$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/611a6ceb-0258-3db5-b11b-c977249896f6.roa File: 611a6ceb-0258-3db5-b11b-c977249896f6.roa (raw, json) Hash identifier: qO1eFC90wiWjQbTkWZzkXwJY7hlE9GnkrpZynlnswT0= Subject key identifier: 39:3D:DE:3B:EB:60:DA:24:F0:D6:5C:79:44:85:06:D0:27:D0:27:4B Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F400385A76EF5BA6F04A80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/611a6ceb-0258-3db5-b11b-c977249896f6.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.85.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:00:38:5a:76:ef:5b:a6:f0:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=8d2b67a5-ee5c-4cf3-ad40-64aa9902f1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cf:95:10:a5:82:b0:da:d1:2d:d9:8e:7e:fc: 8c:50:ee:7c:e2:99:73:47:78:15:af:ac:a6:d1:a2: 2b:be:c7:70:85:4d:40:cc:ea:52:f7:07:50:14:97: 40:18:c3:d3:49:15:b7:eb:5c:91:15:a2:b8:a9:45: 5d:3c:e2:00:e4:ce:26:7c:19:b5:58:3f:7c:aa:f1: 34:a7:69:8a:4b:60:1e:60:1f:05:1e:f1:ad:e4:f0: 06:a3:5c:93:64:20:49:41:6f:7e:52:a1:c9:90:94: 47:67:70:de:3b:e7:28:dd:05:3c:9d:b5:8d:c0:75: 60:a5:37:44:b0:c2:8a:b1:2c:3a:55:c4:94:7f:0a: db:f8:20:be:a8:db:88:d3:db:1d:dc:f6:04:86:0b: d8:8e:cf:41:88:39:ee:41:46:c1:d5:8c:d8:9a:b6: 7d:8d:5c:49:97:bb:b9:33:86:03:b5:a9:9e:b7:66: 56:3e:65:e3:0b:c2:41:16:3a:d6:23:28:7a:d4:ed: 52:04:22:39:5f:50:31:20:90:b0:f5:8c:54:17:61: de:b1:7d:65:3c:ae:4f:6f:de:e0:ec:9e:f1:1e:b0: ae:d2:98:04:62:58:b9:1a:f9:f7:84:e4:75:f9:e7: e0:a0:f5:64:42:4b:db:d8:40:19:5f:dd:4c:0e:58: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3D:DE:3B:EB:60:DA:24:F0:D6:5C:79:44:85:06:D0:27:D0:27:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/611a6ceb-0258-3db5-b11b-c977249896f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:08:36:2c:af:12:3d:4a:0d:46:06:6a:6f:ab:83:50:56:cb: c9:dc:e2:e0:ac:ee:9f:e7:96:e8:df:eb:ad:b1:a4:2b:72:fc: 9d:04:05:ca:5e:d7:2d:c4:d7:83:a0:35:db:db:87:a1:f5:71: 08:5c:68:00:c4:c0:6a:f2:7a:82:a7:13:48:30:f0:67:73:ee: 04:95:10:e2:34:f9:c2:58:84:b0:f7:13:48:52:bf:47:33:3a: 96:4c:48:1f:a2:2d:9a:e2:1c:56:9a:15:f8:be:74:41:14:4f: b5:b0:d6:ce:1b:39:14:14:d1:51:10:0e:c3:76:94:f0:5f:1e: 9c:79:44:64:a8:c9:ff:ab:9a:f2:46:ac:8d:a3:90:c6:79:57: e0:db:c2:8b:c8:43:8d:0c:3f:06:e9:15:7b:b9:05:42:2b:a7: 98:36:d9:e1:1c:34:bc:20:39:d2:04:5b:52:88:4b:16:aa:5a: 4b:12:23:7d:07:be:35:5d:74:30:c0:65:ab:f3:0c:8e:7c:be: 22:d0:c1:25:43:02:bc:f6:f3:62:34:0d:bc:ec:11:fd:31:b7: 79:1a:89:55:86:d8:a2:4c:bc:65:74:79:5d:73:36:c3:85:10: 04:d8:0c:62:eb:98:4d:31:2f:8c:e9:7b:9d:9f:ef:e4:d5:72: 26:9c:9d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AA4WnbvW6bwSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OGQyYjY3YTUtZWU1Yy00Y2YzLWFkNDAtNjRhYTk5MDJmMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8+VEKWCsNrRLdmOfvyMUO584plzR3gVr6ym 0aIrvsdwhU1AzOpS9wdQFJdAGMPTSRW361yRFaK4qUVdPOIA5M4mfBm1WD98qvE0 p2mKS2AeYB8FHvGt5PAGo1yTZCBJQW9+UqHJkJRHZ3DeO+co3QU8nbWNwHVgpTdE sMKKsSw6VcSUfwrb+CC+qNuI09sd3PYEhgvYjs9BiDnuQUbB1YzYmrZ9jVxJl7u5 M4YDtamet2ZWPmXjC8JBFjrWIyh61O1SBCI5X1AxIJCw9YxUF2HesX1lPK5Pb97g 7J7xHrCu0pgEYli5Gvn3hOR1+efgoPVkQkvb2EAZX91MDljz7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk93jvrYNok8NZceUSFBtAn0CdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNjExYTZjZWItMDI1OC0z ZGI1LWIxMWItYzk3NzI0OTg5NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEINiyvEj1KDUYGam+rg1BWy8nc4uCs7p/nlujf662xpCty/J0EBcpe 1y3E14OgNdvbh6H1cQhcaADEwGryeoKnE0gw8Gdz7gSVEOI0+cJYhLD3E0hSv0cz OpZMSB+iLZriHFaaFfi+dEEUT7Ww1s4bORQU0VEQDsN2lPBfHpx5RGSoyf+rmvJG rI2jkMZ5V+DbwovIQ40MPwbpFXu5BUIrp5g22eEcNLwgOdIEW1KISxaqWksSI30H vjVddDDAZavzDI58viLQwSVDArz282I0DbzsEf0xt3kaiVWG2KJMvGV0eV1zNsOF EATYDGLrmE0xL4zpe52f7+TVciacna4= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:58 2025 by rpki-client