$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa File: 0909e0b4-b777-341e-9a49-697f016e5a74.roa (raw, json) Hash identifier: oW1t5BAfzRAdxSwyBM9jkdMxH2CELA6JjKSY/EdZMVU= Subject key identifier: 5B:42:D5:21:D7:E2:9B:5D:BE:D8:3C:D3:5F:17:EB:5A:6D:B3:37:BC Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584ABD4B809884B65DF8FDB61EE8 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 36445 IP address blocks: 198.133.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:80:98:84:b6:5d:f8:fd:b6:1e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=721a6002-f6a8-4493-9559-8f7ad9a2494c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3c:dd:39:5c:c7:9b:1a:39:3d:0f:be:12:41: d6:22:5b:4b:48:30:3a:3b:b3:1e:28:89:a9:93:f3: 0a:92:94:c1:41:ba:8e:a6:d6:84:4a:0e:c0:c6:5e: c3:e2:e8:0b:cb:5b:e2:24:ab:30:d4:ae:26:af:64: 19:4f:24:02:07:48:63:c7:75:76:52:46:8d:93:28: b7:44:fe:35:1c:85:7e:93:ac:ec:7b:b8:37:da:33: 54:21:a4:e2:0e:d6:54:33:d4:60:3d:21:1d:6f:fa: 00:c2:2b:86:37:ee:0d:72:39:11:6f:ba:20:cf:af: 2c:22:e1:95:5b:df:db:66:9e:53:0e:c7:4c:af:4a: 4b:b6:bd:2e:de:8c:35:71:d9:26:f6:29:da:2d:03: 1f:a1:40:b6:7f:49:c6:b2:95:34:ee:b1:1c:4c:68: 88:29:70:e2:f8:0f:5a:44:4b:a0:9a:5f:47:3c:58: 88:be:e1:83:d8:e9:76:4b:f1:ac:df:c2:b0:e2:63: 0c:f1:f4:4f:23:09:d9:b8:b6:8e:70:2f:8d:8b:e8: c6:ce:f2:1b:f8:29:0e:28:df:f3:83:bf:48:e6:01: dc:15:78:3f:e9:e0:37:7c:4b:f9:74:6c:44:fb:93: 2f:2b:4d:61:0e:f5:f0:a7:56:2d:74:68:60:5d:bb: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:D5:21:D7:E2:9B:5D:BE:D8:3C:D3:5F:17:EB:5A:6D:B3:37:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 198.133.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8b:ca:36:c5:ad:56:28:8e:b5:47:a7:48:ae:0b:a4:05:ab: 0d:66:a2:2c:4f:f8:94:c6:17:92:a0:a3:0c:c7:93:97:04:e7: 92:05:49:7c:9b:cc:4d:a8:5b:3c:59:ee:2d:4b:75:74:bd:e4: fd:f1:36:a2:16:40:65:e8:7d:4a:1e:5f:37:12:23:91:dd:3c: 50:56:f8:e8:91:18:ff:b3:58:46:40:66:07:42:88:d0:cd:5e: 4f:56:98:49:ff:51:8e:89:51:bd:4e:e3:3c:05:7d:af:d8:eb: 57:22:75:5d:bd:37:87:28:02:06:bd:f3:8f:bf:46:9f:07:e5: e0:d0:ea:06:8c:96:d6:00:c9:ec:59:00:7c:4e:64:22:97:ff: f8:84:45:4b:0d:f8:53:9d:5c:6a:af:5c:57:0d:16:74:4f:72: eb:db:c2:f3:d9:f7:03:8e:54:e2:b0:9a:30:27:e8:68:b1:54: 61:08:29:6e:b1:18:81:6f:86:6e:af:24:40:51:60:71:37:b9: 05:1b:71:f3:c6:84:1a:c8:85:02:76:50:c5:82:5f:d5:d1:08: 8d:af:db:76:33:7a:ff:ef:bc:89:f5:04:d3:4d:90:0e:59:65: 47:26:cd:78:30:ed:53:15:64:6a:03:53:92:f8:ed:2f:1a:7f: b9:13:e4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S4CYhLZd+P22HugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NzIxYTYwMDItZjZhOC00NDkzLTk1NTktOGY3YWQ5YTI0OTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjzdOVzHmxo5PQ++EkHWIltLSDA6O7MeKImp k/MKkpTBQbqOptaESg7Axl7D4ugLy1viJKsw1K4mr2QZTyQCB0hjx3V2UkaNkyi3 RP41HIV+k6zse7g32jNUIaTiDtZUM9RgPSEdb/oAwiuGN+4NcjkRb7ogz68sIuGV W9/bZp5TDsdMr0pLtr0u3ow1cdkm9inaLQMfoUC2f0nGspU07rEcTGiIKXDi+A9a REugml9HPFiIvuGD2Ol2S/Gs38Kw4mMM8fRPIwnZuLaOcC+Ni+jGzvIb+CkOKN/z g79I5gHcFXg/6eA3fEv5dGxE+5MvK01hDvXwp1YtdGhgXbvFWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtC1SHX4ptdvtg8018X61ptsze8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMDkwOWUwYjQtYjc3Ny0z NDFlLTlhNDktNjk3ZjAxNmU1YTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCLyjbFrVYojrVHp0iuC6QFqw1moixP+JTGF5KgowzHk5cE55IFSXyb zE2oWzxZ7i1LdXS95P3xNqIWQGXofUoeXzcSI5HdPFBW+OiRGP+zWEZAZgdCiNDN Xk9WmEn/UY6JUb1O4zwFfa/Y61cidV29N4coAga984+/Rp8H5eDQ6gaMltYAyexZ AHxOZCKX//iERUsN+FOdXGqvXFcNFnRPcuvbwvPZ9wOOVOKwmjAn6GixVGEIKW6x GIFvhm6vJEBRYHE3uQUbcfPGhBrIhQJ2UMWCX9XRCI2v23Yzev/vvIn1BNNNkA5Z ZUcmzXgw7VMVZGoDU5L47S8af7kT5NA= -----END CERTIFICATE-----Generated at Sun Aug 10 05:01:11 2025 by rpki-client