$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa File: 3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa (raw, json) Hash identifier: yDF3PLWwZYfXtwXiO+u6cA0OfjJnIArPuezVZ2UqciM= Subject key identifier: 4F:2C:E7:57:BF:CC:4B:B2:3D:AE:20:7B:50:6B:35:6F:FE:68:40:01 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEBD28775B03639CC2C7C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.85.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:bd:28:77:5b:03:63:9c:c2:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=7fd22e0d-ab20-430d-b2e1-66341b78316b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:2c:ce:07:1f:f9:c9:6a:5c:53:e4:9d:0a: e2:2a:1d:48:7d:68:df:1f:c1:db:4d:98:91:b4:47: 32:de:01:20:bb:5f:6d:69:0e:f0:b1:85:d9:fe:28: fb:ba:1a:af:a7:0b:44:fb:28:1e:ae:a8:d1:45:7e: 42:36:a8:62:00:35:45:ce:5e:05:de:c3:d3:d6:49: ff:db:9a:4e:6d:58:8e:da:94:f9:02:08:1a:59:5d: b4:20:4b:67:c6:52:bc:8b:b8:fa:a1:7c:2a:2b:29: bb:2b:29:51:2e:0c:b2:43:b5:50:01:38:89:46:07: 0a:cb:80:62:d9:0f:49:2b:2b:98:f7:f2:b3:85:c1: 45:b0:24:cd:cc:d2:b1:ca:8e:46:f6:45:3f:a1:26: 54:50:36:2d:6a:c0:b5:fb:55:6b:5c:53:ce:2f:da: b9:05:83:0e:ca:46:c2:e5:dd:d9:39:e0:a7:3d:7b: c4:22:02:4a:eb:c1:1b:9b:e7:7d:6c:bb:a5:51:8e: 16:cc:3c:e2:5e:69:2e:69:22:04:19:08:19:56:10: ce:9f:d5:24:c6:3d:69:55:c9:ab:c9:aa:ea:43:8a: d4:56:5b:2e:8d:c6:a8:21:73:10:5e:b3:7a:1e:49: 97:d0:4a:fc:f2:54:09:33:62:78:88:0b:7e:bf:15: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2C:E7:57:BF:CC:4B:B2:3D:AE:20:7B:50:6B:35:6F:FE:68:40:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3ba84ab8-21a0-397f-a467-ee76f4f9500d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:eb:a5:31:ba:88:9e:28:e0:e7:45:1b:2d:55:2b:95:ec:6a: ed:8a:2a:d9:9a:a4:90:55:fb:35:cc:2e:5b:70:34:c7:da:c4: f6:b5:2b:96:ff:24:e7:63:e8:99:e0:b6:db:4e:3a:13:ee:03: 63:32:12:f5:a2:ae:9b:75:12:ce:8b:80:5b:24:fb:75:04:db: db:3d:c1:bb:4c:c0:4d:19:e1:a7:b6:c8:31:76:53:be:3e:7c: f9:96:71:40:77:01:93:4d:c2:eb:75:eb:c8:f3:f0:a8:b1:cd: ea:c1:fb:b6:c3:5b:e9:a2:a4:6c:89:00:44:10:55:02:a0:e0: cf:8d:fe:c8:a7:70:72:fe:7f:66:6b:e4:f7:ae:a4:c3:4a:cc: 0e:ea:21:74:2b:c1:30:bc:5e:18:80:77:67:5c:18:2a:98:93: 32:fa:98:aa:14:8c:98:07:48:54:64:14:39:3d:41:3f:95:9b: d9:95:48:de:13:16:67:74:d1:dc:04:b7:89:db:c6:7b:49:6c: a0:7a:d8:ae:f6:7c:e1:b7:98:44:55:a8:e8:7f:8b:73:a0:ab: d5:77:8f:cf:63:16:da:ef:61:65:6a:ba:57:2e:52:0f:d5:9a: dd:42:35:85:69:f5:09:65:90:aa:6f:c4:9b:cc:ea:4e:02:d7: 39:35:fb:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavr0od1sDY5zCx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk N2ZkMjJlMGQtYWIyMC00MzBkLWIyZTEtNjYzNDFiNzgzMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNYszgcf+clqXFPknQriKh1IfWjfH8HbTZiR tEcy3gEgu19taQ7wsYXZ/ij7uhqvpwtE+ygerqjRRX5CNqhiADVFzl4F3sPT1kn/ 25pObViO2pT5AggaWV20IEtnxlK8i7j6oXwqKym7KylRLgyyQ7VQATiJRgcKy4Bi 2Q9JKyuY9/KzhcFFsCTNzNKxyo5G9kU/oSZUUDYtasC1+1VrXFPOL9q5BYMOykbC 5d3ZOeCnPXvEIgJK68Ebm+d9bLulUY4WzDziXmkuaSIEGQgZVhDOn9Ukxj1pVcmr yarqQ4rUVlsujcaoIXMQXrN6HkmX0Er88lQJM2J4iAt+vxXzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8s51e/zEuyPa4ge1BrNW/+aEABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvM2JhODRhYjgtMjFhMC0z OTdmLWE0NjctZWU3NmY0Zjk1MDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3rpTG6iJ4o4OdFGy1VK5Xsau2KKtmapJBV+zXMLltwNMfaxPa1K5b/ JOdj6JngtttOOhPuA2MyEvWirpt1Es6LgFsk+3UE29s9wbtMwE0Z4ae2yDF2U74+ fPmWcUB3AZNNwut168jz8KixzerB+7bDW+mipGyJAEQQVQKg4M+N/sincHL+f2Zr 5PeupMNKzA7qIXQrwTC8XhiAd2dcGCqYkzL6mKoUjJgHSFRkFDk9QT+Vm9mVSN4T Fmd00dwEt4nbxntJbKB62K72fOG3mERVqOh/i3Ogq9V3j89jFtrvYWVqulcuUg/V mt1CNYVp9QllkKpvxJvM6k4C1zk1+54= -----END CERTIFICATE-----Generated at Fri Apr 4 23:26:57 2025 by rpki-client