$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f6122277-dd0a-3fa1-b472-96fba2b589b9.roa File: f6122277-dd0a-3fa1-b472-96fba2b589b9.roa (raw, json) Hash identifier: dqhFM6dAn9Oq0u4xAQkg1GfgfGz5HmzXhE7LFHpxFgs= Subject key identifier: 6C:00:13:C5:A6:4B:91:95:E7:69:F1:38:5E:32:45:5E:F5:81:67:6E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FAA8CA8B4431755B5880 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f6122277-dd0a-3fa1-b472-96fba2b589b9.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 208.85.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fa:a8:ca:8b:44:31:75:5b:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=e8361cc2-9580-4be6-9744-4697808f69a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:2c:fb:21:47:79:d9:f4:b2:ac:e8:78:20: 48:3c:b6:51:97:49:ef:95:43:34:af:2c:66:9a:24: d2:25:91:9f:38:37:9a:7b:cb:bc:b4:75:30:27:93: f9:df:47:55:2b:e8:ac:2d:62:ec:c0:72:1a:d1:57: 59:b0:e8:79:41:a5:0a:89:dc:69:a9:d0:50:be:6f: cc:4a:cc:72:fc:d0:50:3f:2a:28:53:a7:c9:9a:0f: f0:29:df:47:96:10:52:5f:84:2e:cf:2e:4d:cc:ce: 1d:7b:56:d4:32:4d:c5:38:a5:0a:ee:91:52:76:3a: fa:15:5c:2c:76:d3:ef:1a:79:3a:e5:26:6b:be:b4: 7b:d8:a1:85:bb:33:d9:e5:10:6b:57:2d:7c:e6:08: c1:94:71:76:00:80:be:8c:9e:ea:05:fe:5a:ad:d1: 32:3e:61:43:06:fd:46:28:21:29:7a:1d:92:08:2d: c0:63:6a:a8:db:72:07:81:06:be:2a:ec:37:6a:91: 1b:5c:64:3e:7f:75:88:84:8a:17:09:bd:6d:65:4b: 3c:96:1f:ee:7d:f2:a7:95:11:54:29:52:b5:55:fe: 0c:16:7b:51:ef:71:72:8d:12:76:00:a7:94:53:07: 71:e2:d8:82:bb:8b:00:29:46:82:e7:29:1b:ee:ac: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:00:13:C5:A6:4B:91:95:E7:69:F1:38:5E:32:45:5E:F5:81:67:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f6122277-dd0a-3fa1-b472-96fba2b589b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d9:04:ff:09:9d:e0:bc:3d:95:51:47:0a:1f:73:b5:af:b8: 53:31:dc:16:77:fa:48:a4:c0:58:43:b1:de:24:09:26:81:c7: 88:f3:9e:c4:aa:65:d5:d3:8e:be:cb:df:80:bb:07:b8:b5:58: 0a:5a:61:f2:90:a2:ad:23:25:c7:d6:ce:1e:f8:31:3c:6b:da: f1:84:de:17:6c:10:77:23:3e:14:1f:c5:8a:18:8d:75:aa:d9: 72:eb:63:8c:57:ca:d1:43:f9:b8:86:42:5d:94:83:e4:64:54: 79:dc:4b:ba:5c:99:80:52:ff:32:17:0e:1e:bc:79:13:13:47: 6e:d6:bb:9c:e9:3a:e6:6a:5b:36:8f:a4:20:47:ab:7e:e5:17: c2:32:49:a8:9b:03:1c:0d:2e:7b:22:b2:c9:fd:3a:43:2c:20: 6a:28:e0:76:aa:79:35:29:d5:6a:6e:dc:a6:77:09:74:49:b7: dc:86:db:ba:90:29:36:e4:3f:73:21:d8:7c:6f:be:10:9b:41: b0:35:40:fd:79:1e:24:04:32:0e:33:cf:f3:98:90:c6:a9:0f: a1:c2:46:87:18:6d:72:02:ea:be:93:87:c0:ca:0c:48:fc:5e: 44:d8:b1:22:4d:ee:66:ae:f9:a1:11:75:75:e0:95:25:c4:de: dd:e0:88:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/qoyotEMXVbWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZTgzNjFjYzItOTU4MC00YmU2LTk3NDQtNDY5NzgwOGY2OWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM0s+yFHedn0sqzoeCBIPLZRl0nvlUM0ryxm miTSJZGfODeae8u8tHUwJ5P530dVK+isLWLswHIa0VdZsOh5QaUKidxpqdBQvm/M Ssxy/NBQPyooU6fJmg/wKd9HlhBSX4Quzy5NzM4de1bUMk3FOKUK7pFSdjr6FVws dtPvGnk65SZrvrR72KGFuzPZ5RBrVy185gjBlHF2AIC+jJ7qBf5ardEyPmFDBv1G KCEpeh2SCC3AY2qo23IHgQa+Kuw3apEbXGQ+f3WIhIoXCb1tZUs8lh/uffKnlRFU KVK1Vf4MFntR73FyjRJ2AKeUUwdx4tiCu4sAKUaC5ykb7qwEewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwAE8WmS5GV52nxOF4yRV71gWduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZjYxMjIyNzctZGQwYS0z ZmExLWI0NzItOTZmYmEyYjU4OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITZBP8JneC8PZVRRwofc7WvuFMx3BZ3+kikwFhDsd4kCSaBx4jznsSq ZdXTjr7L34C7B7i1WApaYfKQoq0jJcfWzh74MTxr2vGE3hdsEHcjPhQfxYoYjXWq 2XLrY4xXytFD+biGQl2Ug+RkVHncS7pcmYBS/zIXDh68eRMTR27Wu5zpOuZqWzaP pCBHq37lF8IySaibAxwNLnsissn9OkMsIGoo4HaqeTUp1Wpu3KZ3CXRJt9yG27qQ KTbkP3Mh2HxvvhCbQbA1QP15HiQEMg4zz/OYkMapD6HCRocYbXIC6r6Th8DKDEj8 XkTYsSJN7mau+aERdXXglSXE3t3giOM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:17 2025 by rpki-client