$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa File: 843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa (raw, json) Hash identifier: dusPRElcSG1tVqCToVtTAMWtz8yD46piGr8fjrC66u0= Subject key identifier: 25:B5:62:03:7D:0F:D7:C5:8C:B6:43:65:DA:E2:80:66:58:FA:72:53 Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f Certificate serial: 010D0C9F4328584A03A54F77702B957E8CAF7180 Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 2572 IP address blocks: 198.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4f:77:70:2b:95:7e:8c:af:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=2a18374f-d814-4663-aff9-b96ab64652d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:f9:03:1c:11:32:a0:81:d6:23:c2:86:a2: ea:22:96:b1:57:f7:ab:3b:95:8b:c0:2b:f5:f8:c7: 9d:cc:ac:7f:ad:19:72:64:23:fb:71:ee:70:3f:3b: 66:f4:ff:bc:73:34:ef:8f:3b:5a:a7:ab:e2:5e:47: b2:b2:0f:79:98:44:82:74:b8:24:c4:c1:ff:95:00: cb:35:58:b1:15:7f:81:87:26:f1:56:81:5e:08:19: 2d:97:06:2d:71:30:8f:a9:6a:80:72:7a:0f:02:7c: 0c:9d:ef:d1:02:df:0b:bb:18:7a:2d:f2:35:9c:06: 4a:ab:02:a3:60:0a:eb:98:b9:f0:20:38:43:b8:a3: ee:79:4f:78:d3:16:88:81:3c:fe:f8:ae:eb:7c:6b: 62:1d:2d:51:52:73:72:78:d2:aa:29:07:81:87:94: b8:d3:e9:d3:71:ad:72:b1:1f:8c:03:77:8f:cb:5c: 1f:fd:ae:21:fd:46:92:bc:f7:a6:81:aa:20:1a:54: 53:f7:33:01:0f:6b:9e:d1:12:9d:bd:6f:b4:bd:e8: 61:b1:4f:31:91:dc:c9:97:79:d0:42:05:1e:30:a8: bb:f4:9c:a1:db:62:54:1b:42:d0:78:9f:62:bf:00: 6d:de:e5:36:8c:17:57:c2:1d:39:cf:52:8f:f0:02: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B5:62:03:7D:0F:D7:C5:8C:B6:43:65:DA:E2:80:66:58:FA:72:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl X509v3 Authority Key Identifier: keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer sbgp-ipAddrBlock: critical IPv4: 198.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8a:17:c1:cd:99:a2:0c:28:8e:49:d2:36:2c:f1:14:c0:3f: 1b:fe:05:60:d6:57:b4:98:f1:c4:9a:24:db:80:14:62:d8:e6: 59:0a:4f:91:90:dd:6a:e4:ea:57:df:57:e1:fd:62:1b:7d:68: 87:13:27:72:a7:2f:98:de:a2:59:ca:cd:cd:9c:97:68:84:68: 19:f8:eb:30:eb:96:bc:2e:1a:92:94:47:fb:ff:51:e1:c4:61: 81:8a:3c:b6:f7:50:3b:5a:18:ef:6c:11:6a:ea:10:8a:fa:78: c6:bc:9f:b3:8e:b6:e1:78:82:66:e1:f1:f2:a2:85:d7:dd:e9: 54:e7:ea:79:bf:d8:6b:30:ee:d0:e3:d0:14:6d:5e:98:d3:2d: 13:24:41:91:61:a9:bc:5b:14:51:2b:7a:24:fc:0f:15:2d:b8: 45:6b:ad:11:4b:18:f7:15:70:3f:92:81:3a:a7:7c:9f:a7:8b: 13:c9:0c:ac:e2:2d:98:58:e3:2a:f2:a7:5a:7e:92:51:ae:6a: dc:cc:41:18:d2:6b:99:a6:36:5b:1c:bd:a3:3c:e2:52:f4:bb: 05:93:37:99:50:a0:db:ba:e3:6d:3e:18:98:b3:23:7c:94:41: e8:14:27:1c:9f:e1:29:f9:52:cf:db:ef:c3:e9:c4:79:c5:24: e1:43:4f:cb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoDpU93cCuVfoyvcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3 YTlmMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MmExODM3NGYtZDgxNC00NjYzLWFmZjktYjk2YWI2NDY1MmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2H5AxwRMqCB1iPChqLqIpaxV/erO5WLwCv1 +MedzKx/rRlyZCP7ce5wPztm9P+8czTvjztap6viXkeysg95mESCdLgkxMH/lQDL NVixFX+BhybxVoFeCBktlwYtcTCPqWqAcnoPAnwMne/RAt8Luxh6LfI1nAZKqwKj YArrmLnwIDhDuKPueU940xaIgTz++K7rfGtiHS1RUnNyeNKqKQeBh5S40+nTca1y sR+MA3ePy1wf/a4h/UaSvPemgaogGlRT9zMBD2ue0RKdvW+0vehhsU8xkdzJl3nQ QgUeMKi79Jyh22JUG0LQeJ9ivwBt3uU2jBdXwh05z1KP8AKhawIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCW1YgN9D9fFjLZDZdrigGZY+nJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvODQzYjZhMWMtOWYwOS0z MmU2LWFhMDMtZDVkZDA1ODNkNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5 N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxtEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAYoXwc2ZogwojknSNizxFMA/G/4FYNZXtJjxxJok24AUYtjmWQpPkZDd auTqV99X4f1iG31ohxMncqcvmN6iWcrNzZyXaIRoGfjrMOuWvC4akpRH+/9R4cRh gYo8tvdQO1oY72wRauoQivp4xryfs4624XiCZuHx8qKF193pVOfqeb/YazDu0OPQ FG1emNMtEyRBkWGpvFsUUSt6JPwPFS24RWutEUsY9xVwP5KBOqd8n6eLE8kMrOIt mFjjKvKnWn6SUa5q3MxBGNJrmaY2Wxy9ozziUvS7BZM3mVCg27rjbT4YmLMjfJRB 6BQnHJ/hKflSz9vvw+nEecUk4UNPyw== -----END CERTIFICATE-----Generated at Tue Jun 17 01:39:41 2025 by rpki-client