$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa File: 46e9f517-eb87-34a5-9509-23f3b4683a98.roa (raw, json) Hash identifier: jDO2I0Gn5erHKQ40tYF+3BAKBbPg6n/Q7ySLjM8LUBI= Subject key identifier: 42:FE:24:00:30:82:6A:EA:0C:EA:53:DF:6C:13:EB:46:65:EB:F7:66 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A0D6A8A70AE4FC3B97FF37700 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 32780 IP address blocks: 198.145.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:8a:70:ae:4f:c3:b9:7f:f3:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=fed78d5a-a606-4f0d-b7d1-f43ab2d81f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:b4:95:50:a2:fd:aa:be:b0:25:26:87:07: 7c:81:76:1b:d3:c5:91:78:6d:01:07:9e:93:07:96: 26:cf:51:ff:d8:65:ad:ff:ba:fc:cc:5b:74:f3:ce: 6a:4a:60:32:a0:a8:71:56:af:88:52:db:03:64:27: 2b:8f:f4:a6:e5:56:5a:d2:05:99:94:ec:77:a4:87: 87:cf:f1:23:ba:16:6f:7d:97:95:c9:79:70:cd:eb: 76:9f:6e:f8:90:35:df:b8:ef:61:ce:6c:5b:dc:75: e1:f5:da:31:bb:87:a1:ee:4e:74:fd:e3:9f:e8:82: a1:c6:29:6a:09:98:36:2e:25:40:13:ae:d7:56:01: 47:ce:9e:5b:14:78:ba:8e:69:d3:60:ea:16:34:a0: c1:8a:0a:6c:65:ec:9b:7a:6a:5f:82:84:03:f6:47: f6:13:7d:03:ef:81:11:c2:7e:42:b9:d0:64:5a:04: 77:60:c6:b6:2a:67:ff:f0:f0:6a:7b:82:51:01:92: bc:e4:6a:5b:af:d6:62:ac:74:11:7d:d3:3d:5e:58: bf:4e:49:bf:1b:86:25:b1:00:8e:d0:03:89:bd:a4: 58:b1:23:41:d7:5e:79:6b:75:9b:06:61:d7:8e:f8: c5:0f:8c:78:fc:8a:7d:4d:cf:ac:48:08:90:0c:16: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FE:24:00:30:82:6A:EA:0C:EA:53:DF:6C:13:EB:46:65:EB:F7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a4:ae:b5:1e:93:bb:88:f5:70:8c:9e:39:f8:8c:bd:f0:8b: dc:16:dd:05:90:97:73:da:dd:a5:1e:df:51:21:cb:c9:6b:c8: 99:ef:b0:67:41:9f:b7:f8:1c:34:1e:32:67:cb:3f:62:34:8b: 1f:f0:c1:60:84:67:34:77:aa:2f:08:1f:58:4e:ab:73:e2:3e: 17:cc:86:b9:11:97:cb:ca:87:bc:53:08:b6:7c:67:31:d8:e4: 9d:a6:01:c2:6d:0b:53:3b:12:43:b0:ad:9e:b0:7b:eb:b4:41: e4:1c:53:05:62:f5:fb:f6:d4:3c:34:a6:4a:11:8f:cd:4a:86: ac:02:10:74:dd:0b:d6:10:09:02:3d:2b:b9:9b:c8:50:74:3c: 46:03:4c:74:a0:cc:22:72:f9:c6:44:b0:db:4f:3b:43:ff:30: 4b:67:4e:c2:01:97:5a:31:5a:ba:69:08:78:51:77:8f:bd:14: 8d:37:b5:d0:2c:ba:d1:11:99:c9:20:7f:34:bd:d7:b9:2a:34: ca:38:16:65:25:8e:c4:91:3c:1e:ef:a4:7e:48:f6:2f:f5:9b: 8c:30:d8:c2:45:ed:de:df:45:72:40:ce:6a:a0:ff:f1:52:f9: c6:26:8d:be:5c:59:c3:a8:bc:42:8c:3d:e6:82:05:6b:1e:50: 50:c7:a9:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaopwrk/DuX/zdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZmVkNzhkNWEtYTYwNi00ZjBkLWI3ZDEtZjQzYWIyZDgxZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJW0lVCi/aq+sCUmhwd8gXYb08WReG0BB56T B5Ymz1H/2GWt/7r8zFt0885qSmAyoKhxVq+IUtsDZCcrj/Sm5VZa0gWZlOx3pIeH z/EjuhZvfZeVyXlwzet2n274kDXfuO9hzmxb3HXh9doxu4eh7k50/eOf6IKhxilq CZg2LiVAE67XVgFHzp5bFHi6jmnTYOoWNKDBigpsZeybempfgoQD9kf2E30D74ER wn5CudBkWgR3YMa2Kmf/8PBqe4JRAZK85Gpbr9ZirHQRfdM9Xli/Tkm/G4YlsQCO 0AOJvaRYsSNB1155a3WbBmHXjvjFD4x4/Ip9Tc+sSAiQDBbf+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL+JAAwgmrqDOpT32wT60Zl6/dmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDZlOWY1MTctZWI4Ny0z NGE1LTk1MDktMjNmM2I0NjgzYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSkrrUek7uI9XCMnjn4jL3wi9wW3QWQl3Pa3aUe31Ehy8lryJnvsGdB n7f4HDQeMmfLP2I0ix/wwWCEZzR3qi8IH1hOq3PiPhfMhrkRl8vKh7xTCLZ8ZzHY 5J2mAcJtC1M7EkOwrZ6we+u0QeQcUwVi9fv21Dw0pkoRj81KhqwCEHTdC9YQCQI9 K7mbyFB0PEYDTHSgzCJy+cZEsNtPO0P/MEtnTsIBl1oxWrppCHhRd4+9FI03tdAs utERmckgfzS917kqNMo4FmUljsSRPB7vpH5I9i/1m4ww2MJF7d7fRXJAzmqg//FS +cYmjb5cWcOovEKMPeaCBWseUFDHqbQ= -----END CERTIFICATE-----Generated at Mon Jun 16 09:26:32 2025 by rpki-client