$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa File: a993a619-ee1e-3438-894d-7b8dfa52d09d.roa (raw, json) Hash identifier: u+5EkasB1AFCQ4pDh6sMb84J7FiQGmELsRVxWzxp5jQ= Subject key identifier: 20:9D:BA:8F:1E:20:C1:A0:C2:92:C6:9C:16:1A:7C:21:00:26:67:86 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584A4A7810CBA43CCBE66D981440 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa Signing time: Mon 23 Jun 2025 21:52:30 +0000 ROA not before: Mon 23 Jun 2025 21:52:30 +0000 ROA not after: Sun 21 Sep 2025 21:52:30 +0000 asID: 30387 IP address blocks: 156.40.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:78:10:cb:a4:3c:cb:e6:6d:98:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Jun 23 21:52:30 2025 GMT Not After : Sep 21 21:52:30 2025 GMT Subject: CN=78aa6c98-f969-40fe-b780-4ad07c1f8870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:cb:a1:1e:f7:05:88:d5:81:fe:c0:ed:34: bb:47:2a:73:39:ac:60:70:35:ef:f5:91:5a:4b:ac: c8:ae:8c:7a:73:c2:1e:68:05:05:e4:22:80:ad:1a: f1:30:0d:b2:c7:30:58:f2:b4:ec:2d:c2:fa:a9:e1: 39:c0:b9:d4:eb:38:26:30:0d:58:bf:42:6d:a1:6a: 6c:2e:91:79:5f:9f:29:7d:3a:a6:13:44:c5:26:e9: 0a:8f:82:8c:a3:83:7f:f6:49:8c:48:23:85:87:da: 0b:94:01:49:f8:4e:01:ff:b8:fa:a0:a9:79:0c:d0: b8:39:3a:7e:04:dd:7e:32:4f:08:e6:94:2f:be:cc: d8:e0:29:bc:40:e9:2a:e8:22:a4:07:54:b4:bb:a9: 7a:f7:99:0b:9b:d5:ed:8b:16:d1:2f:10:97:3d:67: d7:40:84:d8:21:50:54:7a:c2:25:75:c5:4b:3a:17: c9:9c:32:6a:7f:c3:8b:89:9b:db:08:e8:3b:fc:22: 49:2e:19:e3:57:e8:40:2b:e7:d3:94:81:5e:fc:5d: bc:08:64:0a:bc:1a:e3:23:30:62:36:da:08:03:62: ee:89:56:28:47:0f:7a:8c:8c:a3:f3:69:c0:32:dc: 94:49:dd:8f:22:70:cc:2d:b1:46:1a:46:43:af:c7: 58:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9D:BA:8F:1E:20:C1:A0:C2:92:C6:9C:16:1A:7C:21:00:26:67:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ca:6e:af:88:93:57:a1:28:81:1b:c9:6f:28:b0:f7:92:e8: be:1a:04:24:6f:53:ca:17:b8:64:b2:de:45:9f:71:ba:9a:f2: 37:03:4a:64:52:2d:08:73:52:05:0d:a9:7c:80:ed:0d:8d:06: 49:cf:c9:31:e9:fb:da:3f:ef:b1:5c:7e:87:5f:50:b5:63:f6: 8c:af:d8:65:3e:7c:6e:28:8b:e2:fc:f3:b8:67:a6:92:61:67: b2:06:d5:cd:34:e6:73:e6:db:32:3f:16:f8:1a:2e:07:68:16: 71:4a:3a:e1:c0:ce:ba:9b:95:82:65:30:28:8b:5a:01:29:e6: e4:30:7a:50:2c:f4:0f:aa:b2:ef:8c:0d:5a:09:d9:ed:84:11: 47:02:81:b2:e0:6c:a2:88:a6:80:51:72:c7:d7:b0:f3:d8:ea: 9a:42:be:d4:44:3b:42:ba:3f:25:5f:0a:98:07:b2:49:bf:88: 98:e2:e4:a1:39:3a:3c:8a:36:30:85:3f:0f:bd:14:5f:2b:f2: c4:36:a4:9c:95:53:dc:47:84:e1:88:9f:bb:8a:ab:72:ed:3a: 26:df:fb:53:f7:6c:f5:84:df:c7:ed:08:49:db:0e:0c:a3:ab: 1b:8c:f5:60:2a:6a:f1:06:43:9e:99:45:2f:2b:20:6d:cf:64: 8b:e7:c3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKeBDLpDzL5m2YFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDYyMzIxNTIzMFoXDTI1MDkyMTIxNTIzMFowLzEtMCsGA1UEAxMk NzhhYTZjOTgtZjk2OS00MGZlLWI3ODAtNGFkMDdjMWY4ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd3LoR73BYjVgf7A7TS7RypzOaxgcDXv9ZFa S6zIrox6c8IeaAUF5CKArRrxMA2yxzBY8rTsLcL6qeE5wLnU6zgmMA1Yv0JtoWps LpF5X58pfTqmE0TFJukKj4KMo4N/9kmMSCOFh9oLlAFJ+E4B/7j6oKl5DNC4OTp+ BN1+Mk8I5pQvvszY4Cm8QOkq6CKkB1S0u6l695kLm9XtixbRLxCXPWfXQITYIVBU esIldcVLOhfJnDJqf8OLiZvbCOg7/CJJLhnjV+hAK+fTlIFe/F28CGQKvBrjIzBi NtoIA2LuiVYoRw96jIyj82nAMtyUSd2PInDMLbFGGkZDr8dY7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCduo8eIMGgwpLGnBYafCEAJmeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYTk5M2E2MTktZWUxZS0z NDM4LTg5NGQtN2I4ZGZhNTJkMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnChiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Kbq+Ik1ehKIEbyW8osPeS6L4aBCRvU8oXuGSy3kWfcbqa8jcDSmRS LQhzUgUNqXyA7Q2NBknPyTHp+9o/77FcfodfULVj9oyv2GU+fG4oi+L887hnppJh Z7IG1c005nPm2zI/FvgaLgdoFnFKOuHAzrqblYJlMCiLWgEp5uQwelAs9A+qsu+M DVoJ2e2EEUcCgbLgbKKIpoBRcsfXsPPY6ppCvtREO0K6PyVfCpgHskm/iJji5KE5 OjyKNjCFPw+9FF8r8sQ2pJyVU9xHhOGIn7uKq3LtOibf+1P3bPWE38ftCEnbDgyj qxuM9WAqavEGQ56ZRS8rIG3PZIvnw58= -----END CERTIFICATE-----Generated at Mon Jun 30 08:35:07 2025 by rpki-client