$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa File: ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa (raw, json) Hash identifier: QAHmrQxKmRR76sW+ZPMHk/RlFz54OiOZjhxSrnuVeI8= Subject key identifier: 85:BD:6D:65:B1:C1:FF:F4:AA:2B:89:F9:0D:B1:73:A6:42:97:42:70 Certificate issuer: /CN=0e002701-2485-4643-ba40-3ea23fa41085 Certificate serial: 010D0C9F43285849F715274EC849C96C300F8000 Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 394997 IP address blocks: 208.86.98.0/23 maxlen: 23 208.86.98.0/24 maxlen: 24 208.86.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:27:4e:c8:49:c9:6c:30:0f:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=a6fba9a5-c80e-4260-9173-c38b71af3e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:97:be:e4:51:90:9d:48:9e:1e:48:cf:a2:1a: 4e:84:bb:01:47:23:30:9e:53:23:85:9e:a5:0d:24: cb:22:8b:95:aa:91:9e:f7:67:ca:75:3d:50:b4:7a: 2e:e0:61:55:b3:71:e5:50:cf:25:f5:90:78:b6:11: b6:96:62:81:ec:83:45:57:2e:19:54:07:eb:41:bb: 75:cf:fd:73:a3:d2:32:17:c2:d4:ce:7b:89:8c:ad: 32:7e:9a:c4:9c:ce:f4:51:d6:b3:d0:b9:ff:05:5f: 18:2c:f8:bc:ce:10:63:2e:e1:a8:05:36:ff:37:53: e7:c5:04:47:57:4d:c3:9b:f5:19:ce:4e:ac:53:9c: fa:87:3f:51:da:16:6c:5c:c9:62:1b:d3:c8:38:12: 64:39:b4:bb:bd:41:be:b3:5e:3b:1d:1e:70:7f:0c: 7c:10:ef:c2:af:1f:0d:53:8c:60:c1:84:f1:3f:59: 7b:ee:69:4e:a9:55:b1:c6:78:c4:60:e9:a4:8f:8f: 4f:fc:82:1f:4e:d7:68:a7:06:fb:de:87:62:15:0e: ed:67:fa:3e:0c:4e:2c:30:ea:32:fa:d0:92:a8:6e: 72:c2:ef:00:90:27:1a:53:bc:01:b7:ea:2f:f2:2a: 98:db:31:32:59:44:56:1c:24:8f:bd:49:44:cc:e8: 2f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BD:6D:65:B1:C1:FF:F4:AA:2B:89:F9:0D:B1:73:A6:42:97:42:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl X509v3 Authority Key Identifier: keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer sbgp-ipAddrBlock: critical IPv4: 208.86.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1a:53:d3:4d:60:ee:fe:c0:b3:7b:0f:f4:0f:f0:7f:cf:6f: 3f:a4:13:dd:43:0e:79:13:01:0e:3b:54:3f:5a:46:8c:d8:eb: 7e:bf:ea:cd:ad:68:63:f8:57:25:60:dc:c5:62:50:fd:83:7b: ea:a0:f8:a3:f0:8a:a6:c3:76:84:dc:71:50:10:49:fd:95:73: 2e:1d:24:53:17:56:e5:50:e3:fa:e0:41:2c:bb:79:2b:08:b7: e5:e7:43:56:f3:75:09:98:5c:74:60:2c:22:5f:37:f1:df:56: c0:17:c9:8d:29:c2:05:15:f5:13:ac:06:de:dd:e9:9c:ee:3d: 11:5d:0d:0d:85:dc:58:75:32:8f:15:ed:7c:e3:67:6c:1b:48: 53:a0:80:6e:ba:a7:83:80:b6:55:fd:69:4c:a1:a2:d5:b6:6b: 97:da:09:81:fa:f8:11:c7:46:16:db:ad:57:cf:57:7c:c3:ff: d5:ac:be:34:41:98:52:86:97:11:2b:0b:80:bb:03:0c:9f:5b: 4a:3e:2e:a9:a1:aa:9e:b3:81:d1:84:ba:f3:06:73:da:46:3e: 32:72:46:d7:b5:4f:61:73:5e:eb:74:7a:2f:3a:e5:d1:d0:b3: 0f:c5:03:c7:ab:41:3b:46:f7:14:c4:71:46:97:19:7c:4e:9a: ab:58:93:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSdOyEnJbDAPgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMDI3MDEtMjQ4NS00NjQzLWJhNDAtM2VhMjNmYTQx MDg1MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk YTZmYmE5YTUtYzgwZS00MjYwLTkxNzMtYzM4YjcxYWYzZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5e+5FGQnUieHkjPohpOhLsBRyMwnlMjhZ6l DSTLIouVqpGe92fKdT1QtHou4GFVs3HlUM8l9ZB4thG2lmKB7INFVy4ZVAfrQbt1 z/1zo9IyF8LUznuJjK0yfprEnM70Udaz0Ln/BV8YLPi8zhBjLuGoBTb/N1PnxQRH V03Dm/UZzk6sU5z6hz9R2hZsXMliG9PIOBJkObS7vUG+s147HR5wfwx8EO/Crx8N U4xgwYTxP1l77mlOqVWxxnjEYOmkj49P/IIfTtdopwb73odiFQ7tZ/o+DE4sMOoy +tCSqG5ywu8AkCcaU7wBt+ov8iqY2zEyWURWHCSPvUlEzOgv/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW9bWWxwf/0qiuJ+Q2xc6ZCl0JwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wZTAw MjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEyM2ZhNDEwODUvYmE4ZjI2ZjktMzI0YS0z N2FlLTg2ZDYtMzRhNWZkZjU1YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGUwMDI3MDEtMjQ4NS00NjQzLWJh NDAtM2VhMjNmYTQxMDg1LzBlMDAyNzAxLTI0ODUtNDY0My1iYTQwLTNlYTIzZmE0 MTA4NS5jcmwwHwYDVR0jBBgwFoAUiSRXgYKbGGNF7kCuaVirmjXlYqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wZTAwMjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEy M2ZhNDEwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoaU9NNYO7+wLN7D/QP8H/Pbz+kE91DDnkTAQ47VD9aRozY636/6s2t aGP4VyVg3MViUP2De+qg+KPwiqbDdoTccVAQSf2Vcy4dJFMXVuVQ4/rgQSy7eSsI t+XnQ1bzdQmYXHRgLCJfN/HfVsAXyY0pwgUV9ROsBt7d6ZzuPRFdDQ2F3Fh1Mo8V 7XzjZ2wbSFOggG66p4OAtlX9aUyhotW2a5faCYH6+BHHRhbbrVfPV3zD/9WsvjRB mFKGlxErC4C7AwyfW0o+Lqmhqp6zgdGEuvMGc9pGPjJyRte1T2FzXut0ei865dHQ sw/FA8erQTtG9xTEcUaXGXxOmqtYk/s= -----END CERTIFICATE-----Generated at Thu Jul 10 13:29:13 2025 by rpki-client