$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa File: 562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa (raw, json) Hash identifier: z1gqpSpfD0uBeozZ3qkjYsVUd188ziAjeWFK+G8krZ8= Subject key identifier: B0:85:1A:52:A8:37:54:6B:2C:D0:87:38:0E:0E:48:CB:BC:14:B5:E9 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584ACE0BA4EC0737088A7C124480 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 20303 IP address blocks: 198.145.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a4:ec:07:37:08:8a:7c:12:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=57fb7809-d7f2-4e70-a072-627155138076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:35:42:b0:e5:44:ca:35:2a:44:57:33:7f: 36:3a:45:37:5d:3d:31:c2:30:26:55:35:fe:7e:1f: eb:3c:2c:8d:e2:93:6d:66:ef:a1:43:75:b9:87:57: 2f:a5:bf:ef:0d:3b:41:af:dd:34:68:a4:31:cf:ba: f1:c8:6b:f9:26:06:97:0d:b3:2a:22:a3:39:a5:6c: 00:a8:fc:91:9c:8f:2b:e3:b5:e5:d8:78:fc:28:18: 28:e4:0e:3d:d9:00:e9:08:fb:1f:89:43:d9:5a:d0: 24:66:bd:49:ee:63:9f:f7:ba:60:68:76:a4:ee:63: 23:30:72:da:77:4a:1d:32:a2:71:90:ee:4d:b9:84: 48:c5:d1:75:40:51:71:51:a8:90:e0:53:75:d1:4b: 36:5a:d9:63:bd:c3:a9:40:35:13:2f:89:2b:e3:88: cd:f7:e2:89:9a:e8:16:4f:64:8f:5b:97:33:d0:49: 59:56:b1:49:7f:8a:14:76:57:02:5c:f2:34:54:d9: 55:b9:b8:b3:7e:5f:24:a9:d8:0b:73:28:27:e1:f3: 7c:02:77:a7:d3:79:11:48:83:e7:64:4e:88:d2:6d: 0e:20:a8:d8:66:a2:08:cb:ab:44:1c:b4:aa:c5:48: 18:5e:b3:80:5f:75:94:99:ef:2a:0a:ab:f1:88:51: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:85:1A:52:A8:37:54:6B:2C:D0:87:38:0E:0E:48:CB:BC:14:B5:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3d:1e:e9:d4:ea:a2:b1:e6:eb:34:9a:3a:8c:bd:4e:59:e9: 9f:71:64:c4:c0:7f:d2:7f:b3:31:39:f9:53:17:19:f3:69:e8: e4:07:7a:34:12:c9:a7:04:75:e0:7d:59:db:e0:1e:38:5e:4a: 45:69:c5:7c:23:93:cc:df:f2:2e:fb:47:4a:1f:22:bb:68:7b: 99:4d:3f:12:14:b2:56:49:5d:22:ae:22:4a:33:52:59:0b:f2: 37:0e:14:2f:40:0b:6c:22:a4:d5:e9:b6:0f:af:3b:0e:7a:87: 3a:65:cd:43:8f:c7:3f:13:f1:2a:9c:e1:7d:55:19:44:42:7e: 02:2d:0a:b4:d1:24:fe:dc:59:a6:11:39:57:b0:2b:78:84:23: cb:30:58:9d:42:68:16:2e:8c:a1:48:57:d2:13:da:3f:20:e3: de:d7:04:2a:2f:b1:5f:74:59:68:72:ab:7c:46:1f:30:0f:60: 6e:48:df:d2:45:4b:84:30:77:27:5d:ae:b6:ec:08:6f:ea:68: 75:e3:23:26:e4:79:ae:f8:e2:15:96:02:27:fd:2a:2f:0f:32: 3e:65:14:b4:9e:75:bf:12:ec:04:59:92:a5:54:93:b0:28:82: 36:4a:bf:01:08:46:8d:fb:5b:a2:a0:40:f2:12:6d:3f:a9:a7: 49:d8:fe:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6TsBzcIinwSRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NTdmYjc4MDktZDdmMi00ZTcwLWEwNzItNjI3MTU1MTM4MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaM1QrDlRMo1KkRXM382OkU3XT0xwjAmVTX+ fh/rPCyN4pNtZu+hQ3W5h1cvpb/vDTtBr900aKQxz7rxyGv5JgaXDbMqIqM5pWwA qPyRnI8r47Xl2Hj8KBgo5A492QDpCPsfiUPZWtAkZr1J7mOf97pgaHak7mMjMHLa d0odMqJxkO5NuYRIxdF1QFFxUaiQ4FN10Us2WtljvcOpQDUTL4kr44jN9+KJmugW T2SPW5cz0ElZVrFJf4oUdlcCXPI0VNlVubizfl8kqdgLcygn4fN8Anen03kRSIPn ZE6I0m0OIKjYZqIIy6tEHLSqxUgYXrOAX3WUme8qCqvxiFHZbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCFGlKoN1RrLNCHOA4OSMu8FLXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTYyY2E0YmItZTlmMy0z YmFlLWIyZjgtODA3ZTYzZWY0ZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc9HunU6qKx5us0mjqMvU5Z6Z9xZMTAf9J/szE5+VMXGfNp6OQHejQS yacEdeB9WdvgHjheSkVpxXwjk8zf8i77R0ofIrtoe5lNPxIUslZJXSKuIkozUlkL 8jcOFC9AC2wipNXptg+vOw56hzplzUOPxz8T8Sqc4X1VGURCfgItCrTRJP7cWaYR OVewK3iEI8swWJ1CaBYujKFIV9IT2j8g497XBCovsV90WWhyq3xGHzAPYG5I39JF S4QwdyddrrbsCG/qaHXjIybkea744hWWAif9Ki8PMj5lFLSedb8S7ARZkqVUk7Ao gjZKvwEIRo37W6KgQPISbT+pp0nY/kA= -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:06 2025 by rpki-client