$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa File: 1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa (raw, json) Hash identifier: eRrIm7YgDN5vPOyLFaM/y+SHZXpZ9DIzMK6o0fcCpW4= Subject key identifier: 38:D7:27:94:89:5D:F3:A4:E7:ED:14:19:77:59:44:64:86:07:BD:EB Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A4C3B168D62A823EEAA6E2800 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 27602 IP address blocks: 198.145.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:16:8d:62:a8:23:ee:aa:6e:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=2613e7b3-b798-4235-a198-db7902c5cb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:19:f1:ef:a5:54:76:83:46:5c:df:9d:5a: e4:bf:65:fe:17:fc:ce:50:b5:1d:1e:be:fe:2d:08: e0:07:2f:92:8e:9e:cd:60:38:0d:07:8f:58:6c:c5: 6a:2e:76:4d:da:95:f5:86:64:0c:31:b4:88:e6:20: 24:95:47:ab:02:74:6d:ec:60:a2:f6:e6:ef:fd:6a: 97:08:28:e7:14:8f:bd:61:5f:32:a6:73:df:86:d4: 1f:da:cf:a2:31:c0:ca:ad:c5:a7:e0:14:8f:75:d9: 84:79:f3:75:09:95:80:60:12:c4:ca:7e:46:e6:ba: 79:8c:65:cb:f4:2e:28:34:bc:55:bd:d8:d8:8c:9b: 9b:2d:56:a5:94:04:c7:5f:f4:59:f2:e0:ec:a4:3f: 33:b7:09:ae:71:70:cb:91:bc:29:5d:bb:45:c2:21: 37:57:ae:29:97:24:f0:13:2f:ad:b2:f4:7f:27:37: 94:f7:f3:be:0d:ec:4b:79:58:f8:a4:7d:27:1d:7b: d4:78:1a:59:95:f8:14:83:6c:e3:9d:28:f9:81:28: bb:67:a0:02:65:37:12:d8:1a:79:4d:f1:75:e6:3a: 3a:60:10:e8:5f:53:b6:7a:b5:0a:fb:77:b2:8f:27: fe:68:5b:86:b7:f2:52:4e:32:4e:7a:ef:2c:b1:ae: d5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D7:27:94:89:5D:F3:A4:E7:ED:14:19:77:59:44:64:86:07:BD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/1e90e47c-ca19-3ae4-bcd7-d53fe171f2a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:68:df:b9:8e:ef:60:8a:ef:af:b8:3b:7a:2d:ba:b8:2a:0a: ca:56:85:93:99:00:d4:86:25:f1:b4:36:be:7a:d7:15:a1:6e: 07:3e:bc:d1:13:ba:99:74:c4:f6:ec:74:f5:93:a9:25:dc:47: 76:3d:b2:ad:d5:72:8a:cf:9a:de:c0:8c:d8:84:47:49:51:76: 80:0f:36:10:91:56:60:66:37:06:ac:4f:aa:81:40:e9:40:88: 33:d3:8c:e0:8f:97:d8:fc:32:5d:f1:a5:b4:db:42:6b:a7:f7: 87:c9:f3:af:24:1f:e4:42:8d:41:42:a5:84:81:3c:e6:a3:bb: 35:ea:75:5d:5e:4e:9d:48:fa:11:ec:5a:53:4b:60:89:8e:f3: 96:a3:ee:35:a9:61:fa:35:60:cd:6d:6c:9a:74:1b:e6:78:0e: fa:9b:67:85:51:01:c0:0d:2a:61:9f:d1:69:52:45:0b:6c:bd: b5:1b:16:39:2c:13:1b:43:60:18:ae:d6:10:74:ba:f6:87:d5: 05:5e:da:74:b8:c7:77:61:b0:ff:c9:0c:e5:bc:ad:c2:81:4e: 83:3d:a5:df:0a:c1:43:f4:27:33:e7:5b:d5:67:79:15:18:3f: 84:07:19:2f:9f:f8:a9:41:0a:eb:37:76:bd:9d:ce:04:2a:59: 2b:69:ce:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxaNYqgj7qpuKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MjYxM2U3YjMtYjc5OC00MjM1LWExOTgtZGI3OTAyYzVjYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrQZ8e+lVHaDRlzfnVrkv2X+F/zOULUdHr7+ LQjgBy+Sjp7NYDgNB49YbMVqLnZN2pX1hmQMMbSI5iAklUerAnRt7GCi9ubv/WqX CCjnFI+9YV8ypnPfhtQf2s+iMcDKrcWn4BSPddmEefN1CZWAYBLEyn5G5rp5jGXL 9C4oNLxVvdjYjJubLVallATHX/RZ8uDspD8ztwmucXDLkbwpXbtFwiE3V64plyTw Ey+tsvR/JzeU9/O+DexLeVj4pH0nHXvUeBpZlfgUg2zjnSj5gSi7Z6ACZTcS2Bp5 TfF15jo6YBDoX1O2erUK+3eyjyf+aFuGt/JSTjJOeu8ssa7VwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjXJ5SJXfOk5+0UGXdZRGSGB73rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMWU5MGU0N2MtY2ExOS0z YWU0LWJjZDctZDUzZmUxNzFmMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdo37mO72CK76+4O3oturgqCspWhZOZANSGJfG0Nr561xWhbgc+vNET upl0xPbsdPWTqSXcR3Y9sq3VcorPmt7AjNiER0lRdoAPNhCRVmBmNwasT6qBQOlA iDPTjOCPl9j8Ml3xpbTbQmun94fJ868kH+RCjUFCpYSBPOajuzXqdV1eTp1I+hHs WlNLYImO85aj7jWpYfo1YM1tbJp0G+Z4DvqbZ4VRAcANKmGf0WlSRQtsvbUbFjks ExtDYBiu1hB0uvaH1QVe2nS4x3dhsP/JDOW8rcKBToM9pd8KwUP0JzPnW9VneRUY P4QHGS+f+KlBCus3dr2dzgQqWStpzoo= -----END CERTIFICATE-----Generated at Mon Jun 30 01:29:50 2025 by rpki-client