f:40:40:1c:dd:13:f2:e9:19:34:44:ef:81:8c:8b:e2: 52:37:1d:db:82:86:ea:05:f6:5c:2d:6b:07:1d:a7:9a:c8:99: 88:34:93:9a:cc:af:0f:79:37:16:46:07:60:5b:f3:52:38:f5: 0f:52:70:2e:59:e5:ce:4e:24:fb:9d:ee:eb:0b:74:53:43:fd: 36:53:26:c1:9d:fd:89:79:c1:53:43:60:39:04:73:5d:3c:4f: c3:36:3c:cb:8f:74:2e:84:ae:0d:3f:ab:bc:c5:58:e0:9d:eb: 42:57:d2:ae:3e:9d:70:b3:e0:95:ed:a3:56:04:f5:a9:d7:69: 9b:67:05:34:51:c0:6a:f6:04:91:e4:15:67:f9:de:58:69:89: 0b:f2:d0:31:51:45:29:8d:15:0d:60:ed:bd:a8:6c:73:b6:c8: 9e:24:74:0b:7f:4e:b7:6d:d1:91:90:dc:f9:29:fc:36:72:94: 1f:98:1f:f4:e9:ff:22:62:25:d0:96:17:06:2e:9d:3d:c8:fb: 64:1f:21:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/qZDfK5ieFy80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZWJkNzFhNTAtZjg3MC00ZWU1LWJkZjItMDg1ODI0NmU0NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrcRWcYET868vVX5AOl6gHmG+LjeikYhMyNx zwUWdY67DBx/jBVsovGQJ/fdu0NC4sueqyJ06WClSbVsP2r0WnZ8QRUw31cDdT++ 7JRZdMaMkCMF22lgjxCPZu+Gm9lh/g8aHkrq59HtPUv+yf5i6LyVfWL2eJGgjlyT Di0Sp13/M1DOppZCdYOnQsrVhD3Rv6oWFetWXg9hAUR1SMMOjEWHqRChoKgYpz4h /Em+h4U1098YWApMdW6hTAHS1EjVB87nt+hLIJShzzj6V9M+uQc5VogzA0jovTz2 z5nD+bO4M5Gfx2YGvtMZGT5rkZPazaIVocWHxwdIQQ+DouzXDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpPlpqnwpJBZozNdghgVX9+m7mkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOGQxMmVkNGItMjlmZi0z Yzg4LTkxZDUtYjI5N2FkZGM0NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAQyj7z+xL9Yq4hU3ph5hQxPB8V4uBeNLFCG52JrIxOqfj7KoV5cmKF crpvMmv+9kfcFlkwgTeLH0BAHN0T8ukZNETvgYyL4lI3HduChuoF9lwtawcdp5rI mYg0k5rMrw95NxZGB2Bb81I49Q9ScC5Z5c5OJPud7usLdFND/TZTJsGd/Yl5wVND YDkEc108T8M2PMuPdC6Erg0/q7zFWOCd60JX0q4+nXCz4JXto1YE9anXaZtnBTRR wGr2BJHkFWf53lhpiQvy0DFRRSmNFQ1g7b2obHO2yJ4kdAt/Trdt0ZGQ3Pkp/DZy lB+YH/Tp/yJiJdCWFwYunT3I+2QfIQc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:59 2025 by rpki-client