$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa File: 25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa (raw, json) Hash identifier: DAf39eMUo1h7r0J0O72BMuekxaW7u27+ckg382WXwv0= Subject key identifier: 2D:21:D5:3C:8E:DD:E4:4F:2D:B7:5F:A8:F4:54:10:AE:B1:2F:60:54 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584961B985AAC02B48BB915586C0 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 64249 IP address blocks: 208.118.228.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:85:aa:c0:2b:48:bb:91:55:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=8eec19aa-094a-444a-901f-de4d3bee0baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a3:c4:f2:39:0b:ea:45:13:08:1b:f9:32:07: fd:39:ff:2a:90:1d:8f:38:79:c4:cb:d9:5f:5c:6c: be:21:45:7b:29:07:86:0d:7e:9f:d8:99:32:ef:08: 14:a6:85:8a:6b:74:a1:16:73:8c:67:93:2d:df:da: a3:91:25:3b:41:4f:15:53:7c:da:4b:05:19:4d:a6: 21:05:4f:11:a9:13:31:a2:80:89:67:32:df:96:42: c3:e9:3f:d6:d2:e0:fa:8a:31:e9:51:7b:52:1e:8d: 0d:c4:b0:be:90:f6:f3:ee:b4:1e:9b:88:db:6c:74: a3:7b:ba:63:f9:d5:cf:09:16:8a:af:12:b8:1a:a5: d0:51:74:ef:fd:7b:88:bf:c4:74:e5:00:cb:a9:bc: c3:42:03:0c:9a:69:6f:3b:a9:62:9e:e0:46:c4:32: 61:58:07:5d:ab:f1:b9:23:1f:f3:b8:08:dc:ad:3a: c3:c4:cd:b0:01:e0:1e:de:4e:61:21:76:d0:8a:02: 15:41:d0:9a:1e:64:1d:69:c8:0f:4d:99:bc:c5:69: 9f:9e:b1:0f:a6:95:75:4b:03:f4:bd:bc:eb:57:54: 05:9e:7f:9a:f5:d4:16:e4:77:92:e2:cb:16:78:69: 3a:a5:e9:9d:76:c8:fd:1e:9e:d8:e3:7a:28:e3:30: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:21:D5:3C:8E:DD:E4:4F:2D:B7:5F:A8:F4:54:10:AE:B1:2F:60:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.228.160/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:77:3b:22:03:ce:5c:5b:ab:70:0e:8e:bd:08:3a:e9:ba:83: c9:43:88:42:72:80:13:bf:09:e5:27:4a:38:ce:16:70:a3:ff: 74:a5:4d:71:b0:e8:6a:68:25:37:9b:99:86:79:99:7b:1a:ea: 7e:2a:3e:b5:fd:d1:c0:24:5d:dc:2e:85:62:9f:7e:9e:26:49: 95:a8:36:7e:ae:b8:c4:df:23:83:6a:06:b0:0f:d4:db:bd:bf: 2d:79:ab:b8:5b:9d:d3:3b:6f:fd:a5:a6:99:e2:dc:16:92:ea: cb:7d:88:57:11:87:5f:6a:93:c5:e0:bd:16:ae:ec:5a:6c:4b: 19:4c:85:64:a1:90:f5:ff:2d:2e:b8:2a:93:83:21:48:6c:57: d8:ea:d1:f7:1e:3e:aa:ce:8a:6c:96:4f:ba:96:dd:67:31:8a: 0b:f4:3b:3f:56:37:86:e6:54:fa:c0:f9:ef:ba:4c:27:d4:26: 68:a1:2a:43:af:cb:76:18:e7:27:39:2e:f6:2f:c9:ff:60:78: c7:0a:38:f8:8c:47:84:80:d0:61:9d:36:ba:a2:9b:7b:50:a0: e3:40:2e:a4:19:93:9d:0d:01:3d:52:5f:1c:ab:cd:fd:0e:ff: 5f:e1:80:0f:60:00:35:c7:9d:89:70:40:11:3b:29:4e:b4:57: 4c:74:3b:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElhuYWqwCtIu5FVhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk OGVlYzE5YWEtMDk0YS00NDRhLTkwMWYtZGU0ZDNiZWUwYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KPE8jkL6kUTCBv5Mgf9Of8qkB2POHnEy9lf XGy+IUV7KQeGDX6f2Jky7wgUpoWKa3ShFnOMZ5Mt39qjkSU7QU8VU3zaSwUZTaYh BU8RqRMxooCJZzLflkLD6T/W0uD6ijHpUXtSHo0NxLC+kPbz7rQem4jbbHSje7pj +dXPCRaKrxK4GqXQUXTv/XuIv8R05QDLqbzDQgMMmmlvO6linuBGxDJhWAddq/G5 Ix/zuAjcrTrDxM2wAeAe3k5hIXbQigIVQdCaHmQdacgPTZm8xWmfnrEPppV1SwP0 vbzrV1QFnn+a9dQW5HeS4ssWeGk6pemddsj9Hp7Y43oo4zAm+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC0h1TyO3eRPLbdfqPRUEK6xL2BUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMjVhMmM0YjgtMmVhYS0z YzhmLWI3ZjMtYTFlYzk1NDcwNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0HbkoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrdzsiA85cW6twDo69CDrpuoPJQ4hCcoATvwnlJ0o4zhZwo/90pU1x sOhqaCU3m5mGeZl7Gup+Kj61/dHAJF3cLoVin36eJkmVqDZ+rrjE3yODagawD9Tb vb8teau4W53TO2/9paaZ4twWkurLfYhXEYdfapPF4L0WruxabEsZTIVkoZD1/y0u uCqTgyFIbFfY6tH3Hj6qzopslk+6lt1nMYoL9Ds/VjeG5lT6wPnvukwn1CZooSpD r8t2GOcnOS72L8n/YHjHCjj4jEeEgNBhnTa6opt7UKDjQC6kGZOdDQE9Ul8cq839 Dv9f4YAPYAA1x52JcEAROylOtFdMdDvg -----END CERTIFICATE-----Generated at Mon Apr 28 06:07:10 2025 by rpki-client