$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa File: d507668b-e70a-32a7-9458-c5a581f7b715.roa (raw, json) Hash identifier: yTQ+Hw5AJhbHo5abY9uCLwdu44RnKUP0P1P79B5yrRk= Subject key identifier: C6:72:2E:47:EF:32:C4:99:FE:DB:33:7B:39:FF:CE:1F:7E:75:03:02 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEB73873AFD755AFB02680 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b7:38:73:af:d7:55:af:b0:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=7d198836-d475-4f1f-b37f-9b4f5ca577ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:99:a9:24:e5:c3:95:84:5f:4c:7f:f5:0c: c7:c5:40:67:8a:0e:f8:70:fb:9d:ae:9b:8b:be:86: 96:de:8f:c6:06:0f:2b:83:c3:1c:49:15:af:f4:39: 70:76:7b:fa:e3:41:96:89:33:30:cf:33:c9:82:50: 5f:7a:5e:58:eb:95:8f:f1:c3:a7:af:57:7b:26:e6: 58:ed:da:ba:6b:51:72:b2:e6:5f:da:71:86:7f:6a: d6:2d:d5:a2:ef:3a:63:04:50:5a:c9:ee:0a:95:a9: 75:57:39:dc:7d:96:0d:1d:96:7e:1b:79:ad:68:64: 96:05:af:66:1c:e2:54:c2:71:88:3b:65:c6:40:61: 94:38:d2:23:d8:06:a7:ea:a2:07:72:c1:91:52:39: e1:4a:0f:99:f3:28:17:c5:a1:53:78:f5:c0:11:33: 62:95:6c:01:f5:13:e2:bb:3a:d1:68:c7:27:66:ef: c2:a1:17:d4:01:37:5c:bc:00:d6:96:49:a3:88:e4: f3:b8:83:99:5c:1d:c9:20:0b:d3:fd:91:5d:fa:4d: ef:c8:9c:da:34:ff:0a:66:db:1b:c1:c6:24:54:a8: a3:b8:0a:e5:15:84:85:a8:9e:92:e9:ac:3f:0e:e1: 2b:35:89:04:5c:43:ba:3c:7f:97:5b:21:32:51:a2: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:72:2E:47:EF:32:C4:99:FE:DB:33:7B:39:FF:CE:1F:7E:75:03:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:04:a8:8b:4e:ff:c3:2d:87:31:70:8d:89:42:f9:13:ca:d0: ee:72:23:f0:cf:ec:cd:cc:01:d4:26:8e:b3:b8:ac:b2:09:bd: 95:95:ee:cd:e4:d0:46:b4:d2:7e:55:5b:b5:dc:73:ae:50:ea: d1:2b:be:37:e7:9d:9b:34:80:69:0c:11:ae:69:48:7b:a2:a9: 51:91:37:74:6c:87:8c:2a:dd:55:65:21:3c:37:a7:ca:84:ac: 07:6f:ab:06:ea:80:66:27:9d:67:60:29:8d:37:ba:58:d4:42: 1b:2d:cd:4a:06:22:d5:ec:df:4a:d3:db:d5:d6:e1:8d:c1:47: aa:55:34:25:98:e2:81:f1:65:de:90:ac:b6:7d:3b:9a:0e:d1: 65:cd:7a:3d:ef:4a:ab:32:63:2f:f5:ed:26:54:14:01:b3:ef: 24:ac:2a:17:a2:83:12:f2:16:ad:d8:d4:4f:89:f7:9d:9a:7d: a2:f3:55:be:1c:06:a7:e9:da:f7:ba:d2:32:f2:17:7a:d8:cd: 0b:77:7c:f8:fd:32:41:b0:1e:29:99:0e:52:17:c0:0a:7b:be: ba:31:ef:79:d8:c5:69:28:7b:1f:b7:57:e4:2f:08:b3:53:23: 05:fa:15:bb:42:fa:2a:89:37:49:ac:21:5e:72:6f:52:39:40: 2d:29:c3:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrc4c6/XVa+wJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk N2QxOTg4MzYtZDQ3NS00ZjFmLWIzN2YtOWI0ZjVjYTU3N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFyZqSTlw5WEX0x/9QzHxUBnig74cPudrpuL voaW3o/GBg8rg8McSRWv9Dlwdnv640GWiTMwzzPJglBfel5Y65WP8cOnr1d7JuZY 7dq6a1FysuZf2nGGf2rWLdWi7zpjBFBaye4Klal1VzncfZYNHZZ+G3mtaGSWBa9m HOJUwnGIO2XGQGGUONIj2Aan6qIHcsGRUjnhSg+Z8ygXxaFTePXAETNilWwB9RPi uzrRaMcnZu/CoRfUATdcvADWlkmjiOTzuIOZXB3JIAvT/ZFd+k3vyJzaNP8KZtsb wcYkVKijuArlFYSFqJ6S6aw/DuErNYkEXEO6PH+XWyEyUaKJewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZyLkfvMsSZ/tszezn/zh9+dQMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZDUwNzY2OGItZTcwYS0z MmE3LTk0NTgtYzVhNTgxZjdiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoEqItO/8MthzFwjYlC+RPK0O5yI/DP7M3MAdQmjrO4rLIJvZWV7s3k 0Ea00n5VW7Xcc65Q6tErvjfnnZs0gGkMEa5pSHuiqVGRN3Rsh4wq3VVlITw3p8qE rAdvqwbqgGYnnWdgKY03uljUQhstzUoGItXs30rT29XW4Y3BR6pVNCWY4oHxZd6Q rLZ9O5oO0WXNej3vSqsyYy/17SZUFAGz7ySsKheigxLyFq3Y1E+J952afaLzVb4c Bqfp2ve60jLyF3rYzQt3fPj9MkGwHimZDlIXwAp7vrox73nYxWkoex+3V+QvCLNT IwX6FbtC+iqJN0msIV5yb1I5QC0pw6Q= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:06 2025 by rpki-client