$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa File: 3c598d36-d861-301d-8cfb-9a87e005e102.roa (raw, json) Hash identifier: rxScybG9GT0D9b4zioPVUadn1rZMe6k0QGx+07hRpuI= Subject key identifier: 97:AB:8F:3D:DC:C3:3E:D6:AB:EC:56:B8:12:EC:49:07:98:8A:9A:8D Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F4328584ACCA657B20A2DA2E2AD522500 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 13462 IP address blocks: 140.98.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:57:b2:0a:2d:a2:e2:ad:52:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=7209a041-7e5f-4291-861b-493ef7fefd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:13:8f:7a:43:a1:43:68:7d:1b:5c:7d:dc: a2:75:86:89:73:a5:39:39:4c:b1:64:28:97:f3:c2: bf:8b:d4:bc:d4:b8:83:40:f9:13:a0:b2:3d:0a:e4: d0:ab:5d:4c:4f:9d:fa:2d:7e:89:87:45:d6:ee:02: 89:3d:e0:9b:b5:5e:d9:b1:58:ad:81:57:af:b7:cd: b6:e1:0a:25:b7:15:97:66:dc:e2:27:1a:69:92:ea: 63:3e:5d:07:00:c2:31:a5:6c:4c:24:53:b9:09:e6: 41:eb:24:c8:83:71:46:f2:6a:d1:f7:ac:87:d0:5c: da:ee:f5:68:ac:78:45:37:43:7c:0d:06:8b:aa:91: 5c:a5:c3:7d:23:1d:6d:f1:93:b8:49:97:23:38:77: aa:fe:d6:a0:29:23:0a:98:ab:7d:6c:89:b3:8b:72: d1:ab:89:9c:e9:c8:9f:12:ea:38:32:20:43:6a:fb: e0:cc:bf:9b:1d:80:dd:a0:98:ff:87:b9:d3:cc:1b: 24:36:02:5f:a9:b1:a0:d4:75:bb:35:80:01:1b:82: 20:3e:4f:a4:1a:29:b6:e1:37:f7:8b:6d:54:4d:a9: 6f:b9:de:5d:f6:d4:48:6a:5e:c0:dd:93:75:3e:e9: 35:06:46:7d:a8:fe:de:d1:87:27:0a:e1:f8:20:11: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:8F:3D:DC:C3:3E:D6:AB:EC:56:B8:12:EC:49:07:98:8A:9A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/3c598d36-d861-301d-8cfb-9a87e005e102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:49:fb:8d:8b:1a:ba:d8:dd:5c:68:1f:0b:ed:10:95:cf:76: 85:85:5a:7b:90:31:1c:8f:68:e0:da:9e:8e:7b:1b:24:14:ca: 6b:8e:4c:04:0d:1a:56:c3:b0:55:ac:ff:97:7b:7e:9c:72:f5: a1:b3:a9:99:8d:f1:53:47:3b:e2:cd:e5:84:0a:e9:95:70:b8: 31:a1:c2:be:98:3f:20:3a:c2:ff:16:25:6f:eb:f8:6e:51:1c: f0:c3:66:6d:ae:8e:9c:8c:69:e4:d0:d9:07:44:ea:db:5b:8e: 13:5e:12:88:55:72:51:fa:54:fd:ef:cc:c2:8f:a9:a1:a8:1a: b0:14:31:ff:7f:8f:58:a4:1a:d0:90:28:67:7f:01:96:c5:8e: b3:cf:58:b8:10:a4:fc:76:c5:f7:ae:0a:45:b1:be:ca:1d:3a: 47:4b:13:37:49:b4:4b:c4:3e:75:c8:b6:69:c0:fb:46:8c:c6: 7f:2e:d4:46:f1:57:c0:3e:e7:72:10:e2:a2:44:47:9a:cb:db: 9b:3a:82:b6:37:08:b7:8b:a5:c2:42:9a:86:00:3b:d7:bc:27: 67:54:35:17:c4:9b:c2:24:50:cd:18:5c:6b:a1:2d:90:99:a4: b6:a6:01:e6:8c:e7:9b:51:f9:07:76:8f:9d:36:28:95:88:6b: 84:62:5d:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpleyCi2i4q1SJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NzIwOWEwNDEtN2U1Zi00MjkxLTg2MWItNDkzZWY3ZmVmZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGoTj3pDoUNofRtcfdyidYaJc6U5OUyxZCiX 88K/i9S81LiDQPkToLI9CuTQq11MT536LX6Jh0XW7gKJPeCbtV7ZsVitgVevt822 4QoltxWXZtziJxppkupjPl0HAMIxpWxMJFO5CeZB6yTIg3FG8mrR96yH0Fza7vVo rHhFN0N8DQaLqpFcpcN9Ix1t8ZO4SZcjOHeq/tagKSMKmKt9bImzi3LRq4mc6cif Euo4MiBDavvgzL+bHYDdoJj/h7nTzBskNgJfqbGg1HW7NYABG4IgPk+kGim24Tf3 i21UTalvud5d9tRIal7A3ZN1Puk1BkZ9qP7e0YcnCuH4IBFh1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJerjz3cwz7Wq+xWuBLsSQeYipqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvM2M1OThkMzYtZDg2MS0z MDFkLThjZmItOWE4N2UwMDVlMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGLBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhJ+42LGrrY3VxoHwvtEJXPdoWFWnuQMRyPaODano57GyQUymuOTAQN GlbDsFWs/5d7fpxy9aGzqZmN8VNHO+LN5YQK6ZVwuDGhwr6YPyA6wv8WJW/r+G5R HPDDZm2ujpyMaeTQ2QdE6ttbjhNeEohVclH6VP3vzMKPqaGoGrAUMf9/j1ikGtCQ KGd/AZbFjrPPWLgQpPx2xfeuCkWxvsodOkdLEzdJtEvEPnXItmnA+0aMxn8u1Ebx V8A+53IQ4qJER5rL25s6grY3CLeLpcJCmoYAO9e8J2dUNRfEm8IkUM0YXGuhLZCZ pLamAeaM55tR+Qd2j502KJWIa4RiXSo= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:36 2025 by rpki-client