$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa File: 67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa (raw, json) Hash identifier: RP00A3jokGJ+h/mDPMCPWJq9SEuhscoRcw6PdcRHWbc= Subject key identifier: EF:76:41:2F:69:1B:15:FF:16:7D:E9:C5:09:E0:EE:52:38:05:42:9D Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEBCF2CC8B8A3B79F94AB0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:bc:f2:cc:8b:8a:3b:79:f9:4a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=969c8100-9f9e-413d-bc3a-aa35cb0d33bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:4e:65:30:5f:f8:ef:b3:41:a2:c9:8a:bc: 64:65:f7:00:92:e2:0c:9c:ed:43:98:cf:f1:c4:ae: 7c:20:d2:5e:23:fe:1e:ce:18:29:29:73:a1:69:e7: 4b:61:07:43:8a:26:44:c8:69:30:fc:d5:35:ed:21: d6:fc:a8:f5:7a:21:92:38:f8:7f:55:06:f9:3e:6e: e6:b4:56:68:ec:c7:bb:62:6f:91:d4:c5:c1:93:25: d2:72:45:b9:71:bc:cf:45:97:ad:01:2f:32:63:2c: f5:88:f8:6b:a1:15:03:c1:ad:28:bd:70:c7:a2:53: 92:a5:78:ec:cf:4f:39:93:c1:50:ad:54:59:74:37: 86:9b:76:be:79:88:29:7d:4d:5a:df:dc:57:f0:bb: 09:7c:58:90:ec:7d:54:47:a4:d7:19:65:34:fe:e2: 6f:d9:1f:0e:55:69:08:c5:9a:78:83:dd:41:22:9e: 34:87:51:a2:38:51:8c:2c:a3:9a:95:16:14:d0:e2: 82:75:0c:69:0a:8e:78:57:4e:9c:7c:de:01:f3:72: e2:b4:e5:f0:76:ed:41:78:1e:45:3f:2b:bf:36:33: 1d:cb:78:8a:ca:9d:7d:a7:e6:b2:c9:34:cc:9d:92: ae:6e:ca:57:6c:6b:b2:c4:e4:22:6c:79:61:b6:73: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:76:41:2F:69:1B:15:FF:16:7D:E9:C5:09:E0:EE:52:38:05:42:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9d:b9:e0:fc:e7:4e:38:ff:02:ac:b0:ff:c7:1e:5d:43:31: 16:df:4a:41:83:5a:4f:da:1f:b8:6a:0d:8c:f5:ce:2f:d7:29: 85:96:03:59:19:80:fb:62:36:e5:81:87:b0:16:1c:d2:4a:24: 2f:4e:a6:6b:da:87:2e:14:9c:e5:2d:64:86:f4:62:07:9b:25: 44:bc:0c:3b:97:85:30:0c:09:a9:3f:ab:8b:7d:49:45:19:fb: 2d:b9:cb:ab:fa:15:f5:3c:fc:52:93:da:53:ee:36:80:f2:35: 95:13:77:0c:ea:a2:c3:82:4e:4e:62:63:01:57:c9:e3:15:f0: c2:74:1e:bf:72:82:80:c3:26:a7:2f:de:44:38:23:39:af:51: e0:b9:78:c2:b0:ba:5f:15:d9:ba:bd:13:aa:3d:d5:b7:a0:ab: bb:ff:2a:f2:82:66:b2:1d:30:84:64:bb:84:1e:e1:c4:86:9c: ff:f3:fe:5e:0f:d3:f9:43:1e:5b:00:7b:03:e3:0d:dc:cd:a6: 61:64:fd:5e:ee:9e:d5:00:42:ad:b0:9e:97:21:90:64:3b:eb: 0b:9b:e1:d0:16:6e:71:2a:66:fe:27:bb:a5:2a:71:45:a6:bb: 7c:96:03:06:69:92:1f:fc:2d:3d:65:38:ab:8e:52:a6:3f:f9: eb:24:21:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrzyzIuKO3n5SrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk OTY5YzgxMDAtOWY5ZS00MTNkLWJjM2EtYWEzNWNiMGQzM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo9OZTBf+O+zQaLJirxkZfcAkuIMnO1DmM/x xK58INJeI/4ezhgpKXOhaedLYQdDiiZEyGkw/NU17SHW/Kj1eiGSOPh/VQb5Pm7m tFZo7Me7Ym+R1MXBkyXSckW5cbzPRZetAS8yYyz1iPhroRUDwa0ovXDHolOSpXjs z085k8FQrVRZdDeGm3a+eYgpfU1a39xX8LsJfFiQ7H1UR6TXGWU0/uJv2R8OVWkI xZp4g91BIp40h1GiOFGMLKOalRYU0OKCdQxpCo54V06cfN4B83LitOXwdu1BeB5F Pyu/NjMdy3iKyp19p+ayyTTMnZKubspXbGuyxOQibHlhtnMjUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO92QS9pGxX/Fn3pxQng7lI4BUKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNjdmNGFiZmMtY2JjOC0z ZDRiLTlkNTYtOTBhZjBkNjBmYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCdueD85044/wKssP/HHl1DMRbfSkGDWk/aH7hqDYz1zi/XKYWWA1kZ gPtiNuWBh7AWHNJKJC9Opmvahy4UnOUtZIb0YgebJUS8DDuXhTAMCak/q4t9SUUZ +y25y6v6FfU8/FKT2lPuNoDyNZUTdwzqosOCTk5iYwFXyeMV8MJ0Hr9ygoDDJqcv 3kQ4IzmvUeC5eMKwul8V2bq9E6o91begq7v/KvKCZrIdMIRku4Qe4cSGnP/z/l4P 0/lDHlsAewPjDdzNpmFk/V7untUAQq2wnpchkGQ76wub4dAWbnEqZv4nu6UqcUWm u3yWAwZpkh/8LT1lOKuOUqY/+eskIfo= -----END CERTIFICATE-----Generated at Fri Apr 4 23:30:09 2025 by rpki-client