$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0ea98a26-b0b3-39b5-9a12-8760f9d50111.roa File: 0ea98a26-b0b3-39b5-9a12-8760f9d50111.roa (raw, json) Hash identifier: XP3dKLaspY8XqIekbIRDiWtjRTf0IZrl/3rxBPB1VGg= Subject key identifier: 90:A3:47:89:41:78:CA:58:04:08:AD:4B:33:1F:F0:06:72:D3:F7:32 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584991FD34D998D539A9A0FD56C0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0ea98a26-b0b3-39b5-9a12-8760f9d50111.roa Signing time: Fri 18 Apr 2025 19:56:13 +0000 ROA not before: Fri 18 Apr 2025 19:56:13 +0000 ROA not after: Thu 17 Jul 2025 19:56:13 +0000 asID: 7015 IP address blocks: 198.145.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:fd:34:d9:98:d5:39:a9:a0:fd:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Apr 18 19:56:13 2025 GMT Not After : Jul 17 19:56:13 2025 GMT Subject: CN=1e4cc898-f05c-4c7f-bc14-17b9ec87ee54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:13:ed:0e:4c:4f:d7:25:37:c4:a0:ff:6a: 5e:90:56:8a:9e:ac:90:7f:8b:a0:b3:3f:c7:ee:88: 66:56:85:33:32:3e:1c:82:f8:04:34:46:6d:55:c7: 85:31:75:cc:20:7e:b4:31:a4:24:c8:82:af:e3:5a: c7:aa:e8:ed:ed:54:5d:09:33:28:bc:0b:e4:45:3a: 01:5b:22:d9:4b:dd:dc:02:ba:41:f8:66:71:cc:e8: 40:65:31:7e:f5:6c:db:8f:40:da:de:66:9b:6e:a5: 10:3e:e5:56:88:5e:1a:4f:f3:6b:7b:cd:a5:98:c6: 98:52:42:5d:62:83:2b:19:86:3d:ba:cc:6b:e3:a6: 8c:40:85:bb:0c:9b:63:d0:b1:2b:7e:9d:b0:0a:10: 8d:e8:b3:80:8b:72:57:62:9c:be:6e:3a:08:ff:c7: a0:76:a6:99:ba:19:bb:57:01:2f:76:1a:89:99:97: 4e:ba:df:45:a7:dd:ab:ea:a7:a5:74:c4:3a:15:ac: df:5f:0a:ea:97:a1:a4:7a:ac:98:05:d7:a1:29:c0: 6f:ff:cf:54:c2:46:42:9b:48:9f:4d:aa:03:56:06: fe:cf:d1:ce:a0:47:ca:1a:c0:ac:7f:0a:77:84:93: 9f:f6:07:32:42:3f:a7:d2:29:78:04:3c:fa:08:b4: 5d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A3:47:89:41:78:CA:58:04:08:AD:4B:33:1F:F0:06:72:D3:F7:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0ea98a26-b0b3-39b5-9a12-8760f9d50111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:99:1f:e6:65:bb:e4:72:47:8f:9e:00:10:ea:41:2f:1e:c6: 19:b9:5c:58:10:96:91:48:94:3b:61:20:96:02:1c:a6:15:64: 0f:38:71:09:96:c0:81:3f:b8:36:f7:f3:eb:05:86:6e:01:b9: 16:55:3f:ca:36:20:bc:f0:fe:f0:e8:df:dd:e3:f4:98:c1:ac: 01:a0:49:d7:86:ee:70:cd:25:d2:bc:b0:da:28:26:b7:07:2a: cf:d7:57:04:ba:a7:29:8f:f7:f8:25:f8:05:b1:c1:cf:58:99: aa:76:d5:ec:78:7d:c8:43:3d:a4:4c:cd:c5:b0:4b:07:96:be: 5a:a8:09:19:bd:87:8a:b2:6c:05:8e:5a:17:51:8a:1d:21:6c: 08:e8:30:d2:a0:ae:cd:b5:9b:17:b0:5c:c2:b5:c0:4e:f9:f8: 7e:a5:79:26:6b:91:ec:fe:c7:17:89:ed:62:db:a0:d6:10:80: f6:56:18:10:43:80:29:0d:07:d1:53:60:e2:17:fa:cc:fa:c5: 71:1b:5a:37:8f:a8:27:50:ea:df:84:94:a9:f1:23:ca:a8:6e: 90:3e:07:b7:9b:66:0b:70:4e:e0:07:4c:8c:0e:fa:26:4d:4e: 6f:d3:8d:11:0e:1b:78:c0:54:ad:6d:29:05:58:65:07:84:2b: 6c:b4:e0:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmR/TTZmNU5qaD9VsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDQxODE5NTYxM1oXDTI1MDcxNzE5NTYxM1owLzEtMCsGA1UEAxMk MWU0Y2M4OTgtZjA1Yy00YzdmLWJjMTQtMTdiOWVjODdlZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3MT7Q5MT9clN8Sg/2pekFaKnqyQf4ugsz/H 7ohmVoUzMj4cgvgENEZtVceFMXXMIH60MaQkyIKv41rHqujt7VRdCTMovAvkRToB WyLZS93cArpB+GZxzOhAZTF+9Wzbj0Da3mabbqUQPuVWiF4aT/Nre82lmMaYUkJd YoMrGYY9usxr46aMQIW7DJtj0LErfp2wChCN6LOAi3JXYpy+bjoI/8egdqaZuhm7 VwEvdhqJmZdOut9Fp92r6qeldMQ6FazfXwrql6GkeqyYBdehKcBv/89UwkZCm0if TaoDVgb+z9HOoEfKGsCsfwp3hJOf9gcyQj+n0il4BDz6CLRdiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCjR4lBeMpYBAitSzMf8AZy0/cyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMGVhOThhMjYtYjBiMy0z OWI1LTlhMTItODc2MGY5ZDUwMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExpFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqZH+Zlu+RyR4+eABDqQS8exhm5XFgQlpFIlDthIJYCHKYVZA84cQmW wIE/uDb38+sFhm4BuRZVP8o2ILzw/vDo393j9JjBrAGgSdeG7nDNJdK8sNooJrcH Ks/XVwS6pymP9/gl+AWxwc9Ymap21ex4fchDPaRMzcWwSweWvlqoCRm9h4qybAWO WhdRih0hbAjoMNKgrs21mxewXMK1wE75+H6leSZrkez+xxeJ7WLboNYQgPZWGBBD gCkNB9FTYOIX+sz6xXEbWjePqCdQ6t+ElKnxI8qobpA+B7ebZgtwTuAHTIwO+iZN Tm/TjREOG3jAVK1tKQVYZQeEK2y04Ek= -----END CERTIFICATE-----Generated at Tue Apr 29 01:19:02 2025 by rpki-client