$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa File: 98e047ca-9195-3a20-aea9-f36970a2a4b4.roa (raw, json) Hash identifier: jXL+Lkpr9HWQUxrxM6IHj2gu+yX1OZo53W0sp8QvTMo= Subject key identifier: 67:64:0F:64:08:47:28:B8:66:AA:A1:F2:67:16:76:56:6F:48:4D:33 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584A7FE08B5DC0A4568195F372E0 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 10745 IP address blocks: 192.149.252.0/24 maxlen: 24 2620:d0:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:8b:5d:c0:a4:56:81:95:f3:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=877196dc-54c4-4dd0-9d34-da7018faca89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:d1:61:b0:77:48:36:d9:fe:99:1a:ae:46: 74:86:06:b9:e3:70:09:59:09:d1:2c:27:ee:65:bb: 61:26:0d:cc:d5:8d:08:ea:81:39:70:6b:3c:3a:0b: de:d2:02:af:c9:c0:e5:b1:43:f1:6d:cc:b4:6c:a2: 09:16:4a:01:9c:08:92:61:5a:d5:b4:0d:e8:e0:61: 01:0d:c0:24:1c:b5:7c:f3:fc:2c:e5:04:25:b4:e0: 4e:aa:f4:ff:38:be:ea:c9:56:77:a4:67:ae:a0:ed: b4:a6:58:63:54:a7:95:78:b6:f3:c9:9a:5d:ff:28: 41:39:a8:4b:18:ce:c6:af:26:65:b4:01:3b:7d:34: a5:b4:dc:7a:02:14:f0:96:ac:33:33:3f:86:2f:c0: 66:dc:0b:5a:ae:00:95:77:e8:a7:37:2d:9e:d5:81: 51:ae:2c:75:1c:bd:90:61:be:91:59:e4:ad:32:97: 7d:ba:f0:08:04:3b:fb:08:91:df:53:6e:2b:44:ea: 95:0e:71:f6:18:47:03:10:8d:ab:3b:23:2d:3b:99: 46:14:5e:92:f0:25:e3:5a:1a:c8:5e:80:3c:11:cc: 4e:24:63:0b:b1:77:57:45:02:21:ec:e5:dd:86:62: 9d:01:5e:45:aa:38:84:0d:a3:01:d4:02:82:3c:4d: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:64:0F:64:08:47:28:B8:66:AA:A1:F2:67:16:76:56:6F:48:4D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98e047ca-9195-3a20-aea9-f36970a2a4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv4: 192.149.252.0/24 IPv6: 2620:d0:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:43:f0:97:6c:8e:57:40:c6:8e:8b:1b:3c:94:0d:0f:0b:8a: 1a:ad:3c:61:7a:2b:86:8b:0d:94:3d:e9:26:d5:f3:8e:ae:f1: 2e:c2:0f:83:a4:1b:37:fe:f9:46:54:84:8c:a3:41:8d:6c:77: 94:69:28:bc:75:a0:5a:67:8e:57:d1:17:bd:83:47:a2:a1:13: 1e:b9:ad:7b:b0:fa:32:2e:09:96:39:f2:07:82:c3:82:73:fa: a1:2c:bc:ff:29:0f:f2:25:e4:6a:69:ef:89:cf:11:24:fa:f5: 3a:96:26:1a:f4:01:4b:22:1b:25:e6:bf:ad:48:b0:b1:0b:7b: f7:46:cd:ad:ad:e8:b7:bc:35:8f:47:b9:73:35:e8:0e:7b:7e: 4c:06:60:4a:10:fb:36:b6:5a:bf:b8:46:eb:83:7b:03:8f:19: ef:d5:91:91:86:15:f7:a8:87:17:8a:1a:4a:ae:52:08:37:06: a5:83:29:c7:39:72:a5:f1:2a:e3:48:1f:69:81:e8:6d:ce:19: 16:96:c9:10:88:cb:ea:e9:21:59:85:c5:0d:d9:74:87:7b:1a: bc:f8:39:12:09:c8:e6:ef:50:b6:d0:7e:f1:41:08:65:ce:da: 4a:3c:69:16:4b:43:5c:46:5d:31:81:1d:de:66:6e:8b:fb:d0: 08:f2:83:a4 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEp/4ItdwKRWgZXzcuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk ODc3MTk2ZGMtNTRjNC00ZGQwLTlkMzQtZGE3MDE4ZmFjYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM/RYbB3SDbZ/pkarkZ0hga543AJWQnRLCfu ZbthJg3M1Y0I6oE5cGs8Ogve0gKvycDlsUPxbcy0bKIJFkoBnAiSYVrVtA3o4GEB DcAkHLV88/ws5QQltOBOqvT/OL7qyVZ3pGeuoO20plhjVKeVeLbzyZpd/yhBOahL GM7GryZltAE7fTSltNx6AhTwlqwzMz+GL8Bm3AtargCVd+inNy2e1YFRrix1HL2Q Yb6RWeStMpd9uvAIBDv7CJHfU24rROqVDnH2GEcDEI2rOyMtO5lGFF6S8CXjWhrI XoA8EcxOJGMLsXdXRQIh7OXdhmKdAV5FqjiEDaMB1AKCPE3M4wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGdkD2QIRyi4Zqqh8mcWdlZvSE0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvOThlMDQ3Y2EtOTE5NS0z YTIwLWFlYTktZjM2OTcwYTJhNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwJX8MA8E AgACMAkDBwAmIADQYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAw0Pwl2yOV0DGjosbPJQNDwuKGq08YXor hosNlD3pJtXzjq7xLsIPg6QbN/75RlSEjKNBjWx3lGkovHWgWmeOV9EXvYNHoqET Hrmte7D6Mi4JljnyB4LDgnP6oSy8/ykP8iXkamnvic8RJPr1OpYmGvQBSyIbJea/ rUiwsQt790bNra3ot7w1j0e5czXoDnt+TAZgShD7NrZav7hG64N7A48Z79WRkYYV 96iHF4oaSq5SCDcGpYMpxzlypfEq40gfaYHobc4ZFpbJEIjL6ukhWYXFDdl0h3sa vPg5EgnI5u9QttB+8UEIZc7aSjxpFktDXEZdMYEd3mZui/vQCPKDpA== -----END CERTIFICATE-----Generated at Sun Aug 24 04:35:40 2025 by rpki-client