$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d0226f1d-dad7-3926-8011-73c4f7ea0d55.roa File: d0226f1d-dad7-3926-8011-73c4f7ea0d55.roa (raw, json) Hash identifier: evpMZwrm6MhcRqtbH07mxEr6t5SrWZNlFhuAK4upXio= Subject key identifier: 8A:18:74:49:EE:37:90:C3:F9:EC:F7:E5:52:65:12:C7:26:79:B6:83 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584ACE0BA502477A37A5A84B4280 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d0226f1d-dad7-3926-8011-73c4f7ea0d55.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 20303 IP address blocks: 198.145.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a5:02:47:7a:37:a5:a8:4b:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=aff04b6a-b751-4ca1-bc80-47c3ad281fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:18:be:4b:91:24:31:29:d8:4a:cb:85:48: ea:8c:cf:1c:8f:66:ab:51:09:fb:cd:1a:82:74:a2: ba:6e:c3:82:de:c2:f4:08:8b:66:71:98:7d:b7:a4: e8:2c:de:0f:a7:89:a3:d0:f5:89:11:b6:e5:32:d6: d1:52:36:1d:f8:49:8d:f7:bd:2e:ed:d2:aa:f3:06: d4:31:88:17:21:fb:9c:65:0d:f6:41:37:a5:f5:f3: 54:d6:42:0d:7d:94:d0:df:16:da:e8:36:4e:c4:43: 5a:7c:d5:b0:c0:59:41:e9:63:74:26:93:94:de:21: c5:69:8c:6b:d4:f5:73:37:53:35:c7:b4:5f:6a:11: cf:ad:0b:7c:2e:1c:57:35:02:32:30:b1:8c:21:3b: 80:82:ab:bb:68:b4:94:74:75:59:82:95:ba:bf:16: 3f:8a:39:b2:f5:8a:0a:b7:d7:e6:cd:dd:c0:2f:b7: 4b:3c:07:91:84:2d:b3:8b:17:b7:1b:33:af:4d:73: 37:f3:65:75:f2:b7:ca:1a:a4:32:d7:5d:0c:d4:cd: 29:63:ad:11:7f:1c:45:f0:77:95:3a:24:07:b0:fe: 57:81:d2:5e:eb:f9:6d:1f:f3:30:91:a3:61:d2:a6: e7:71:bd:50:38:77:31:d2:0b:0f:4f:95:b9:5b:b3: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:18:74:49:EE:37:90:C3:F9:EC:F7:E5:52:65:12:C7:26:79:B6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d0226f1d-dad7-3926-8011-73c4f7ea0d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f6:39:13:8d:40:79:d8:a0:e7:7e:6e:b7:86:d4:da:76:58: a9:45:57:a6:28:d6:b2:1a:26:2e:d0:22:4e:cf:50:b1:96:d0: e5:dc:c3:78:f6:43:7d:88:21:e4:ac:28:34:e3:37:df:1d:80: 02:d5:29:77:e4:84:a1:b5:9c:05:21:50:9b:fa:7f:87:12:6e: 7d:91:96:9c:33:e7:15:ac:72:90:3c:c1:c4:ca:a9:10:5e:00: 82:e0:da:e7:49:ac:84:71:2f:6c:8e:b9:2b:39:4d:2b:25:b1: 4a:91:2b:3f:d6:c4:3d:43:70:29:a1:fa:d0:31:dd:0c:c3:c3: 5a:78:5b:b4:b0:d7:a7:69:5e:5e:7b:40:a2:73:8e:0b:05:9a: af:84:14:33:63:db:92:16:5e:4a:82:b9:6a:74:a1:4f:20:f3: e7:12:fc:92:d4:c3:cb:54:4f:ed:dc:71:06:e7:76:f5:5d:62: 9f:ca:2d:d8:f7:10:a1:37:66:93:5b:90:20:54:52:d6:1d:b9: cf:c4:b6:aa:95:76:50:45:a4:3c:24:05:9f:ee:3c:5d:dd:ac: bd:88:ad:70:83:db:86:99:89:fd:aa:fa:a5:a5:02:cf:36:ef: 79:af:4c:9b:68:68:c5:ad:8e:ee:2a:31:ba:2a:9c:fb:0d:d0: f9:21:1d:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6UCR3o3pahLQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YWZmMDRiNmEtYjc1MS00Y2ExLWJjODAtNDdjM2FkMjgxZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn04YvkuRJDEp2ErLhUjqjM8cj2arUQn7zRqC dKK6bsOC3sL0CItmcZh9t6ToLN4Pp4mj0PWJEbblMtbRUjYd+EmN970u7dKq8wbU MYgXIfucZQ32QTel9fNU1kINfZTQ3xba6DZOxENafNWwwFlB6WN0JpOU3iHFaYxr 1PVzN1M1x7RfahHPrQt8LhxXNQIyMLGMITuAgqu7aLSUdHVZgpW6vxY/ijmy9YoK t9fmzd3AL7dLPAeRhC2zixe3GzOvTXM382V18rfKGqQy110M1M0pY60RfxxF8HeV OiQHsP5XgdJe6/ltH/MwkaNh0qbncb1QOHcx0gsPT5W5W7N8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoYdEnuN5DD+ez35VJlEscmebaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZDAyMjZmMWQtZGFkNy0z OTI2LTgwMTEtNzNjNGY3ZWEwZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf2ORONQHnYoOd+breG1Np2WKlFV6Yo1rIaJi7QIk7PULGW0OXcw3j2 Q32IIeSsKDTjN98dgALVKXfkhKG1nAUhUJv6f4cSbn2Rlpwz5xWscpA8wcTKqRBe AILg2udJrIRxL2yOuSs5TSslsUqRKz/WxD1DcCmh+tAx3QzDw1p4W7Sw16dpXl57 QKJzjgsFmq+EFDNj25IWXkqCuWp0oU8g8+cS/JLUw8tUT+3ccQbndvVdYp/KLdj3 EKE3ZpNbkCBUUtYduc/EtqqVdlBFpDwkBZ/uPF3drL2IrXCD24aZif2q+qWlAs82 73mvTJtoaMWtju4qMboqnPsN0PkhHT4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:08 2025 by rpki-client