$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa File: 422a23f3-46df-3a7b-afbd-3ae916bba51f.roa (raw, json) Hash identifier: zcZ33pht2kdT41nQ2AJy3EgJLPVTvQaaRGZXhUjVD70= Subject key identifier: 62:9A:D4:B0:39:52:D6:5B:08:A8:0B:93:B2:3F:B0:9C:62:68:A2:20 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEB6A7B497C1150245E580 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 14618 IP address blocks: 208.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b6:a7:b4:97:c1:15:02:45:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=51e3711f-9e4f-4dcb-ba12-32627d827180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:02:f4:07:e0:0f:cb:83:6f:48:bf:0a:a4: 4f:91:52:f4:3c:59:86:ab:a4:c7:4c:87:37:bc:fb: c6:6f:e7:78:41:ed:6d:88:59:e3:f7:1f:0e:ac:3b: e7:87:3c:b9:c8:8c:18:3b:dd:37:9f:06:63:bd:39: 40:86:a6:ec:e1:0d:10:ae:f6:90:3f:93:9e:ab:95: d9:0e:90:3d:1f:21:6b:04:02:0a:2c:49:8a:e9:c3: c6:50:ed:b4:9e:fa:23:c0:9e:30:7f:ff:01:2b:1a: 1c:7d:82:fc:9a:8f:01:cd:44:84:de:cd:0a:5b:d1: b1:83:78:1f:d5:c0:57:40:92:c4:ad:d6:bc:a2:2e: 6d:48:cd:38:2d:13:11:f1:47:9f:04:0b:5d:d1:1f: 21:8f:dc:98:6a:fa:9e:70:fb:3e:03:92:af:f7:5f: 6c:31:a3:08:f5:5f:01:a3:d2:1a:62:19:ff:78:cf: 1a:be:8c:85:b8:a0:6c:10:3b:fd:5a:45:eb:55:ca: e4:73:61:b4:f7:6f:9e:89:36:4e:35:13:72:1c:51: ba:98:4b:d9:80:eb:06:bd:17:b5:f4:ee:fa:78:a1: a8:b6:5e:c1:c5:b7:69:be:38:16:b5:b9:71:ca:36: 6d:e8:ec:50:90:80:3f:99:ed:1c:74:5c:12:1f:44: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9A:D4:B0:39:52:D6:5B:08:A8:0B:93:B2:3F:B0:9C:62:68:A2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8f:a1:74:ed:e6:b2:fe:23:8a:e4:82:45:12:d7:ef:86:05: 9a:ea:00:fc:98:7b:78:5e:0a:62:ca:22:73:86:9b:ef:6c:01: 33:bb:06:fd:c6:5d:51:74:2c:c1:2a:52:bd:99:16:23:11:f9: d2:a2:fe:72:37:91:99:ca:25:29:ec:b4:5a:29:0a:ed:47:0a: 82:70:5f:dc:33:f6:96:20:75:99:5f:98:4a:7b:84:82:7a:ed: 86:22:65:1f:a4:10:04:ef:90:08:61:c4:6e:30:7f:fa:9f:33: e3:42:ea:01:c8:63:b4:85:a5:6d:b9:24:4d:60:af:8d:a0:89: 9c:a1:63:4a:47:a0:5d:23:66:d6:21:3c:ff:70:ce:9e:a4:11: 11:a0:f7:49:00:24:6b:20:f9:d9:f6:75:bd:e3:2d:dc:cd:de: 97:e2:7d:99:63:00:5b:58:13:bd:c1:59:e1:8c:44:57:23:eb: 80:48:3b:f5:58:35:d0:19:df:17:a3:92:60:b4:ac:67:1f:8e: f6:a0:24:f6:2c:e6:1e:40:f3:c2:be:b7:3d:e0:9f:cb:e0:73: e1:d2:19:bc:c1:7e:2f:44:a7:75:d0:dc:22:6e:0d:b8:d1:44: 94:1e:56:7a:ae:73:5c:3f:39:cd:a9:3e:3c:0e:dd:85:1a:80: 23:6a:9b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrantJfBFQJF5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NTFlMzcxMWYtOWU0Zi00ZGNiLWJhMTItMzI2MjdkODI3MTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqoC9AfgD8uDb0i/CqRPkVL0PFmGq6THTIc3 vPvGb+d4Qe1tiFnj9x8OrDvnhzy5yIwYO903nwZjvTlAhqbs4Q0QrvaQP5Oeq5XZ DpA9HyFrBAIKLEmK6cPGUO20nvojwJ4wf/8BKxocfYL8mo8BzUSE3s0KW9Gxg3gf 1cBXQJLErda8oi5tSM04LRMR8UefBAtd0R8hj9yYavqecPs+A5Kv919sMaMI9V8B o9IaYhn/eM8avoyFuKBsEDv9WkXrVcrkc2G092+eiTZONRNyHFG6mEvZgOsGvRe1 9O76eKGotl7BxbdpvjgWtblxyjZt6OxQkIA/me0cdFwSH0Tf5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKa1LA5UtZbCKgLk7I/sJxiaKIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDIyYTIzZjMtNDZkZi0z YTdiLWFmYmQtM2FlOTE2YmJhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESPoXTt5rL+I4rkgkUS1++GBZrqAPyYe3heCmLKInOGm+9sATO7Bv3G XVF0LMEqUr2ZFiMR+dKi/nI3kZnKJSnstFopCu1HCoJwX9wz9pYgdZlfmEp7hIJ6 7YYiZR+kEATvkAhhxG4wf/qfM+NC6gHIY7SFpW25JE1gr42giZyhY0pHoF0jZtYh PP9wzp6kERGg90kAJGsg+dn2db3jLdzN3pfifZljAFtYE73BWeGMRFcj64BIO/VY NdAZ3xejkmC0rGcfjvagJPYs5h5A88K+tz3gn8vgc+HSGbzBfi9Ep3XQ3CJuDbjR RJQeVnquc1w/Oc2pPjwO3YUagCNqm3M= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:24 2025 by rpki-client