$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c6a62984-7ffb-3004-ba71-493828c719c7.roa File: c6a62984-7ffb-3004-ba71-493828c719c7.roa (raw, json) Hash identifier: bQUjJq+T8Xj8we89oq9UhkXra4ojLLcIQbt1ZpqH8BI= Subject key identifier: 3A:AB:00:23:1E:E2:B8:46:D3:24:06:F8:C1:A5:30:0B:9D:DA:54:F4 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEBD5FC73FB2687EE25980 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c6a62984-7ffb-3004-ba71-493828c719c7.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 19795 IP address blocks: 208.95.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:bd:5f:c7:3f:b2:68:7e:e2:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=f11bfd56-eb4d-44f6-be67-c7caf012c392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:a3:77:70:e0:68:82:42:d8:da:e3:2a:8e: 69:50:e9:e9:44:1e:40:6a:3d:7d:bf:dd:43:45:2b: 30:94:3b:36:3b:5a:db:4c:86:50:c2:05:be:16:e7: 33:21:30:bb:09:ed:c2:83:10:59:d2:c1:5d:85:d2: f1:0d:47:ba:67:10:15:97:db:3c:d6:56:b6:f9:b9: 74:f7:a3:ab:cc:a4:7d:f1:9e:38:db:7f:2b:65:fb: 05:45:7b:25:82:8f:d6:c8:81:1f:a9:e7:22:aa:49: 68:d2:cc:a0:d4:19:db:db:4e:47:19:68:d5:2d:b6: 4a:a1:f1:a6:0b:b5:bb:04:20:81:d8:98:c5:ef:49: 4b:c5:c8:7a:a6:7d:99:55:18:f2:2d:37:86:62:6c: 99:36:e8:b2:1f:44:e3:02:f6:15:03:6f:85:8e:1c: 60:9c:28:69:d0:b7:01:bc:30:a9:94:cb:93:fa:2a: d9:54:2b:31:30:24:ce:e3:0a:7b:29:1c:34:be:13: 52:58:3e:53:f7:d2:f9:10:61:6d:1d:4a:1b:f0:bd: fc:b7:05:69:94:ac:04:ed:56:ad:02:5f:a2:d7:07: cb:ec:bf:89:e0:16:fe:c8:fd:5d:a7:8a:47:2b:bf: 97:66:b5:3f:da:d4:ae:28:d7:0c:e8:c4:06:56:c6: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AB:00:23:1E:E2:B8:46:D3:24:06:F8:C1:A5:30:0B:9D:DA:54:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c6a62984-7ffb-3004-ba71-493828c719c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3d:bb:f4:70:47:fb:93:45:5c:ac:fc:bd:8d:b4:45:4b:d1: 66:5b:49:cb:9a:a1:58:15:63:8b:18:d7:1d:88:d6:0f:25:96: 2e:11:92:b6:76:a9:ef:bb:5e:c9:c4:a1:2e:f0:52:69:56:74: af:54:0d:73:c6:0f:20:7d:0d:8f:0b:6b:52:5f:b5:ae:d8:c0: a3:fa:6b:7a:a4:b1:d9:c0:85:d1:0e:18:54:76:16:70:8b:5f: 8b:6f:47:97:47:cf:69:b0:3f:80:3d:57:2c:e7:af:55:42:ad: db:a8:68:a2:43:77:55:04:f0:94:89:09:1e:51:7e:ec:c3:9f: 16:ab:91:d1:10:2d:16:cd:9d:84:f5:dd:97:94:ed:54:56:4f: cf:36:fb:bd:98:56:f1:ea:53:ce:43:86:91:90:e6:6c:40:d5: ab:a7:03:7d:25:2a:46:f9:16:1d:7c:e9:02:50:75:61:51:a3: 45:a8:e2:c9:20:ac:b4:cf:8e:83:e0:4a:ec:fd:01:5b:48:ff: c2:8f:22:bc:17:22:30:aa:3d:8e:f1:d1:94:17:5d:3e:77:86: 48:32:18:b7:4b:68:68:e2:06:2e:7c:a1:b5:da:66:e3:61:7a: c2:9f:c7:b1:8f:4d:59:48:9e:e6:50:c2:78:a5:35:08:a9:1a: 45:da:8f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavr1fxz+yaH7iWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZjExYmZkNTYtZWI0ZC00NGY2LWJlNjctYzdjYWYwMTJjMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwqjd3DgaIJC2NrjKo5pUOnpRB5Aaj19v91D RSswlDs2O1rbTIZQwgW+FuczITC7Ce3CgxBZ0sFdhdLxDUe6ZxAVl9s81la2+bl0 96OrzKR98Z44238rZfsFRXslgo/WyIEfqeciqklo0syg1Bnb205HGWjVLbZKofGm C7W7BCCB2JjF70lLxch6pn2ZVRjyLTeGYmyZNuiyH0TjAvYVA2+FjhxgnChp0LcB vDCplMuT+irZVCsxMCTO4wp7KRw0vhNSWD5T99L5EGFtHUob8L38twVplKwE7Vat Al+i1wfL7L+J4Bb+yP1dp4pHK7+XZrU/2tSuKNcM6MQGVsYWKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqrACMe4rhG0yQG+MGlMAud2lT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzZhNjI5ODQtN2ZmYi0z MDA0LWJhNzEtNDkzODI4YzcxOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA9u/RwR/uTRVys/L2NtEVL0WZbScuaoVgVY4sY1x2I1g8lli4RkrZ2 qe+7XsnEoS7wUmlWdK9UDXPGDyB9DY8La1Jfta7YwKP6a3qksdnAhdEOGFR2FnCL X4tvR5dHz2mwP4A9Vyznr1VCrduoaKJDd1UE8JSJCR5RfuzDnxarkdEQLRbNnYT1 3ZeU7VRWT882+72YVvHqU85DhpGQ5mxA1aunA30lKkb5Fh186QJQdWFRo0Wo4skg rLTPjoPgSuz9AVtI/8KPIrwXIjCqPY7x0ZQXXT53hkgyGLdLaGjiBi58obXaZuNh esKfx7GPTVlInuZQwnilNQipGkXaj8k= -----END CERTIFICATE-----Generated at Sun Apr 13 03:12:15 2025 by rpki-client