$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa File: 081434ec-db05-34a7-8947-1ea9ac8b36b2.roa (raw, json) Hash identifier: nnt4dGKIEYXOCg0dcBEJQPyEkzNG2IE87OBv0+RQCtk= Subject key identifier: 0B:2B:26:4A:11:12:BF:A0:33:1F:53:79:86:06:3A:46:93:84:1A:E8 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEB72714F83764BAF22B80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 19795 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b7:27:14:f8:37:64:ba:f2:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=3f280111-8f5b-4c31-ac54-2a86603403a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:2f:c5:bb:f2:6d:13:93:58:dd:e5:79:63: 9f:a1:2f:94:51:18:ab:7f:e5:49:51:5c:08:90:6a: df:93:27:46:f8:ab:a8:f4:64:ef:4c:06:29:6a:37: 82:f4:e2:95:59:45:37:60:c5:3c:01:91:61:ac:da: b6:18:e4:b4:bd:c6:ed:11:ea:ed:28:d7:13:33:64: a0:e0:be:2b:d8:b6:de:bb:94:92:af:70:7d:54:d4: 22:81:9d:18:d7:5a:67:7d:5f:af:e8:27:99:26:36: e9:99:cf:ab:be:5a:74:5b:7d:c0:01:f8:80:95:2c: 67:ed:ba:5b:8f:4b:1d:26:f9:7c:6d:00:f1:4e:db: cc:1f:2d:23:1c:31:a1:06:14:93:19:4c:44:eb:97: dc:84:fc:1f:fe:16:00:2e:25:b7:f4:fd:e7:db:12: 43:a1:a9:0b:c7:85:05:b1:af:f5:69:65:ea:ab:af: ec:6d:2e:6a:61:3a:3a:16:ab:a8:18:1d:01:0b:30: 2c:1e:9c:01:7c:b1:78:bd:cb:bc:db:e2:dc:a6:d3: ae:90:f7:c9:0d:f6:33:89:a3:d3:1e:0c:29:f2:e7: 5a:1b:11:87:86:09:2c:c5:23:8a:f7:f9:30:35:58: 31:98:fa:d0:e6:ba:79:a9:48:3e:60:90:e2:70:82: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2B:26:4A:11:12:BF:A0:33:1F:53:79:86:06:3A:46:93:84:1A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:14:c2:38:1c:ef:fd:b3:3c:a2:2c:5e:e1:b6:ba:a2:39:b1: 75:e1:ba:62:10:21:0e:0f:5e:92:f8:1b:6e:ba:a8:2b:fe:40: 54:d0:e6:93:ab:0f:52:66:7f:1a:d5:44:6c:99:78:b9:d8:f3: 6e:34:f4:41:4a:47:63:91:8b:5e:55:1c:00:e8:86:ae:76:ee: 8b:3c:92:ca:96:e0:16:7b:c1:d6:48:3f:af:53:ba:84:99:a5: 16:9a:e2:06:01:18:ad:8d:17:48:67:77:f7:38:9a:32:55:f1: a5:1c:3b:b8:e4:7a:b4:1e:86:6a:19:e8:02:87:07:51:32:25: 8e:1c:11:ce:f8:a0:63:4b:9f:60:d8:43:ed:52:6f:46:11:36: 39:05:3a:c2:96:bb:38:cd:a4:ac:14:be:6b:cc:c3:23:01:e1: 8d:e8:63:71:15:8e:64:02:af:92:c2:66:d0:4d:e1:77:04:ba: 69:0e:b1:ac:49:d2:e0:0e:64:8b:9f:81:c2:f0:1d:fd:ee:e6: 7e:79:89:23:dd:79:35:24:05:12:68:b6:43:b6:0e:47:1b:d7: 82:3a:89:5d:8e:dc:32:50:8c:e8:bc:50:78:df:96:e7:85:a4: b3:a2:e0:a6:9f:df:22:2a:63:5d:1e:e3:6d:f4:12:e0:1c:aa: b4:f3:fc:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrcnFPg3ZLryK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk M2YyODAxMTEtOGY1Yi00YzMxLWFjNTQtMmE4NjYwMzQwM2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM0vxbvybROTWN3leWOfoS+UURirf+VJUVwI kGrfkydG+Kuo9GTvTAYpajeC9OKVWUU3YMU8AZFhrNq2GOS0vcbtEertKNcTM2Sg 4L4r2Lbeu5SSr3B9VNQigZ0Y11pnfV+v6CeZJjbpmc+rvlp0W33AAfiAlSxn7bpb j0sdJvl8bQDxTtvMHy0jHDGhBhSTGUxE65fchPwf/hYALiW39P3n2xJDoakLx4UF sa/1aWXqq6/sbS5qYTo6FquoGB0BCzAsHpwBfLF4vcu82+LcptOukPfJDfYziaPT Hgwp8udaGxGHhgksxSOK9/kwNVgxmPrQ5rp5qUg+YJDicIKQjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsrJkoREr+gMx9TeYYGOkaThBroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMDgxNDM0ZWMtZGIwNS0z NGE3LTg5NDctMWVhOWFjOGIzNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcUwjgc7/2zPKIsXuG2uqI5sXXhumIQIQ4PXpL4G266qCv+QFTQ5pOr D1JmfxrVRGyZeLnY82409EFKR2ORi15VHADohq527os8ksqW4BZ7wdZIP69TuoSZ pRaa4gYBGK2NF0hnd/c4mjJV8aUcO7jkerQehmoZ6AKHB1EyJY4cEc74oGNLn2DY Q+1Sb0YRNjkFOsKWuzjNpKwUvmvMwyMB4Y3oY3EVjmQCr5LCZtBN4XcEumkOsaxJ 0uAOZIufgcLwHf3u5n55iSPdeTUkBRJotkO2Dkcb14I6iV2O3DJQjOi8UHjflueF pLOi4Kaf3yIqY10e4230EuAcqrTz/L4= -----END CERTIFICATE-----Generated at Sat Apr 12 12:19:49 2025 by rpki-client