$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/10b737dd-7e20-35d4-aa61-a721b7018f57.roa File: 10b737dd-7e20-35d4-aa61-a721b7018f57.roa (raw, json) Hash identifier: Ikif+Vk8HVaOzrt8lXuTQ1/OJN+qN5YunNhkAsozJ7Q= Subject key identifier: D1:50:24:C8:F1:B9:04:D5:21:A3:D1:3B:F8:67:25:13:10:7C:C6:D1 Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F43285849D85FA221EC56BFA29DDA6B90 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/10b737dd-7e20-35d4-aa61-a721b7018f57.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 36595 IP address blocks: 198.135.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a2:21:ec:56:bf:a2:9d:da:6b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=0a8d2895-160e-474e-b202-c9e33e49b9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:24:f2:d8:47:03:a8:ba:62:15:35:88:56: d6:c9:22:1c:fb:e3:c3:c3:34:1e:a5:ab:44:b8:01: 49:e1:9f:f0:02:e7:51:21:c3:62:9d:b2:3d:17:5a: 28:4f:df:12:aa:c7:bf:5e:d3:66:12:78:d5:06:11: 13:60:85:43:b5:3b:41:f6:74:f8:3d:cd:52:5e:fd: 68:d3:48:b2:8b:66:5e:83:99:97:eb:dd:c4:4a:e1: 91:7b:49:91:87:11:d1:ce:04:82:35:2f:5e:2f:fe: 8b:a6:36:40:95:3f:c7:e3:62:88:e1:75:6d:c3:a2: bc:fa:82:d4:95:56:b4:4d:b3:4b:8f:15:6b:15:c1: 00:af:b6:89:ac:90:1d:09:24:ab:57:cb:7f:61:1a: 0b:79:33:e0:5f:61:2d:77:62:22:b8:9c:e9:b5:a6: bc:37:06:92:3c:da:24:27:83:6b:bd:02:c1:2a:87: 80:9b:04:dc:05:e5:be:36:bc:3f:a3:22:da:f3:25: c8:a2:55:8d:75:19:93:f7:25:cd:81:28:17:b8:eb: 57:4f:8b:74:48:11:1b:1d:82:cb:a2:81:8e:f2:92: 4c:71:10:40:c0:23:78:e0:f4:26:05:df:73:89:63: 80:1f:47:64:2a:59:77:3d:86:65:5a:b0:7f:84:ca: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:50:24:C8:F1:B9:04:D5:21:A3:D1:3B:F8:67:25:13:10:7C:C6:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/10b737dd-7e20-35d4-aa61-a721b7018f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv4: 198.135.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:27:6a:94:7e:d5:1b:58:37:07:22:37:d7:35:f0:27:b4:91: 51:8a:5b:59:32:5c:4e:b6:52:9d:dd:c5:29:1a:c6:3b:66:d7: ae:ec:8d:04:88:16:f7:2a:d2:18:13:3b:b3:46:77:e0:77:b8: ab:9f:d9:1c:1e:d3:35:b6:ce:96:25:ca:07:13:37:82:8c:b1: 77:f7:da:69:ca:53:ea:f2:59:98:a1:d2:01:e2:52:33:ea:47: 67:ae:84:8d:d3:17:8d:bd:7e:d9:1a:5d:7d:23:c3:ef:89:f3: 1b:5f:3f:0e:f8:23:78:0d:66:a0:72:a3:96:d6:16:3e:d1:66: 97:ee:ff:55:a3:81:d8:d5:de:ef:a7:45:f8:74:45:3c:08:ee: b8:07:bb:f0:b7:a0:50:03:d8:d5:5e:08:a7:6e:5e:26:15:b4: f8:79:d3:1e:81:89:af:b6:4e:cf:52:13:a2:3b:95:22:1f:97: 62:ab:04:ba:f0:94:79:b7:b3:2b:61:dd:5b:75:ca:4c:8c:18: 01:94:2f:ef:ed:22:a2:62:0d:92:90:c9:5f:99:47:35:03:ba: 46:45:f0:47:03:52:e8:04:16:f5:d5:43:3e:ee:c5:0a:6d:ad: 24:f7:b7:0c:e4:7d:ed:bc:4f:43:e8:41:b2:88:75:84:a5:ba: 5c:f6:f0:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6Ih7Fa/op3aa5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MGE4ZDI4OTUtMTYwZS00NzRlLWIyMDItYzllMzNlNDliOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKsk8thHA6i6YhU1iFbWySIc++PDwzQepatE uAFJ4Z/wAudRIcNinbI9F1ooT98Sqse/XtNmEnjVBhETYIVDtTtB9nT4Pc1SXv1o 00iyi2Zeg5mX693ESuGRe0mRhxHRzgSCNS9eL/6LpjZAlT/H42KI4XVtw6K8+oLU lVa0TbNLjxVrFcEAr7aJrJAdCSSrV8t/YRoLeTPgX2Etd2IiuJzptaa8NwaSPNok J4NrvQLBKoeAmwTcBeW+Nrw/oyLa8yXIolWNdRmT9yXNgSgXuOtXT4t0SBEbHYLL ooGO8pJMcRBAwCN44PQmBd9ziWOAH0dkKll3PYZlWrB/hMripQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFQJMjxuQTVIaPRO/hnJRMQfMbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvMTBiNzM3ZGQtN2UyMC0z NWQ0LWFhNjEtYTcyMWI3MDE4ZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoetMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYnapR+1RtYNwciN9c18Ce0kVGKW1kyXE62Up3dxSkaxjtm167sjQSI Fvcq0hgTO7NGd+B3uKuf2Rwe0zW2zpYlygcTN4KMsXf32mnKU+ryWZih0gHiUjPq R2euhI3TF429ftkaXX0jw++J8xtfPw74I3gNZqByo5bWFj7RZpfu/1WjgdjV3u+n Rfh0RTwI7rgHu/C3oFAD2NVeCKduXiYVtPh50x6Bia+2Ts9SE6I7lSIfl2KrBLrw lHm3syth3Vt1ykyMGAGUL+/tIqJiDZKQyV+ZRzUDukZF8EcDUugEFvXVQz7uxQpt rST3twzkfe28T0PoQbKIdYSlulz28HM= -----END CERTIFICATE-----Generated at Tue Jun 17 09:44:27 2025 by rpki-client