$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa File: 54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa (raw, json) Hash identifier: bdGUxUPpi0xeER2PIE2l4qg+oRTnkYtCOifzQWyuLNE= Subject key identifier: D3:64:F6:CA:D8:5D:40:84:21:11:23:BB:56:0D:01:17:C9:04:17:6B Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A3E459DA5C1DF190518C17780 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 9009 IP address blocks: 198.145.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:9d:a5:c1:df:19:05:18:c1:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=16b4db61-27a9-48eb-b701-b8e83b977559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:d4:ab:ee:5c:b1:3d:f5:c6:75:85:36:71: 63:ea:08:7f:ef:f2:5a:15:bb:8d:73:ed:ef:1f:4c: 2c:cb:d2:3d:c4:d3:c6:99:01:36:82:37:f0:49:ed: 01:8b:c6:5f:a3:2c:db:e5:7d:3e:af:f0:d7:17:90: cb:5e:13:30:45:b6:67:17:d9:61:6a:80:91:95:7c: 77:a7:66:57:e9:bf:4c:f1:80:b6:61:73:e1:05:ed: 6d:65:2d:6a:ba:38:2c:45:20:4b:1f:03:f7:36:b4: 92:c1:6b:19:30:f7:bb:8a:d2:56:6c:53:f1:60:5c: cd:6a:5d:62:c5:34:d0:8d:60:54:65:dc:dd:5d:f4: 02:71:d0:ac:22:9a:58:f5:7e:e8:6d:b7:ab:09:3e: 26:d6:89:0f:dc:39:98:56:0e:64:f9:76:0b:2e:d8: 42:95:5a:90:e4:30:1b:fa:c1:d5:73:d4:2c:30:eb: c9:af:ff:7e:a1:ff:92:ec:95:20:87:99:43:30:4d: b2:86:04:6a:61:6d:ce:97:62:31:09:33:ac:5e:c4: 50:28:18:03:e2:0b:20:f7:81:58:9e:75:2a:3a:e8: 59:e2:42:b4:e7:bc:8f:46:2f:68:15:d5:b4:66:4c: b4:1a:36:11:2b:e7:6e:30:67:b9:b8:a6:c9:26:86: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:64:F6:CA:D8:5D:40:84:21:11:23:BB:56:0D:01:17:C9:04:17:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:57:fb:33:83:be:60:a4:f8:90:61:53:3e:b0:88:a8:7b:82: fa:11:24:29:d4:1b:a3:b4:c1:20:91:be:1b:5c:37:42:52:21: 5d:94:f2:a1:04:03:89:3b:59:89:c4:e5:bc:51:78:d2:6f:15: d4:16:0a:1f:71:2d:83:8e:94:f9:ac:cb:46:0c:27:c0:13:25: 0e:68:41:a0:d1:dd:87:b5:31:4a:0c:48:52:6f:a9:38:3e:8c: 18:bb:6f:d9:34:80:74:e9:bc:51:a5:b7:68:b4:0e:a0:ca:e2: 15:f2:93:9a:5c:c8:14:dd:95:8e:6d:23:49:1e:80:d9:94:22: 76:83:08:49:85:b1:fc:a4:3d:c5:7c:f2:b5:c0:8d:11:89:1f: 4c:8c:0d:bf:0b:c4:14:cb:4a:f7:ad:0b:81:85:90:d9:dc:a8: dc:e3:46:94:47:0f:fe:7b:e9:a1:26:46:b8:42:d1:1e:78:b4: d9:68:ab:8a:02:a2:ca:fb:24:ed:a9:08:bf:a9:83:7f:ca:31: 64:a3:b8:fc:23:41:ee:a0:7e:7e:59:75:d2:90:42:d0:d5:99: 6c:bc:b3:9a:10:4d:06:af:10:47:9b:9a:8f:9e:bd:01:d4:86: 85:37:68:61:8c:81:f3:c9:71:a0:ec:5a:bd:a5:b1:70:10:bb: 8d:82:d9:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RZ2lwd8ZBRjBd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk MTZiNGRiNjEtMjdhOS00OGViLWI3MDEtYjhlODNiOTc3NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYjUq+5csT31xnWFNnFj6gh/7/JaFbuNc+3v H0wsy9I9xNPGmQE2gjfwSe0Bi8Zfoyzb5X0+r/DXF5DLXhMwRbZnF9lhaoCRlXx3 p2ZX6b9M8YC2YXPhBe1tZS1qujgsRSBLHwP3NrSSwWsZMPe7itJWbFPxYFzNal1i xTTQjWBUZdzdXfQCcdCsIppY9X7obberCT4m1okP3DmYVg5k+XYLLthClVqQ5DAb +sHVc9QsMOvJr/9+of+S7JUgh5lDME2yhgRqYW3Ol2IxCTOsXsRQKBgD4gsg94FY nnUqOuhZ4kK057yPRi9oFdW0Zky0GjYRK+duMGe5uKbJJoZzrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNk9srYXUCEIREju1YNARfJBBdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTRlZjM2YTAtYTk3YS0z M2ZlLTk5MTctYWZiMGQwMjNmNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5X+zODvmCk+JBhUz6wiKh7gvoRJCnUG6O0wSCRvhtcN0JSIV2U8qEE A4k7WYnE5bxReNJvFdQWCh9xLYOOlPmsy0YMJ8ATJQ5oQaDR3Ye1MUoMSFJvqTg+ jBi7b9k0gHTpvFGlt2i0DqDK4hXyk5pcyBTdlY5tI0kegNmUInaDCEmFsfykPcV8 8rXAjRGJH0yMDb8LxBTLSvetC4GFkNncqNzjRpRHD/576aEmRrhC0R54tNloq4oC osr7JO2pCL+pg3/KMWSjuPwjQe6gfn5ZddKQQtDVmWy8s5oQTQavEEebmo+evQHU hoU3aGGMgfPJcaDsWr2lsXAQu42C2TM= -----END CERTIFICATE-----Generated at Sun Jun 29 09:10:40 2025 by rpki-client