$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bbfbc95a-ddcc-35fe-b01c-9398a6e7c574.roa File: bbfbc95a-ddcc-35fe-b01c-9398a6e7c574.roa (raw, json) Hash identifier: spfgnLQx0qzaRUf296cwgu7DNxH1VH9BFasnzA5Vh7Y= Subject key identifier: 59:75:60:96:6F:B5:F6:E9:43:E3:00:4D:DF:C5:87:65:8D:49:EE:FA Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEB6B87C249CED8F3606E0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bbfbc95a-ddcc-35fe-b01c-9398a6e7c574.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 19795 IP address blocks: 208.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b6:b8:7c:24:9c:ed:8f:36:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=50141925-249d-4f63-b4c3-cb21ae34dc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:e0:26:d1:13:5a:31:aa:28:dd:5e:94:a7: 81:15:01:54:c9:20:62:c6:c0:08:30:b2:06:00:01: 9c:32:77:5f:6b:ea:12:32:18:6d:aa:cf:c0:18:17: 94:3a:8b:e2:bd:70:50:e7:11:fc:0e:52:c7:db:a3: ac:20:6c:9b:43:d9:5b:a1:1e:3c:94:36:d6:9d:b5: 31:2f:23:ad:62:4d:c6:7b:fc:c8:c4:7d:2b:82:57: e4:64:4f:fe:bd:19:0d:35:0b:7d:a0:5e:ba:7f:6f: 8c:bd:8f:94:05:76:2a:b0:d8:44:a3:15:b5:e9:b3: d7:b6:06:76:72:ca:8c:7d:2f:24:d1:12:5c:93:9d: 9b:a8:4a:4f:cc:96:8d:62:e9:2a:30:b9:96:24:ed: 17:66:7c:fb:02:36:58:ad:75:63:3e:53:fb:81:d8: 52:b0:98:3d:29:57:e9:b5:06:8a:3c:a8:89:fd:69: 34:ff:94:c8:13:8c:9d:f8:fe:4f:35:6a:29:8d:93: 22:1f:ac:ac:85:95:08:91:2d:40:00:72:50:e3:41: bc:31:ca:2b:d3:2e:a1:14:17:f1:23:c5:63:5b:e1: 78:5c:9e:56:40:c8:6b:13:6b:94:9c:d1:89:67:46: c9:96:33:51:42:ca:46:96:27:79:5f:5b:da:01:bb: 32:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:75:60:96:6F:B5:F6:E9:43:E3:00:4D:DF:C5:87:65:8D:49:EE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bbfbc95a-ddcc-35fe-b01c-9398a6e7c574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:eb:31:cb:f3:9f:a7:25:c9:51:98:50:3d:b0:7c:29:2e:37: 7a:a2:13:bd:0e:1d:c9:0e:35:83:c6:53:54:b2:21:9f:5a:b2: cc:47:c2:9f:72:da:01:da:f4:cc:2e:ca:fa:56:54:d3:ec:e4: 90:b0:39:f1:23:17:d5:64:ea:fc:e2:e5:b6:b1:41:05:ea:19: 3d:22:4a:7a:98:ca:eb:38:fc:74:5d:a8:2b:7a:b1:74:c3:2f: 94:e0:54:4c:97:cb:46:dc:2a:87:bf:ce:ee:bc:d8:7a:6e:34: b1:f0:8b:b7:41:3f:40:64:61:16:76:7b:01:ca:fe:ca:a1:f1: 0c:b6:6c:c4:4b:bb:41:b7:b0:05:00:a5:66:67:9f:ee:e5:e2: fb:8e:91:e7:86:ed:35:82:5d:a9:5c:a3:28:61:a7:0a:ae:62: 5b:cf:85:28:2c:56:1b:67:bc:78:c6:bc:41:91:71:96:9e:01: 58:85:41:d5:eb:21:31:ab:70:dd:df:a9:4e:f2:26:f0:3b:f2: 43:a9:b8:f2:c8:19:14:24:6e:3e:82:15:74:74:6a:10:a1:59: 2a:23:18:ea:2c:3a:1e:26:b3:55:91:cf:11:a1:87:d4:72:99: 12:c3:94:8e:42:dd:1b:1a:45:0f:21:65:a3:d1:c1:df:52:e6: 9d:bf:b5:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavra4fCSc7Y82BuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NTAxNDE5MjUtMjQ5ZC00ZjYzLWI0YzMtY2IyMWFlMzRkYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXgJtETWjGqKN1elKeBFQFUySBixsAIMLIG AAGcMndfa+oSMhhtqs/AGBeUOovivXBQ5xH8DlLH26OsIGybQ9lboR48lDbWnbUx LyOtYk3Ge/zIxH0rglfkZE/+vRkNNQt9oF66f2+MvY+UBXYqsNhEoxW16bPXtgZ2 csqMfS8k0RJck52bqEpPzJaNYukqMLmWJO0XZnz7AjZYrXVjPlP7gdhSsJg9KVfp tQaKPKiJ/Wk0/5TIE4yd+P5PNWopjZMiH6yshZUIkS1AAHJQ40G8Mcor0y6hFBfx I8VjW+F4XJ5WQMhrE2uUnNGJZ0bJljNRQspGlid5X1vaAbsyvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl1YJZvtfbpQ+MATd/Fh2WNSe76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYmJmYmM5NWEtZGRjYy0z NWZlLWIwMWMtOTM5OGE2ZTdjNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXrMcvzn6clyVGYUD2wfCkuN3qiE70OHckONYPGU1SyIZ9assxHwp9y 2gHa9MwuyvpWVNPs5JCwOfEjF9Vk6vzi5baxQQXqGT0iSnqYyus4/HRdqCt6sXTD L5TgVEyXy0bcKoe/zu682HpuNLHwi7dBP0BkYRZ2ewHK/sqh8Qy2bMRLu0G3sAUA pWZnn+7l4vuOkeeG7TWCXalcoyhhpwquYlvPhSgsVhtnvHjGvEGRcZaeAViFQdXr ITGrcN3fqU7yJvA78kOpuPLIGRQkbj6CFXR0ahChWSojGOosOh4ms1WRzxGhh9Ry mRLDlI5C3RsaRQ8hZaPRwd9S5p2/tbQ= -----END CERTIFICATE-----Generated at Sat Apr 12 15:01:11 2025 by rpki-client