$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa File: 689d2a9d-418d-3143-b2c1-3624646b67b1.roa (raw, json) Hash identifier: kp/HNSMeORdI1OMLOSgYQ8TYQwjvM8p3llrbjRBJ47o= Subject key identifier: 58:50:BC:45:79:65:7A:FF:49:05:B8:5F:29:21:0C:EC:D3:09:19:02 Certificate issuer: /CN=b1898100-f40c-4002-b68a-8a97b548e69d Certificate serial: 010D0C9F4328584A374AD94E55F1FD17CED12EC0 Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 18526 IP address blocks: 158.51.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d9:4e:55:f1:fd:17:ce:d1:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=c5891d7f-c061-464a-99d2-9d43df051b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:bd:20:ec:66:dc:ed:37:ed:84:71:ad:72: e7:81:75:48:b7:f3:a2:f7:e0:00:b8:84:d5:d2:90: 0f:cb:13:ab:f1:75:8c:8f:96:13:4d:1e:b6:49:a6: 16:9a:2a:4e:8f:94:6f:95:a5:4d:b0:79:33:6e:b0: b5:2a:d2:57:b7:19:b2:b5:20:07:36:52:cb:7c:15: 66:65:4c:15:22:2e:0e:b3:e8:ee:bf:6b:9b:ab:47: 2f:77:ae:bc:9c:21:46:3a:ce:f7:54:1e:5e:2f:44: 67:62:3c:65:e6:16:d8:3b:66:17:0c:fb:ec:a1:6f: 77:29:df:88:e6:18:30:7d:d6:02:bf:14:9c:bf:d4: 90:ab:13:09:09:b5:aa:5f:18:fc:23:66:e3:68:53: 87:a0:5f:8a:03:08:a5:f1:9a:4e:f7:35:e3:f2:d7: 82:ae:d0:62:2b:e0:f0:74:c9:52:5b:18:a9:f9:14: 58:31:8a:8c:0d:77:5b:63:99:1e:77:dd:62:a0:a2: d1:53:82:89:2a:d6:95:a1:de:d7:9e:8c:c4:ac:e0: fc:90:15:69:0e:50:27:c4:4c:84:e9:74:bd:e7:05: 14:8c:00:d4:f3:d7:0e:fb:fa:f6:f5:ea:f9:66:e8: e7:52:79:f4:02:26:72:01:96:27:e0:1a:9d:dd:41: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:50:BC:45:79:65:7A:FF:49:05:B8:5F:29:21:0C:EC:D3:09:19:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl X509v3 Authority Key Identifier: keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer sbgp-ipAddrBlock: critical IPv4: 158.51.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:17:e3:8f:cc:8c:de:c4:da:fa:0d:88:c7:17:f9:1e:5a:79: 95:8b:75:b3:91:3e:00:01:98:75:60:08:1f:e2:47:5e:0d:77: d8:ea:b4:b5:96:24:83:a0:20:99:a8:dd:06:5e:d9:26:dc:9a: ab:ff:5c:72:69:dd:d7:61:01:9b:fd:91:2d:d4:56:ce:3f:58: 03:57:5b:85:d7:7a:9e:6a:99:61:2e:fb:ef:96:e3:7d:ca:64: 29:20:04:bf:58:22:d8:d5:d6:2b:73:08:69:bc:26:01:b8:af: 28:ab:df:80:98:db:78:df:90:ae:88:05:47:46:11:9f:5f:e0: 42:d9:ab:37:25:e9:01:d0:67:64:9b:da:ec:84:d1:e0:4d:9e: bf:0e:d6:a7:ce:c4:79:c0:11:34:33:65:24:57:60:04:6e:02: f7:36:e8:c1:5b:a1:86:90:47:77:ca:80:25:c6:fa:97:5e:35: 78:a6:cc:3b:95:9a:90:3c:c2:bb:66:c8:85:dd:20:71:83:c6: fb:5e:96:0d:5f:0f:fa:b2:5a:d6:6a:b1:fe:6c:40:9f:4f:2b: 57:23:cf:5d:22:ee:1f:d5:ca:79:34:c7:29:c2:21:b4:0e:00: 69:2c:0e:71:67:14:ab:ea:47:d2:a3:55:94:2f:29:db:d3:8f: 4b:81:ab:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StlOVfH9F87RLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl NjlkMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YzU4OTFkN2YtYzA2MS00NjRhLTk5ZDItOWQ0M2RmMDUxYjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojO9IOxm3O037YRxrXLngXVIt/Oi9+AAuITV 0pAPyxOr8XWMj5YTTR62SaYWmipOj5RvlaVNsHkzbrC1KtJXtxmytSAHNlLLfBVm ZUwVIi4Os+juv2ubq0cvd668nCFGOs73VB5eL0RnYjxl5hbYO2YXDPvsoW93Kd+I 5hgwfdYCvxScv9SQqxMJCbWqXxj8I2bjaFOHoF+KAwil8ZpO9zXj8teCrtBiK+Dw dMlSWxip+RRYMYqMDXdbY5ked91ioKLRU4KJKtaVod7XnozErOD8kBVpDlAnxEyE 6XS95wUUjADU89cO+/r29er5ZujnUnn0AiZyAZYn4Bqd3UGltQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhQvEV5ZXr/SQW4XykhDOzTCRkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5 ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvNjg5ZDJhOWQtNDE4ZC0z MTQzLWIyYzEtMzYyNDY0NmI2N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2 OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4 ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3 YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoX44/MjN7E2voNiMcX+R5aeZWLdbORPgABmHVgCB/iR14Nd9jqtLWW JIOgIJmo3QZe2Sbcmqv/XHJp3ddhAZv9kS3UVs4/WANXW4XXep5qmWEu+++W433K ZCkgBL9YItjV1itzCGm8JgG4ryir34CY23jfkK6IBUdGEZ9f4ELZqzcl6QHQZ2Sb 2uyE0eBNnr8O1qfOxHnAETQzZSRXYARuAvc26MFboYaQR3fKgCXG+pdeNXimzDuV mpA8wrtmyIXdIHGDxvtelg1fD/qyWtZqsf5sQJ9PK1cjz10i7h/Vynk0xynCIbQO AGksDnFnFKvqR9KjVZQvKdvTj0uBq2c= -----END CERTIFICATE-----Generated at Sun Jun 29 19:55:21 2025 by rpki-client