$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa File: 84c7cebd-5039-388c-bb84-61029b80011b.roa (raw, json) Hash identifier: 10Nx7hnrfuJpG0K5dzrNIJL8Wp2k2dlkNtC52oNnnAM= Subject key identifier: 14:94:01:68:B9:A6:28:88:B1:27:05:9A:50:0F:89:DD:D4:41:32:7E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FA6C126204DB983B1940 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fa:6c:12:62:04:db:98:3b:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=b3c33644-b6d7-4e45-8f61-095422fd4aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:bf:1f:1f:4c:59:7d:ff:ea:14:33:db:bb: 28:81:26:45:18:86:1c:12:ea:a2:40:71:60:dd:5b: 19:25:57:1e:38:01:54:ab:e1:9e:39:6a:d5:ad:18: 8a:15:3b:fd:30:d1:73:e1:4b:28:46:55:73:19:c8: 28:c6:f2:6a:17:b2:2a:0f:58:05:e2:4a:43:d0:c5: a6:e8:64:41:7d:cd:63:51:df:76:e5:91:34:0b:1b: d2:a1:b0:d8:2a:80:7f:51:71:0e:13:bb:37:05:e6: 5a:dd:72:da:61:79:d8:4a:c0:8f:5e:ce:fe:f3:32: 30:50:2c:e9:df:5d:23:63:72:1e:ce:9a:44:d8:5b: fa:16:57:74:cf:46:40:e0:9a:e5:d5:a3:b8:14:30: f0:e4:6a:02:72:9b:bf:6f:12:b1:18:5f:65:d7:5c: d0:5f:75:0c:5b:26:cc:c3:22:af:62:12:36:94:6f: 66:01:bc:0d:61:42:27:d5:22:8f:8e:66:03:5b:0e: 56:91:f6:e3:19:49:12:b0:d8:91:3a:06:9a:b7:db: d8:e8:c5:43:c7:3b:d2:97:f6:c8:5c:b8:bc:93:e9: 4a:d4:0a:5f:b4:f2:69:a2:4a:37:91:aa:b0:2b:c1: 6f:9f:dd:5a:7e:44:a5:4d:f8:32:8f:50:a1:5b:cb: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:94:01:68:B9:A6:28:88:B1:27:05:9A:50:0F:89:DD:D4:41:32:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/84c7cebd-5039-388c-bb84-61029b80011b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ae:ab:00:95:29:af:e1:97:4c:92:83:d7:05:ed:ee:4f:72: bf:5e:01:6a:98:86:0c:8b:75:b7:fd:c8:6a:3d:36:8a:cf:d9: 19:69:09:75:82:31:44:04:14:b0:52:59:97:ea:64:d1:80:4c: 39:d8:f1:b3:15:11:4b:2f:1c:b1:37:0f:3c:15:4f:3a:ec:6a: 8d:6d:7f:4b:7f:c0:1e:7b:d6:5c:0b:8f:80:9b:2c:d2:10:3e: d9:44:62:91:bc:fc:49:3e:d2:5f:ae:25:50:f8:5b:fa:db:98: e5:ea:3f:b6:28:fb:a1:2d:04:e1:1c:97:e5:d6:17:f4:56:7d: 10:dd:df:f6:e8:11:7b:c6:92:a6:6d:8f:03:04:4a:cd:cb:9b: e9:12:2f:65:cf:8b:d6:47:fc:91:bc:94:9c:6b:e7:f7:06:46: 72:b4:46:e1:d1:1f:3f:53:bd:64:f6:be:3d:a7:0e:61:16:13: 20:d9:bc:0c:2a:7b:5c:3d:00:2a:1b:66:72:90:93:87:b5:f5: 76:cd:03:26:db:17:f4:c6:01:08:b6:18:7f:90:5b:8a:35:35: 1f:3e:ad:7a:01:9f:64:46:78:04:90:fd:48:4e:c2:b4:82:bd: fa:1b:f0:80:a5:89:a5:92:aa:b3:ba:fd:c5:22:43:b9:e0:ee: 22:22:58:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/psEmIE25g7GUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YjNjMzM2NDQtYjZkNy00ZTQ1LThmNjEtMDk1NDIyZmQ0YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYa/Hx9MWX3/6hQz27sogSZFGIYcEuqiQHFg 3VsZJVceOAFUq+GeOWrVrRiKFTv9MNFz4UsoRlVzGcgoxvJqF7IqD1gF4kpD0MWm 6GRBfc1jUd925ZE0CxvSobDYKoB/UXEOE7s3BeZa3XLaYXnYSsCPXs7+8zIwUCzp 310jY3IezppE2Fv6Fld0z0ZA4Jrl1aO4FDDw5GoCcpu/bxKxGF9l11zQX3UMWybM wyKvYhI2lG9mAbwNYUIn1SKPjmYDWw5WkfbjGUkSsNiROgaat9vY6MVDxzvSl/bI XLi8k+lK1ApftPJpoko3kaqwK8Fvn91afkSlTfgyj1ChW8vAlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSUAWi5piiIsScFmlAPid3UQTJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODRjN2NlYmQtNTAzOS0z ODhjLWJiODQtNjEwMjliODAwMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6uqwCVKa/hl0ySg9cF7e5Pcr9eAWqYhgyLdbf9yGo9NorP2RlpCXWC MUQEFLBSWZfqZNGATDnY8bMVEUsvHLE3DzwVTzrsao1tf0t/wB571lwLj4CbLNIQ PtlEYpG8/Ek+0l+uJVD4W/rbmOXqP7Yo+6EtBOEcl+XWF/RWfRDd3/boEXvGkqZt jwMESs3Lm+kSL2XPi9ZH/JG8lJxr5/cGRnK0RuHRHz9TvWT2vj2nDmEWEyDZvAwq e1w9ACobZnKQk4e19XbNAybbF/TGAQi2GH+QW4o1NR8+rXoBn2RGeASQ/UhOwrSC vfob8ICliaWSqrO6/cUiQ7ng7iIiWNE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:13 2025 by rpki-client