$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa File: 4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa (raw, json) Hash identifier: io5CoNp4JYcb698+0NzF/tpCiBgakeoMf8+uwOO3Kq8= Subject key identifier: 3F:35:87:52:AB:EC:7D:D0:F1:14:8C:DB:6E:5B:95:A9:7E:DC:83:0F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEB74C79167BAE5D1781C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b7:4c:79:16:7b:ae:5d:17:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=3f88282a-fb4a-4859-b575-4d2890073ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bb:f5:5d:58:6b:b5:cc:98:4a:cb:33:50:70: b2:f3:0b:07:48:bc:65:4f:7e:19:e0:c0:ca:78:73: 57:4b:a4:26:d0:21:b0:4e:4a:f7:47:0e:af:56:8b: a3:62:2a:34:ac:15:85:51:67:61:11:01:25:d2:d9: 24:51:2a:c1:d3:8f:83:a9:d7:2e:6f:cc:2d:15:f3: 13:3e:ca:98:95:f4:4b:02:93:3f:58:71:a9:21:cc: 42:7a:2e:13:40:6a:0f:d6:0d:ab:63:53:54:7f:00: 4e:77:54:37:1b:b6:18:99:4d:5d:76:a5:f3:6a:2c: af:6e:e1:46:7a:5c:8b:d2:f4:98:14:49:03:9c:f2: 0f:13:bf:80:cf:69:9a:58:d9:a2:ee:2d:0b:cc:7d: 39:1e:9b:e1:f0:01:c0:12:ff:26:d1:b7:d3:16:ce: 07:ee:da:d9:72:e1:10:28:ff:63:25:cc:74:0c:47: 60:44:cc:2f:79:6a:83:b5:e9:e8:ec:c2:1b:20:3e: f6:c4:96:95:06:9f:56:99:73:1a:22:94:e6:1f:6f: bf:e1:18:08:a7:08:e9:f7:3d:9d:50:cb:c3:a9:a2: e7:72:2b:4a:ec:a5:20:84:c7:df:ec:0c:8e:e4:49: f7:8e:d5:1e:fc:bb:c4:bf:75:9a:30:e3:10:ca:a6: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:35:87:52:AB:EC:7D:D0:F1:14:8C:DB:6E:5B:95:A9:7E:DC:83:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a0:e5:70:45:c6:bf:56:1c:15:d4:f9:7c:60:7d:5b:21:69: cf:01:00:e3:40:d6:56:fd:9d:91:1a:e2:6c:03:b5:02:b8:86: af:f3:60:ea:70:27:1e:ba:71:6a:33:cf:e8:da:3f:8f:e5:3a: 4b:ed:1d:d9:63:82:f9:ba:1e:fe:bf:0a:f1:d9:ad:b6:ca:c4: 5f:bb:0c:20:e8:6a:e5:2c:13:24:c5:e1:8f:34:c8:51:b0:7b: f1:d1:09:8f:2e:53:70:3c:56:5a:f8:94:45:c6:cc:92:55:2e: 76:55:48:5d:3e:0d:d1:3c:b4:42:30:49:5c:2c:04:20:60:e1: 13:5b:8a:48:8c:d9:79:f7:d7:24:c7:2f:6a:e1:c5:92:50:2a: 16:e7:91:8d:a4:69:f2:af:66:d3:d1:ce:58:c1:9a:a8:e8:37: f3:2b:09:08:21:8e:e1:1d:39:32:fb:0a:36:6c:32:1b:e9:21: b7:5b:8f:82:69:65:73:82:44:80:c3:de:80:ae:c0:c8:fb:e9: 8d:82:2a:67:d1:9f:81:46:86:83:4c:29:af:42:a2:e9:a9:f7: 78:c4:48:87:ef:23:e3:2a:da:bc:b6:00:91:ae:67:19:bb:e4: 4c:dc:e1:f1:c0:d4:15:15:f5:4e:fa:37:f2:53:d3:ff:a2:cf: f3:72:fa:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrdMeRZ7rl0XgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk M2Y4ODI4MmEtZmI0YS00ODU5LWI1NzUtNGQyODkwMDczZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrv1XVhrtcyYSsszUHCy8wsHSLxlT34Z4MDK eHNXS6Qm0CGwTkr3Rw6vVoujYio0rBWFUWdhEQEl0tkkUSrB04+Dqdcub8wtFfMT PsqYlfRLApM/WHGpIcxCei4TQGoP1g2rY1NUfwBOd1Q3G7YYmU1ddqXzaiyvbuFG elyL0vSYFEkDnPIPE7+Az2maWNmi7i0LzH05Hpvh8AHAEv8m0bfTFs4H7trZcuEQ KP9jJcx0DEdgRMwveWqDteno7MIbID72xJaVBp9WmXMaIpTmH2+/4RgIpwjp9z2d UMvDqaLncitK7KUghMff7AyO5En3jtUe/LvEv3WaMOMQyqbZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD81h1Kr7H3Q8RSM225blal+3IMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNGU0YzBlODEtZTE2Zi0z ZTg4LThlZjMtZWU0Zjg0NWFjOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOg5XBFxr9WHBXU+XxgfVshac8BAONA1lb9nZEa4mwDtQK4hq/zYOpw Jx66cWozz+jaP4/lOkvtHdljgvm6Hv6/CvHZrbbKxF+7DCDoauUsEyTF4Y80yFGw e/HRCY8uU3A8Vlr4lEXGzJJVLnZVSF0+DdE8tEIwSVwsBCBg4RNbikiM2Xn31yTH L2rhxZJQKhbnkY2kafKvZtPRzljBmqjoN/MrCQghjuEdOTL7CjZsMhvpIbdbj4Jp ZXOCRIDD3oCuwMj76Y2CKmfRn4FGhoNMKa9Coump93jESIfvI+Mq2ry2AJGuZxm7 5Ezc4fHA1BUV9U76N/JT0/+iz/Ny+k0= -----END CERTIFICATE-----Generated at Fri Apr 4 23:29:14 2025 by rpki-client