$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa File: 40adc3e1-1982-3811-9bd9-58e5849782e8.roa (raw, json) Hash identifier: gcUxzPt0OXOydOTnfAbsrmKk6AUVFNdtTMGeSe6CaV8= Subject key identifier: 65:E2:8A:57:F8:75:87:14:69:C2:4D:34:86:3E:00:1C:15:27:CF:A2 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A2D85818997C958C1B1DE8200 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 9009 IP address blocks: 198.145.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:81:89:97:c9:58:c1:b1:de:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=d6254336-3203-4536-bb96-b74dfdec0984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:a1:a1:5c:e4:14:b4:84:78:9e:d4:8a:86: f4:11:5a:35:45:ac:26:9c:77:fa:b6:76:82:77:c8: 3f:a6:a8:bb:e8:c8:65:c4:b4:6f:82:0e:0a:88:e4: 28:18:76:c0:85:fe:8c:0f:58:bd:e8:b2:f3:9e:0c: 54:54:d9:cf:af:a8:24:16:8a:61:2f:ff:22:a5:11: 4e:b6:bb:75:1f:e1:5e:85:b8:3d:02:16:3d:53:8e: 21:87:15:79:c8:82:a0:b3:e2:75:5c:41:0a:44:5d: 7f:53:80:72:55:34:18:24:b4:54:e9:0a:d1:87:b2: a5:1c:3f:a8:71:95:c4:0f:11:35:f2:02:82:56:4b: 75:d8:f9:c4:78:b4:d8:be:ff:42:d9:88:d1:7f:1e: 01:cd:4f:6c:8a:fb:95:7b:38:ec:95:df:e5:25:14: 8f:8c:cd:ee:81:4c:79:ae:d6:39:70:e2:65:7a:29: ac:03:54:f9:6f:eb:04:21:3e:39:78:6d:8a:b4:03: ec:a1:e8:67:08:9c:e4:3d:2f:b1:50:dc:a5:1d:c9: aa:c5:b4:31:c1:5c:d9:64:56:e1:8b:3c:b5:5b:84: 78:29:0d:50:cb:5f:8b:12:77:48:d3:9b:88:7e:90: be:02:dd:7a:47:6b:18:89:e4:66:5b:dc:38:06:df: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E2:8A:57:F8:75:87:14:69:C2:4D:34:86:3E:00:1C:15:27:CF:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/40adc3e1-1982-3811-9bd9-58e5849782e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:a8:f7:e9:1e:a6:19:aa:e9:f1:f5:2a:f4:3c:cc:79:80:98: cf:4b:18:63:d4:7c:f5:b1:af:54:5f:26:34:ba:b5:74:6c:84: 8d:b9:5b:50:a9:3e:c7:34:60:78:f9:26:58:8c:6b:18:86:ae: 69:05:cc:f3:52:66:1d:87:5a:cc:a8:9c:98:c2:d4:fc:58:9c: cf:44:9a:0e:36:60:9c:df:23:e8:0a:a6:ad:88:ad:15:0e:e6: 54:83:21:ad:a1:90:e9:d3:3a:fe:9c:ef:1d:83:4f:41:7c:72: e9:2f:26:70:c6:a2:ee:a2:41:15:7e:71:f8:fa:4f:70:a9:e4: 20:d5:e2:e4:a0:a3:39:98:cc:3d:11:be:ed:48:42:c6:bf:3c: 89:83:f8:a2:d8:03:47:b7:1c:2a:11:de:57:1f:bb:d8:ab:b3: de:82:17:5a:2a:36:f1:29:5f:c6:af:5b:c5:29:47:9b:18:e0: 88:f7:91:d3:8e:f0:db:70:0a:3d:25:77:23:be:9b:f4:ab:11: 83:05:3f:ef:1e:a6:b9:86:e0:23:73:76:03:35:da:bd:2b:4d: 88:0d:d4:f0:81:27:b5:67:84:b3:11:98:f3:ab:9d:17:cd:3d: 97:dc:cc:f7:7b:15:f7:1a:55:ce:a7:9f:38:95:65:51:05:11: 9c:51:10:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothYGJl8lYwbHeggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk ZDYyNTQzMzYtMzIwMy00NTM2LWJiOTYtYjc0ZGZkZWMwOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrShoVzkFLSEeJ7Uiob0EVo1RawmnHf6tnaC d8g/pqi76MhlxLRvgg4KiOQoGHbAhf6MD1i96LLzngxUVNnPr6gkFophL/8ipRFO trt1H+Fehbg9AhY9U44hhxV5yIKgs+J1XEEKRF1/U4ByVTQYJLRU6QrRh7KlHD+o cZXEDxE18gKCVkt12PnEeLTYvv9C2YjRfx4BzU9sivuVezjsld/lJRSPjM3ugUx5 rtY5cOJleimsA1T5b+sEIT45eG2KtAPsoehnCJzkPS+xUNylHcmqxbQxwVzZZFbh izy1W4R4KQ1Qy1+LEndI05uIfpC+At16R2sYieRmW9w4Bt+REwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXiilf4dYcUacJNNIY+ABwVJ8+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDBhZGMzZTEtMTk4Mi0z ODExLTliZDktNThlNTg0OTc4MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSo9+kephmq6fH1KvQ8zHmAmM9LGGPUfPWxr1RfJjS6tXRshI25W1Cp Psc0YHj5JliMaxiGrmkFzPNSZh2HWsyonJjC1PxYnM9Emg42YJzfI+gKpq2IrRUO 5lSDIa2hkOnTOv6c7x2DT0F8cukvJnDGou6iQRV+cfj6T3Cp5CDV4uSgozmYzD0R vu1IQsa/PImD+KLYA0e3HCoR3lcfu9irs96CF1oqNvEpX8avW8UpR5sY4Ij3kdOO 8NtwCj0ldyO+m/SrEYMFP+8eprmG4CNzdgM12r0rTYgN1PCBJ7VnhLMRmPOrnRfN PZfczPd7FfcaVc6nnziVZVEFEZxREBo= -----END CERTIFICATE-----Generated at Tue Jun 17 09:12:23 2025 by rpki-client