$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa File: 687029d7-b5e0-3fff-a306-88a32b338e0c.roa (raw, json) Hash identifier: QQkHr2AMlwOp5xSufjZIiv+Tj+rzN4eY9356x4mxnRg= Subject key identifier: 91:BF:03:A7:8D:6A:F4:AA:03:0B:CD:17:41:8C:DF:E9:22:99:99:29 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584AD7D10A3AFD51874B76471280 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 36445 IP address blocks: 198.232.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:0a:3a:fd:51:87:4b:76:47:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=cfa4dbc0-907e-451f-aca7-f9a5655dc04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:ee:1e:46:17:98:6b:74:22:bb:37:03:b3: bd:86:e1:80:cd:fe:a0:ad:2d:87:99:f0:35:46:56: da:41:e0:db:e6:66:de:a4:9b:16:a0:c6:2d:b5:1f: 98:2a:cd:89:df:7e:98:e4:77:4b:32:f9:fa:93:a3: c9:84:9e:dd:54:23:32:0f:f0:ff:e7:18:39:b0:7a: 38:28:14:60:1b:26:f3:19:92:03:6b:1b:3b:8f:0f: 83:3d:42:ca:ce:35:7a:36:4e:90:8d:92:2c:ba:d2: 2e:a1:03:86:f2:b2:d2:fc:64:0e:a3:a4:1c:d5:4a: aa:0f:ea:41:fc:8a:6d:1d:36:a1:40:8d:cf:af:50: 7f:74:91:ff:cc:ff:c1:a2:82:1b:5e:e2:87:7c:0b: 69:0b:7d:71:5f:9c:f4:fd:e5:1a:8b:86:c1:ca:b3: 5a:0f:24:00:02:a0:d6:20:c5:2c:4c:d6:ac:8f:91: fa:59:8a:63:24:e7:98:38:f5:3f:f2:e8:78:23:98: 26:3c:fb:08:7e:74:ef:38:6b:04:1e:3a:d1:32:45: f7:20:fe:f6:4a:b6:dc:45:8a:71:17:08:12:e8:04: 66:e5:e3:cc:20:dd:08:24:53:ea:b2:b8:ee:5b:67: db:4d:05:8c:cf:b7:f6:97:33:8b:f0:e4:df:ea:9f: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BF:03:A7:8D:6A:F4:AA:03:0B:CD:17:41:8C:DF:E9:22:99:99:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/687029d7-b5e0-3fff-a306-88a32b338e0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 198.232.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2c:de:37:21:79:15:81:8a:1e:34:f7:64:77:c1:0b:7a:b4: 2f:c8:c6:59:dc:4b:24:71:fc:9b:88:a1:d0:5c:45:28:9a:a7: 8a:b9:c3:5d:3a:38:a2:62:c1:43:49:06:93:b8:ba:8a:6e:9d: 9f:dd:8a:a3:b7:75:1a:df:51:2a:2d:a9:3a:d0:f1:6e:9f:74: 1d:1a:6f:74:37:4a:7a:5a:ec:2e:f2:31:a3:0e:6f:2e:26:45: c1:34:8e:f4:14:ed:90:ab:41:6d:2b:f9:1c:fc:05:42:b6:51: 19:f4:83:74:7a:62:82:7a:1f:28:61:ed:94:4a:01:b9:44:72: 63:a2:6f:39:c0:8d:3e:cb:d8:4c:0b:8c:59:66:a6:cb:80:cf: d4:7e:15:29:23:d1:bf:9d:03:28:73:08:5b:56:e3:c9:11:e0: b4:26:36:9c:e2:95:5a:cd:4e:5a:85:74:a6:89:68:6b:19:b5: 3a:0a:d2:aa:6e:2c:4e:cf:5a:49:d9:ca:48:bf:b1:87:b2:ca: 94:5a:1a:5b:d6:e4:00:4d:43:a7:4e:3b:3f:71:0d:75:f0:7d: f2:46:bb:ec:c1:bb:37:ba:0f:6d:0f:17:f0:c6:89:99:dd:32: 4a:2b:93:f6:df:74:9d:8d:96:85:cd:74:c4:98:30:81:07:46: bf:e7:c7:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Qo6/VGHS3ZHEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk Y2ZhNGRiYzAtOTA3ZS00NTFmLWFjYTctZjlhNTY1NWRjMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXDuHkYXmGt0Irs3A7O9huGAzf6grS2HmfA1 RlbaQeDb5mbepJsWoMYttR+YKs2J336Y5HdLMvn6k6PJhJ7dVCMyD/D/5xg5sHo4 KBRgGybzGZIDaxs7jw+DPULKzjV6Nk6QjZIsutIuoQOG8rLS/GQOo6Qc1UqqD+pB /IptHTahQI3Pr1B/dJH/zP/BooIbXuKHfAtpC31xX5z0/eUai4bByrNaDyQAAqDW IMUsTNasj5H6WYpjJOeYOPU/8uh4I5gmPPsIfnTvOGsEHjrRMkX3IP72SrbcRYpx FwgS6ARm5ePMIN0IJFPqsrjuW2fbTQWMz7f2lzOL8OTf6p8RcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG/A6eNavSqAwvNF0GM3+kimZkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNjg3MDI5ZDctYjVlMC0z ZmZmLWEzMDYtODhhMzJiMzM4ZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxujWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADss3jcheRWBih4092R3wQt6tC/IxlncSyRx/JuIodBcRSiap4q5w106 OKJiwUNJBpO4uopunZ/diqO3dRrfUSotqTrQ8W6fdB0ab3Q3Snpa7C7yMaMOby4m RcE0jvQU7ZCrQW0r+Rz8BUK2URn0g3R6YoJ6Hyhh7ZRKAblEcmOibznAjT7L2EwL jFlmpsuAz9R+FSkj0b+dAyhzCFtW48kR4LQmNpzilVrNTlqFdKaJaGsZtToK0qpu LE7PWknZyki/sYeyypRaGlvW5ABNQ6dOOz9xDXXwffJGu+zBuze6D20PF/DGiZnd Mkork/bfdJ2NloXNdMSYMIEHRr/nx5M= -----END CERTIFICATE-----Generated at Sat Aug 23 22:31:59 2025 by rpki-client