$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa File: 975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa (raw, json) Hash identifier: xK1l+0Jf53o51RH/1V1rnjIbNk7hsqGzb+pSN7po+RQ= Subject key identifier: 89:91:8A:61:B1:B0:9A:A9:C8:B7:0F:A0:CA:12:10:F5:84:BC:5E:CD Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F43285849CBCF8CC7B9BA8B6FC5797080 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 395213 IP address blocks: 208.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8c:c7:b9:ba:8b:6f:c5:79:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=79484e6d-f90c-4a10-9105-f64760720351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:61:bb:fb:5d:c0:98:f8:54:6b:eb:25:ee: 37:4e:e7:67:0e:ea:42:35:a9:fe:c5:17:2b:d7:39: 2a:ad:ba:00:7c:f1:19:e3:ca:bf:81:c1:f0:f6:89: 95:5e:2f:47:11:28:43:a4:36:e8:66:45:da:a7:8e: b1:aa:0e:58:ad:26:54:b4:5c:09:80:23:0e:d0:4c: 97:92:09:ab:46:47:ba:b9:3e:fc:8a:08:eb:89:40: 1c:e8:cf:2e:bb:5c:87:a1:bb:76:56:15:d7:a5:5a: e3:d7:67:d3:20:fb:d7:59:d5:60:fa:3a:21:a0:fd: dc:18:84:85:6e:ff:3a:a6:39:18:be:36:73:e8:45: 7a:6a:4c:06:f2:38:79:dd:3d:96:09:7c:d7:75:1d: a8:2f:01:4f:90:e9:a9:f1:36:8e:6d:62:b2:1f:4a: 57:2b:e7:7c:d2:76:6c:9e:8c:34:e6:bc:c4:7b:fc: 18:46:ed:ed:0c:e7:65:9c:dd:9b:d2:d7:c2:3e:9f: b0:cc:b2:31:77:ac:4e:ec:3d:fb:a8:a9:f2:4b:00: 24:4a:18:bc:9d:a7:73:20:d1:a4:19:03:28:88:b3: 58:a9:83:29:e0:b7:81:67:63:48:39:f7:d2:eb:4e: da:89:0a:d5:4d:ee:03:66:3f:ee:0f:9a:58:3a:aa: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:91:8A:61:B1:B0:9A:A9:C8:B7:0F:A0:CA:12:10:F5:84:BC:5E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ae:30:e0:04:4b:60:b5:76:a0:28:0f:7f:f7:8a:92:15:59: c0:a8:b8:29:2c:35:91:06:1f:de:bb:93:5a:34:09:55:b9:3e: 66:ce:35:e4:2d:58:58:1d:36:b1:d4:d0:08:db:46:39:3d:57: e7:b4:42:ad:f9:95:1b:90:f0:21:d2:e5:80:61:7e:da:e7:53: ce:b9:0a:57:d9:0d:97:04:8a:d6:d3:04:c7:c0:5b:63:02:7a: a7:3c:b4:c5:2a:b6:a9:6a:9f:53:94:01:cf:f5:46:34:18:90: 5c:9a:fc:64:5a:28:39:c2:98:35:b6:53:4f:3e:2a:33:42:0d: c2:73:c0:ed:d2:8a:24:0d:f1:24:84:2f:02:e5:c6:d5:2a:a7: 2f:13:46:9b:a1:96:40:40:00:26:f9:80:08:9a:42:4c:8c:df: 91:3b:4c:d8:33:ab:e7:92:85:07:55:66:92:20:88:ff:e7:a8: d8:9f:e5:b6:b3:97:48:c8:6b:04:c7:92:59:d1:8f:d4:3a:1c: b4:de:2d:c1:e9:83:8c:d4:28:c8:41:8b:26:f7:83:54:e3:dd: a1:b1:12:4d:b3:f6:59:02:d2:a0:84:0b:42:ff:31:66:e6:c5: 7b:cb:7f:50:6b:fd:dc:63:8d:0a:6b:d6:66:63:3c:2c:d1:45: 67:33:c3:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4zHubqLb8V5cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk Nzk0ODRlNmQtZjkwYy00YTEwLTkxMDUtZjY0NzYwNzIwMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE9hu/tdwJj4VGvrJe43TudnDupCNan+xRcr 1zkqrboAfPEZ48q/gcHw9omVXi9HEShDpDboZkXap46xqg5YrSZUtFwJgCMO0EyX kgmrRke6uT78igjriUAc6M8uu1yHobt2VhXXpVrj12fTIPvXWdVg+johoP3cGISF bv86pjkYvjZz6EV6akwG8jh53T2WCXzXdR2oLwFPkOmp8TaObWKyH0pXK+d80nZs now05rzEe/wYRu3tDOdlnN2b0tfCPp+wzLIxd6xO7D37qKnySwAkShi8nadzINGk GQMoiLNYqYMp4LeBZ2NIOffS607aiQrVTe4DZj/uD5pYOqoeLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImRimGxsJqpyLcPoMoSEPWEvF7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTc1ZmUxZTYtYjBmMi0z NTE3LWJhZTUtMWU1MWZkNjNjNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCuMOAES2C1dqAoD3/3ipIVWcCouCksNZEGH967k1o0CVW5PmbONeQt WFgdNrHU0AjbRjk9V+e0Qq35lRuQ8CHS5YBhftrnU865ClfZDZcEitbTBMfAW2MC eqc8tMUqtqlqn1OUAc/1RjQYkFya/GRaKDnCmDW2U08+KjNCDcJzwO3SiiQN8SSE LwLlxtUqpy8TRpuhlkBAACb5gAiaQkyM35E7TNgzq+eShQdVZpIgiP/nqNif5baz l0jIawTHklnRj9Q6HLTeLcHpg4zUKMhBiyb3g1Tj3aGxEk2z9lkC0qCEC0L/MWbm xXvLf1Br/dxjjQpr1mZjPCzRRWczw5I= -----END CERTIFICATE-----Generated at Mon Jun 16 12:03:35 2025 by rpki-client