$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/3b96878c-4905-3a39-bcab-5b6197b462d3.roa File: 3b96878c-4905-3a39-bcab-5b6197b462d3.roa (raw, json) Hash identifier: aNuGIl7QboXghrIfEn8HZSScyR85Dv+7LkPVyT9iCuw= Subject key identifier: 06:F3:68:35:43:C2:AB:5C:72:1D:BF:B7:95:63:5D:2C:01:57:B9:31 Certificate issuer: /CN=8bd56a04-2ad4-4f34-b979-58f0a9509691 Certificate serial: 010D0C9F4328584A5D7011EB816A53DC8F5B0E00 Authority key identifier: A5:C9:1A:7B:FB:8D:F6:3B:61:1F:30:82:64:0C:51:7A:A3:B6:96:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/3b96878c-4905-3a39-bcab-5b6197b462d3.roa Signing time: Mon 30 Jun 2025 16:56:45 +0000 ROA not before: Mon 30 Jun 2025 16:56:45 +0000 ROA not after: Sun 28 Sep 2025 16:56:45 +0000 asID: 29762 IP address blocks: 198.89.15.0/24 maxlen: 24 198.232.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:70:11:eb:81:6a:53:dc:8f:5b:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bd56a04-2ad4-4f34-b979-58f0a9509691 Validity Not Before: Jun 30 16:56:45 2025 GMT Not After : Sep 28 16:56:45 2025 GMT Subject: CN=16962e4b-6202-4a4a-9cc9-bba44a3e67af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:57:07:a2:f0:5b:5d:45:17:e6:ed:23:d9:56: 9a:88:37:82:7b:2c:db:53:b6:b6:61:7a:5d:25:df: bb:98:b4:3f:0f:40:94:f8:90:d5:fd:f3:64:93:f4: 5d:45:a5:a0:b8:53:9a:bb:0c:42:54:fa:30:75:43: f3:5a:92:99:56:e4:6a:6e:5c:df:83:fc:97:7f:fd: 9c:e6:f4:24:c1:86:a8:1d:6e:6e:64:c3:1f:8c:fa: 83:2b:c9:4b:12:52:28:2d:16:50:28:5c:4e:85:15: d7:63:a4:5d:cd:40:8a:bf:8a:22:cc:39:20:e1:d6: b0:91:b8:61:f8:a2:c6:e3:57:be:38:a1:86:79:36: c1:01:b7:99:60:7a:d9:bc:91:73:f2:13:a4:16:0e: 6b:7b:8a:2d:38:d7:4d:dc:47:ba:c9:df:cb:a0:5b: 6f:0f:dc:a9:59:2f:f7:67:31:2a:64:48:f4:a4:7d: 82:bb:c3:f3:0b:a9:42:64:87:b6:e8:aa:52:11:66: 1c:e9:c5:2a:95:e4:6c:e7:37:bf:c3:07:43:19:c3: 2e:0a:62:a5:f3:0e:43:5f:2d:8f:35:1c:e5:bc:cd: 4f:44:de:9e:c2:95:08:26:73:a7:d9:5a:28:70:71: 5a:62:9d:06:f0:4a:23:48:ac:53:a3:dc:6b:0d:43: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F3:68:35:43:C2:AB:5C:72:1D:BF:B7:95:63:5D:2C:01:57:B9:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/3b96878c-4905-3a39-bcab-5b6197b462d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.crl X509v3 Authority Key Identifier: keyid:A5:C9:1A:7B:FB:8D:F6:3B:61:1F:30:82:64:0C:51:7A:A3:B6:96:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer sbgp-ipAddrBlock: critical IPv4: 198.89.15.0/24 198.232.