$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa File: 9850d129-378e-38bd-a615-acb2a6e4e18b.roa (raw, json) Hash identifier: +pUQn4KiOK0XeaJEgoVmGqTko+cF+a6hqQaB6U3kfck= Subject key identifier: 1F:B4:98:FD:F2:E9:F6:A6:EB:CC:72:1C:98:DF:09:E9:CE:B8:C1:88 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FFDCB88A72087C6089C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 19795 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:ff:dc:b8:8a:72:08:7c:60:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=200fc3b4-9d2e-4270-9c10-65a531fa745c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:d0:93:c4:a4:b8:ed:19:c6:6f:f0:a3:bc: a8:bb:ce:e7:f8:dc:04:eb:c5:8b:62:dc:10:3d:47: e2:fb:15:d8:4b:d5:f4:47:fb:50:1c:ec:33:4c:ea: e1:25:7a:27:33:03:7f:bd:bc:9f:35:1e:e3:56:7f: 03:c7:68:02:3a:59:c9:e9:c7:3b:c7:60:0a:f6:57: d5:0d:38:e5:a4:e0:cc:1c:05:48:79:2a:29:ec:10: 4a:e4:a5:45:0d:b1:06:f4:19:57:20:78:41:ed:9b: a4:f2:d1:3f:44:af:71:89:0e:34:3e:27:d0:bb:2b: 2b:1f:4e:04:08:9a:0e:ab:4d:20:e8:45:98:b6:54: 32:4b:4c:9e:95:d9:0d:b5:78:99:f6:ac:56:0b:35: 53:e0:9f:19:55:c8:8f:42:4d:c0:88:ce:75:ea:8e: 2d:f2:1e:c9:76:d6:61:c7:a2:c1:4e:d9:21:bb:d8: 22:00:bb:97:ec:d3:22:d8:d6:ef:19:e1:53:7e:ca: 06:dd:ff:2b:ce:0e:ee:0c:c4:68:76:04:23:34:6a: b6:7c:a4:b3:1f:a4:f1:68:b3:95:17:20:39:0d:8e: ab:1f:ca:43:d2:83:3d:4a:3a:e6:bc:fe:48:dc:26: 3b:21:a9:76:ef:e2:cf:d8:a4:ae:3a:ac:88:c4:62: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B4:98:FD:F2:E9:F6:A6:EB:CC:72:1C:98:DF:09:E9:CE:B8:C1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:58:02:f4:6b:66:2d:f5:e6:67:9d:4d:4d:2c:22:2b:a7:d2: 0e:88:a0:88:a7:e1:35:22:a4:2b:01:7c:37:46:17:76:3b:bb: 2f:45:07:b0:60:ff:50:d0:4e:38:dd:04:30:51:ee:c5:91:8f: 04:fe:f0:96:a5:ba:71:d8:89:e8:2f:d9:0f:4d:f1:90:6d:33: 79:16:34:10:02:d4:df:f8:de:6a:3d:81:31:a2:37:1e:db:1f: 05:39:2a:c8:ab:97:ed:73:90:7c:17:67:3a:fc:03:b4:ca:76: 51:a7:05:0f:4f:71:da:90:a9:dd:8f:d2:d7:2b:7a:e5:bf:91: 6e:86:52:7a:c2:66:af:8b:ae:f5:27:02:e2:9f:93:9b:5a:14: 03:ad:46:a9:1c:30:ef:41:f9:6c:39:e1:b6:dd:98:e8:4d:9e: c1:fb:99:9b:41:83:a9:9d:f5:9f:e3:33:e1:76:89:f8:4a:ef: 09:02:3d:23:19:e7:48:44:fb:5a:d3:1e:a0:58:03:54:bd:ec: e6:a6:5f:5b:0a:44:8a:7a:2f:21:61:4b:47:da:b7:16:e1:c6: ab:6d:83:75:71:73:7f:89:b8:b7:f2:d1:e1:2c:11:2c:bf:ae: 6f:1c:f1:7b:0e:00:37:cc:2a:59:be:46:9d:9e:49:13:c4:ba: 63:71:c2:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8//cuIpyCHxgicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MjAwZmMzYjQtOWQyZS00MjcwLTljMTAtNjVhNTMxZmE3NDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKnQk8SkuO0Zxm/wo7you87n+NwE68WLYtwQ PUfi+xXYS9X0R/tQHOwzTOrhJXonMwN/vbyfNR7jVn8Dx2gCOlnJ6cc7x2AK9lfV DTjlpODMHAVIeSop7BBK5KVFDbEG9BlXIHhB7Zuk8tE/RK9xiQ40PifQuysrH04E CJoOq00g6EWYtlQyS0yeldkNtXiZ9qxWCzVT4J8ZVciPQk3AiM516o4t8h7JdtZh x6LBTtkhu9giALuX7NMi2NbvGeFTfsoG3f8rzg7uDMRodgQjNGq2fKSzH6TxaLOV FyA5DY6rH8pD0oM9SjrmvP5I3CY7Ial27+LP2KSuOqyIxGLb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+0mP3y6fam68xyHJjfCenOuMGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOTg1MGQxMjktMzc4ZS0z OGJkLWE2MTUtYWNiMmE2ZTRlMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9YAvRrZi315medTU0sIiun0g6IoIin4TUipCsBfDdGF3Y7uy9FB7Bg /1DQTjjdBDBR7sWRjwT+8JalunHYiegv2Q9N8ZBtM3kWNBAC1N/43mo9gTGiNx7b HwU5Ksirl+1zkHwXZzr8A7TKdlGnBQ9PcdqQqd2P0tcreuW/kW6GUnrCZq+LrvUn AuKfk5taFAOtRqkcMO9B+Ww54bbdmOhNnsH7mZtBg6md9Z/jM+F2ifhK7wkCPSMZ 50hE+1rTHqBYA1S97OamX1sKRIp6LyFhS0fatxbhxqttg3Vxc3+JuLfy0eEsESy/ rm8c8XsOADfMKlm+Rp2eSRPEumNxwp8= -----END CERTIFICATE-----Generated at Sun Apr 13 02:55:28 2025 by rpki-client