$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa File: 29531714-5912-32a0-9672-e352aeb3fbd8.roa (raw, json) Hash identifier: a9PRBHB3cl1OIhniiiKoC3iFNfriYamMMGP4jcwAzhI= Subject key identifier: 4F:79:B2:46:C0:37:65:EB:6D:AE:6C:2F:31:7C:03:1B:AC:CA:E0:37 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEBD194B36B81DF3964B40 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.85.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:bd:19:4b:36:b8:1d:f3:96:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=9935d3ca-ac30-40b8-9f01-6c47cf99f93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:9e:23:b8:c3:45:5c:a9:87:ac:84:0c:4f: 33:68:be:0a:85:03:83:6a:e9:2c:ad:4d:40:a9:00: 0f:91:b9:6d:99:ee:95:46:56:6b:74:e6:cb:f6:ea: fb:cb:b8:23:97:15:bc:5e:0f:15:06:ed:a4:63:d0: 5c:91:ad:31:d8:e4:5e:2d:ab:78:9a:ed:aa:6d:94: eb:65:b9:54:b9:a4:05:90:63:12:96:e4:e6:3c:0f: c1:4e:9d:bf:34:c8:fd:54:11:ce:f2:92:67:70:d4: 49:e1:11:cd:f0:f7:1f:24:e2:01:65:c0:c7:7d:d0: d1:ff:a4:d2:ae:c4:d3:87:de:e7:5d:95:3e:cf:66: 57:80:9b:7c:06:cc:ac:d0:99:c6:1d:77:48:f2:59: 45:d7:c9:93:70:83:9a:61:e3:3d:de:6e:67:21:9f: d4:64:35:86:8d:36:86:9b:f1:13:86:02:ba:6e:d2: 15:de:40:41:70:91:84:7a:29:33:66:38:32:27:59: 9d:a2:df:5d:82:fc:51:6d:45:5b:72:75:94:ef:ab: 24:76:21:a6:dc:6a:22:74:a6:57:ff:d2:5a:e4:74: 2d:8c:a6:49:11:7c:d8:52:32:37:b1:59:6a:ac:31: 55:22:77:b3:95:62:03:23:7d:8f:d0:a7:aa:7b:07: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:79:B2:46:C0:37:65:EB:6D:AE:6C:2F:31:7C:03:1B:AC:CA:E0:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7f:21:00:53:b5:3b:93:1d:a0:90:46:a7:47:6f:fa:0d:db: 56:e7:2a:58:14:fb:df:56:c3:5c:f8:cc:18:14:5e:89:9a:76: 2d:d0:f2:58:c5:3b:83:c4:a7:f4:2a:8c:08:97:0f:73:70:ad: e4:8a:23:f3:2e:12:5a:a4:ba:d8:95:44:9a:ef:11:94:2b:42: 62:5d:a7:78:e7:01:d3:88:73:d1:fc:f1:bf:3e:9c:ff:ef:b3: ed:e3:e7:39:fa:74:82:3c:6c:d8:e8:74:3c:eb:f1:7e:73:7c: 62:02:90:ab:00:e4:85:20:e9:7b:c1:05:0d:da:aa:e5:01:1c: 66:51:79:63:96:bb:d4:0f:30:5e:88:b3:fd:ed:d7:0b:41:c3: 59:0d:0e:9e:ff:77:bd:2c:e3:c6:de:68:c0:de:e2:bd:91:d7: 7c:79:2d:f4:1c:7a:87:04:3e:f2:01:fc:a7:cf:67:9c:88:b3: 6e:4b:63:08:81:f8:2b:e8:08:7a:39:11:1a:3b:aa:20:2b:d4: c0:6c:68:fb:62:67:1c:ac:97:a3:56:f9:9d:35:f3:93:49:8c: 49:79:00:10:0c:a7:1f:34:82:c3:18:14:e8:74:73:aa:27:91: c0:14:18:2a:95:f5:bf:8e:c0:2b:7d:fb:df:b5:c4:02:13:81: a2:7f:fa:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavr0ZSza4HfOWS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk OTkzNWQzY2EtYWMzMC00MGI4LTlmMDEtNmM0N2NmOTlmOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRSeI7jDRVyph6yEDE8zaL4KhQODauksrU1A qQAPkbltme6VRlZrdObL9ur7y7gjlxW8Xg8VBu2kY9Bcka0x2OReLat4mu2qbZTr ZblUuaQFkGMSluTmPA/BTp2/NMj9VBHO8pJncNRJ4RHN8PcfJOIBZcDHfdDR/6TS rsTTh97nXZU+z2ZXgJt8Bsys0JnGHXdI8llF18mTcIOaYeM93m5nIZ/UZDWGjTaG m/EThgK6btIV3kBBcJGEeikzZjgyJ1mdot9dgvxRbUVbcnWU76skdiGm3GoidKZX /9Ja5HQtjKZJEXzYUjI3sVlqrDFVInezlWIDI32P0Keqewc+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE95skbAN2Xrba5sLzF8AxusyuA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMjk1MzE3MTQtNTkxMi0z MmEwLTk2NzItZTM1MmFlYjNmYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl/IQBTtTuTHaCQRqdHb/oN21bnKlgU+99Ww1z4zBgUXomadi3Q8ljF O4PEp/QqjAiXD3NwreSKI/MuElqkutiVRJrvEZQrQmJdp3jnAdOIc9H88b8+nP/v s+3j5zn6dII8bNjodDzr8X5zfGICkKsA5IUg6XvBBQ3aquUBHGZReWOWu9QPMF6I s/3t1wtBw1kNDp7/d70s48beaMDe4r2R13x5LfQceocEPvIB/KfPZ5yIs25LYwiB +CvoCHo5ERo7qiAr1MBsaPtiZxysl6NW+Z0185NJjEl5ABAMpx80gsMYFOh0c6on kcAUGCqV9b+OwCt9+9+1xAITgaJ/+mQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:50 2025 by rpki-client