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a5:33:49:df:d7:6a:a3:67:39:f7:1e:bf:fb:87:22:2c:da: 75:18:3e:64:e1:21:b9:69:52:b0:6c:49:9a:97:a2:be:63:2c: 8e:e3:0a:eb:e1:53:ed:a5:ae:f9:b1:dd:2f:90:5d:aa:43:fb: 6d:7b:b9:5b:7b:b7:2c:a8:72:d0:13:55:03:4a:ed:68:01:d2: f7:ad:c0:c8:b5:14:50:e9:2c:af:58:30:21:8e:ac:ff:5d:73: 59:4c:5c:0a:d1:45:54:40:38:a1:11:9e:72:6d:91:f0:25:c9: 25:d8:98:c0:cc:3b:27:79:36:f7:99:9d:25:11:40:db:b2:b4: 56:d7:de:93:2f:4b:b2:53:c5:62:02:93:e6:06:1b:6c:3b:f7: 93:41:74:93:2b:d2:fb:5a:2b:2f:22:8a:57:89:b4:4c:55:f7: 29:a5:93:35:0b:6b:91:cc:ee:62:17:a6:95:48:be:c1:5d:d2: 70:37:5a:30:02:9b:e3:db:67:d2:d5:af:3c:dc:ae:38:38:19: ad:3e:8c:7a:6a:52:4c:2c:a3:d6:ba:16:5a:79:f1:c9:62:03: ed:15:5f:8c:2e:2e:51:09:1e:76:67:7e:8a:96:8e:83:ea:1f: 88:80:e1:85:0d:42:9f:40:73:b6:6f:36:ce:0a:6d:11:23:48: 36:b0:84:da -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpdcBHrgWpT3I9bDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJkNTZhMDQtMmFkNC00ZjM0LWI5NzktNThmMGE5NTA5 NjkxMB4XDTI1MDYzMDE2NTY0NVoXDTI1MDkyODE2NTY0NVowLzEtMCsGA1UEAxMk MTY5NjJlNGItNjIwMi00YTRhLTljYzktYmJhNDRhM2U2N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVcHovBbXUUX5u0j2VaaiDeCeyzbU7a2YXpd Jd+7mLQ/D0CU+JDV/fNkk/RdRaWguFOauwxCVPowdUPzWpKZVuRqblzfg/yXf/2c 5vQkwYaoHW5uZMMfjPqDK8lLElIoLRZQKFxOhRXXY6RdzUCKv4oizDkg4dawkbhh +KLG41e+OKGGeTbBAbeZYHrZvJFz8hOkFg5re4otONdN3Ee6yd/LoFtvD9ypWS/3 ZzEqZEj0pH2Cu8PzC6lCZIe26KpSEWYc6cUqleRs5ze/wwdDGcMuCmKl8w5DXy2P NRzlvM1PRN6ewpUIJnOn2VoocHFaYp0G8EojSKxTo9xrDUOoSwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAbzaDVDwqtcch2/t5VjXSwBV7kxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84YmQ1 NmEwNC0yYWQ0LTRmMzQtYjk3OS01OGYwYTk1MDk2OTEvM2I5Njg3OGMtNDkwNS0z YTM5LWJjYWItNWI2MTk3YjQ2MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGJkNTZhMDQtMmFkNC00ZjM0LWI5 NzktNThmMGE5NTA5NjkxLzhiZDU2YTA0LTJhZDQtNGYzNC1iOTc5LTU4ZjBhOTUw OTY5MS5jcmwwHwYDVR0jBBgwFoAUpckae/uN9jthHzCCZAxReqO2lhQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84YmQ1NmEwNC0yYWQ0LTRmMzQtYjk3OS01OGYw YTk1MDk2OTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxlkPAwQA xujcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGKlM0nf12qjZzn3Hr/7hyIs2nUYPmThIblpUrBsSZqXor5j LI7jCuvhU+2lrvmx3S+QXapD+217uVt7tyyoctATVQNK7WgB0vetwMi1FFDpLK9Y MCGOrP9dc1lMXArRRVRAOKERnnJtkfAlySXYmMDMOyd5NveZnSURQNuytFbX3pMv S7JTxWICk+YGG2w795NBdJMr0vtaKy8iileJtExV9ymlkzULa5HM7mIXppVIvsFd 0nA3WjACm+PbZ9LVrzzcrjg4Ga0+jHpqUkwso9a6Flp58cliA+0VX4wuLlEJHnZn foqWjoPqH4iA4YUNQp9Ac7ZvNs4KbREjSDawhNo= -----END CERTIFICATE-----Generated at Thu Jul 3 23:17:33 2025 by rpki-client