$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa File: 9d90aef9-02c7-3727-846e-6ace0a388a9f.roa (raw, json) Hash identifier: IO6L2U7Dgjzi6PYgZ6Cx+OfkEPOLZtgLmy10Urw4maI= Subject key identifier: 8E:2E:8C:E7:17:E8:EE:E4:CD:A7:5D:E1:01:63:2E:B7:C4:74:2B:E6 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F40001959ECBC9453B0240 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.85.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:00:01:95:9e:cb:c9:45:3b:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=6e2eab76-45c0-49f8-98ba-9350b8dd37b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:58:a8:31:81:8f:cb:92:b8:5c:5b:62:67: 5c:45:d4:c4:28:02:8f:e0:a9:5f:e1:db:55:1d:cf: 5d:d0:4d:96:62:28:46:76:c9:15:cd:10:98:23:21: b1:24:71:ef:72:18:57:79:80:ba:91:43:3c:cf:30: 4c:ec:64:42:77:b8:9b:0b:0b:b3:5d:44:99:78:5f: b7:db:56:31:8a:04:4b:6c:13:77:7d:a5:e3:02:ac: 8a:08:25:fa:5d:e3:6c:89:95:3e:66:b5:ba:26:98: b6:4a:96:6f:1c:d0:01:e9:ef:a0:b0:dd:29:5a:85: 14:af:f1:47:c3:d7:2c:d6:49:38:0f:8a:9e:b5:25: 91:dd:00:e4:27:b0:b0:dd:b8:b0:e0:ce:3b:7c:45: 84:d4:01:b9:02:f0:2f:b1:b6:8b:80:92:12:93:60: 63:07:6d:42:84:c2:bd:11:47:4d:ba:df:19:24:3e: 03:cc:b8:d0:58:c8:e6:7a:db:85:ed:96:02:0b:a1: dc:c6:3b:3f:40:53:c7:26:8a:86:96:53:ae:e9:28: b4:0e:89:0d:d1:22:23:17:81:0c:3c:d9:0d:bb:ac: 64:57:0d:9e:87:3d:2f:42:fa:37:a7:93:33:46:ac: 14:70:9d:6b:97:0d:94:84:16:d0:bd:53:ce:0d:bc: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2E:8C:E7:17:E8:EE:E4:CD:A7:5D:E1:01:63:2E:B7:C4:74:2B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90aef9-02c7-3727-846e-6ace0a388a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d0:33:6b:ba:76:87:12:70:5b:42:78:eb:9d:5f:9a:63:f2: 73:ed:c2:d8:ac:d8:1f:df:30:c6:d9:d6:c4:8c:5b:dc:59:2b: 08:c6:b0:ea:3a:a9:56:c2:68:d2:bf:2e:22:f2:b3:97:80:c0: 00:ef:1e:0f:6a:8f:27:06:29:7d:f1:34:d3:61:a9:12:1f:9c: e7:db:66:63:9d:24:c8:dd:6c:d6:17:a0:ba:07:e2:c6:f1:32: 8c:ac:22:1b:9e:82:91:85:58:3f:b5:98:d7:bb:ab:f9:74:4d: f5:ce:b6:cc:ed:45:7e:7c:bc:3b:77:c8:bd:f4:86:bb:ce:09: 3f:47:63:09:9c:65:09:15:04:df:df:af:cc:c6:f9:f2:0e:38: a1:11:1f:ee:b2:3c:1f:c2:4d:d7:e8:fb:45:80:2d:db:d3:56: 0c:11:4a:aa:56:5d:0b:2c:b8:83:a4:ae:19:c1:37:a6:62:a3: 7c:a7:59:06:1b:5e:48:bf:8c:60:69:c1:8c:a9:7a:94:2b:69: e6:30:13:fa:f1:99:6f:98:da:6f:63:65:69:af:e0:10:e1:bc: 5e:5c:ab:95:29:e0:90:e6:5f:5f:e6:52:d8:a1:4f:c8:9b:30: 5b:8e:05:76:90:ca:ed:dc:56:8c:08:d4:8c:9e:8a:90:18:7f: 50:26:9f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AABlZ7LyUU7AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NmUyZWFiNzYtNDVjMC00OWY4LTk4YmEtOTM1MGI4ZGQzN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv5YqDGBj8uSuFxbYmdcRdTEKAKP4Klf4dtV Hc9d0E2WYihGdskVzRCYIyGxJHHvchhXeYC6kUM8zzBM7GRCd7ibCwuzXUSZeF+3 21YxigRLbBN3faXjAqyKCCX6XeNsiZU+ZrW6Jpi2SpZvHNAB6e+gsN0pWoUUr/FH w9cs1kk4D4qetSWR3QDkJ7Cw3biw4M47fEWE1AG5AvAvsbaLgJISk2BjB21ChMK9 EUdNut8ZJD4DzLjQWMjmetuF7ZYCC6Hcxjs/QFPHJoqGllOu6Si0DokN0SIjF4EM PNkNu6xkVw2ehz0vQvo3p5MzRqwUcJ1rlw2UhBbQvVPODbz4YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4ujOcX6O7kzadd4QFjLrfEdCvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWQ5MGFlZjktMDJjNy0z NzI3LTg0NmUtNmFjZTBhMzg4YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrQM2u6docScFtCeOudX5pj8nPtwtis2B/fMMbZ1sSMW9xZKwjGsOo6 qVbCaNK/LiLys5eAwADvHg9qjycGKX3xNNNhqRIfnOfbZmOdJMjdbNYXoLoH4sbx MoysIhuegpGFWD+1mNe7q/l0TfXOtsztRX58vDt3yL30hrvOCT9HYwmcZQkVBN/f r8zG+fIOOKERH+6yPB/CTdfo+0WALdvTVgwRSqpWXQssuIOkrhnBN6Zio3ynWQYb Xki/jGBpwYypepQraeYwE/rxmW+Y2m9jZWmv4BDhvF5cq5Up4JDmX1/mUtihT8ib MFuOBXaQyu3cVowI1IyeipAYf1Amn70= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:25 2025 by rpki-client