$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa File: 7125b790-7228-3b2f-91fe-5b1dd486ea42.roa (raw, json) Hash identifier: 5GTlQWNAy8TToZLhXJuejD/Ug+yf4LUvuiClS5P2FN4= Subject key identifier: 11:F4:60:CE:76:F3:F4:8F:F0:59:52:7D:E1:2F:26:C8:A1:A3:42:07 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F4328584A374AD51EA24B06D0C91D8100 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 212238 IP address blocks: 168.91.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d5:1e:a2:4b:06:d0:c9:1d:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=c15a4b4a-613f-44dd-93b7-6f14f03fee56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:6f:5a:ff:3d:c1:97:b5:22:8b:83:20:aa: 9e:2d:58:ed:47:a4:c6:4c:ce:4a:76:1e:c0:b0:4d: cd:e4:69:da:2f:f9:db:3d:47:e6:34:82:18:be:32: cc:c1:63:9a:17:e4:70:c1:ac:5c:4c:94:81:b0:53: cc:6b:09:29:6c:91:4c:db:94:40:b9:32:4f:4d:1a: bf:b7:51:a0:51:2b:b5:e9:17:b5:61:61:48:7d:2c: 26:7e:5d:5f:10:75:3d:5c:2e:97:b0:5c:48:5a:e7: bb:6d:8d:d1:ef:18:32:3b:91:10:a0:b9:27:70:c8: 46:a5:cc:43:ed:39:4a:c9:c2:f0:8a:0f:f6:b7:9d: fe:f8:10:8b:62:80:e2:08:3e:b7:38:21:55:a9:08: e4:4b:18:a2:95:77:d3:d3:6e:ab:48:9c:dd:71:60: cc:50:10:33:a5:88:ea:54:5e:c8:cd:f3:41:0b:a6: 91:15:7e:71:a5:03:96:dc:81:71:45:87:1c:17:8a: 7f:76:4c:42:a0:9a:68:f1:92:cb:98:f0:39:8d:e1: 16:23:a6:c7:3e:5d:60:f5:fd:8c:95:d9:61:09:00: f2:cc:fd:9a:34:7e:f3:89:7d:24:bd:9b:73:3d:94: 61:28:43:3e:99:d8:a1:de:04:a9:e2:61:1d:43:17: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:60:CE:76:F3:F4:8F:F0:59:52:7D:E1:2F:26:C8:A1:A3:42:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7125b790-7228-3b2f-91fe-5b1dd486ea42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 168.91.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:32:c8:9d:99:49:76:0f:d5:75:66:0c:3f:d1:d5:5b:6b:ab: 3f:7c:28:cf:67:8a:bb:50:ed:6a:6a:09:4f:3e:8d:44:dc:a3: 0c:1e:4d:f0:5d:10:2d:9a:ac:eb:98:08:d3:4d:06:4c:ba:52: 20:3d:4f:bf:8c:bf:5b:db:d1:03:b0:6c:10:26:b0:69:c9:79: 36:1f:19:4d:cc:17:2e:6f:00:a0:0a:36:cd:86:60:88:08:aa: 58:46:87:e9:e6:c2:f1:d9:7b:d9:26:b1:4e:58:ca:f2:93:ad: 9a:a4:40:f5:2e:cf:ae:d1:2e:92:b6:fd:0f:47:4f:7b:05:82: d3:5e:94:27:17:0f:99:50:4c:fb:d6:18:50:6f:d1:e3:24:23: 90:e6:82:db:0a:ba:04:0b:62:2e:9f:4a:bf:a0:d8:ee:43:4d: fa:4a:47:95:b0:7e:d9:7d:5b:e5:e8:96:34:cc:f9:ee:ec:80: 9f:2c:75:97:49:e3:9f:3d:45:d6:fa:02:11:e3:9f:82:48:20: 33:8e:e2:7a:84:3f:27:c7:53:30:16:ac:19:92:06:cf:24:fa: ea:04:5d:aa:dd:50:dc:c9:3f:66:15:6d:05:f9:cd:2b:02:56: ef:55:c2:a8:87:26:c2:a4:9d:51:5a:18:57:a0:13:1d:b9:bc: 4d:8c:d0:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StUeoksG0MkdgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk YzE1YTRiNGEtNjEzZi00NGRkLTkzYjctNmYxNGYwM2ZlZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSBvWv89wZe1IouDIKqeLVjtR6TGTM5Kdh7A sE3N5GnaL/nbPUfmNIIYvjLMwWOaF+RwwaxcTJSBsFPMawkpbJFM25RAuTJPTRq/ t1GgUSu16Re1YWFIfSwmfl1fEHU9XC6XsFxIWue7bY3R7xgyO5EQoLkncMhGpcxD 7TlKycLwig/2t53++BCLYoDiCD63OCFVqQjkSxiilXfT026rSJzdcWDMUBAzpYjq VF7IzfNBC6aRFX5xpQOW3IFxRYccF4p/dkxCoJpo8ZLLmPA5jeEWI6bHPl1g9f2M ldlhCQDyzP2aNH7ziX0kvZtzPZRhKEM+mdih3gSp4mEdQxchBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH0YM528/SP8FlSfeEvJsiho0IHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNzEyNWI3OTAtNzIyOC0z YjJmLTkxZmUtNWIxZGQ0ODZlYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4yyJ2ZSXYP1XVmDD/R1Vtrqz98KM9nirtQ7WpqCU8+jUTcowweTfBd EC2arOuYCNNNBky6UiA9T7+Mv1vb0QOwbBAmsGnJeTYfGU3MFy5vAKAKNs2GYIgI qlhGh+nmwvHZe9kmsU5YyvKTrZqkQPUuz67RLpK2/Q9HT3sFgtNelCcXD5lQTPvW GFBv0eMkI5DmgtsKugQLYi6fSr+g2O5DTfpKR5Wwftl9W+XoljTM+e7sgJ8sdZdJ 4589Rdb6AhHjn4JIIDOO4nqEPyfHUzAWrBmSBs8k+uoEXardUNzJP2YVbQX5zSsC Vu9VwqiHJsKknVFaGFegEx25vE2M0EU= -----END CERTIFICATE-----Generated at Sun Jun 29 09:08:37 2025 by rpki-client