$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ba709f94-7b2e-396a-8bc2-d6408f45cdab.roa File: ba709f94-7b2e-396a-8bc2-d6408f45cdab.roa (raw, json) Hash identifier: 9KfpAoLMQfxe9hSNYO4ZEN2wF5UqZxNKAZizZ1TmMyk= Subject key identifier: C5:43:58:DF:05:64:12:8B:0C:92:0F:FF:FE:EE:15:B4:B1:D9:96:AE Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FC570370ACFCA562CC8C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ba709f94-7b2e-396a-8bc2-d6408f45cdab.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 20454 IP address blocks: 198.15.64.0/18 maxlen: 32 198.15.78.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c5:70:37:0a:cf:ca:56:2c:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=96a04a40-f860-4eeb-981e-5c75bf25ee12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e6:e2:e1:01:fa:95:7e:a7:ce:79:1f:d5:69: 3c:cc:5b:63:2b:d6:9d:4c:b3:1a:3c:80:dd:f6:32: 6f:d6:5c:22:58:cd:c9:0b:15:cb:90:94:e5:01:ae: 04:7b:e9:62:8e:46:9c:94:7e:18:90:96:b1:a0:78: 57:b1:11:95:59:d2:1b:aa:28:59:49:3d:9b:e7:14: eb:a9:8e:c8:c1:92:94:f5:bb:a7:e6:63:f6:e3:73: 73:b8:1e:fa:d5:b1:43:ff:6d:be:2d:1e:e1:49:54: f5:f3:ed:3e:60:49:61:e3:62:74:38:66:14:6e:04: 84:3b:2f:e7:8b:74:79:13:02:9b:97:4e:dd:60:06: 13:88:13:53:16:1a:6b:3a:6f:50:d9:2b:c2:44:73: c1:4d:ff:e9:5d:8a:38:b2:bf:f9:ef:21:db:cd:43: 9c:d6:c4:b0:5b:f4:bd:d0:2e:79:54:36:e8:67:82: 0b:d8:d3:86:d2:8b:47:f1:e7:de:5c:a1:81:b8:cb: d5:de:5e:9e:ba:dd:65:82:5f:fe:dd:96:1c:6c:ee: 58:01:32:5e:6e:b9:09:72:32:5c:87:63:10:e0:a3: 0f:a1:09:dd:c4:6f:41:73:00:7f:2b:1f:7b:03:26: 26:a6:e9:22:96:3f:16:09:9a:d3:77:15:8f:63:33: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:43:58:DF:05:64:12:8B:0C:92:0F:FF:FE:EE:15:B4:B1:D9:96:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ba709f94-7b2e-396a-8bc2-d6408f45cdab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 198.15.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d9:04:28:bf:e0:9c:9c:f5:6b:87:a7:b2:84:8d:d9:37:94: 83:2a:b6:16:16:4d:5e:20:93:c8:14:58:eb:b7:52:83:77:b2: 86:bf:db:f5:51:22:6f:97:ba:56:5c:2f:dc:9d:82:b1:32:d5: 81:b2:61:c6:5e:94:e2:1e:2c:6a:dc:4d:ed:13:f0:cd:d5:0d: 00:fe:8c:86:eb:04:c6:4f:69:05:bf:b4:8b:71:43:54:37:d2: bb:3f:28:46:ee:0c:ad:6e:48:11:dd:51:01:5c:f9:8e:c6:7c: a1:82:cb:65:2f:b4:92:65:5a:9b:d8:3f:0f:b6:1b:9d:3a:33: 23:89:d5:71:c9:c3:24:f1:8e:b3:d1:2d:01:43:19:a2:54:57: 9d:6f:54:d9:15:26:21:92:f9:bf:89:be:35:c6:91:a6:2e:fd: 44:bd:e0:c6:e8:92:32:62:94:54:aa:3e:cc:2a:2c:cf:53:61: 6a:c2:cb:8b:4e:18:3f:5f:fd:dd:84:b6:f9:14:11:f9:84:15: 33:20:9a:26:0c:63:51:c0:cc:c6:81:7c:69:a7:d8:81:33:58: 0e:8b:1e:32:81:0d:ce:5d:01:da:49:9a:c2:f2:df:69:ad:46: c8:9d:0b:ab:33:86:1c:60:ad:f5:7c:02:91:11:eb:34:d4:7b: 1f:e6:eb:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8VwNwrPylYsyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OTZhMDRhNDAtZjg2MC00ZWViLTk4MWUtNWM3NWJmMjVlZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+bi4QH6lX6nznkf1Wk8zFtjK9adTLMaPIDd 9jJv1lwiWM3JCxXLkJTlAa4Ee+lijkaclH4YkJaxoHhXsRGVWdIbqihZST2b5xTr qY7IwZKU9bun5mP243NzuB761bFD/22+LR7hSVT18+0+YElh42J0OGYUbgSEOy/n i3R5EwKbl07dYAYTiBNTFhprOm9Q2SvCRHPBTf/pXYo4sr/57yHbzUOc1sSwW/S9 0C55VDboZ4IL2NOG0otH8efeXKGBuMvV3l6eut1lgl/+3ZYcbO5YATJebrkJcjJc h2MQ4KMPoQndxG9BcwB/Kx97AyYmpukilj8WCZrTdxWPYzNQRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVDWN8FZBKLDJIP//7uFbSx2ZauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmE3MDlmOTQtN2IyZS0z OTZhLThiYzItZDY0MDhmNDVjZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxg9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/ZBCi/4Jyc9WuHp7KEjdk3lIMqthYWTV4gk8gUWOu3UoN3soa/2/VR Im+XulZcL9ydgrEy1YGyYcZelOIeLGrcTe0T8M3VDQD+jIbrBMZPaQW/tItxQ1Q3 0rs/KEbuDK1uSBHdUQFc+Y7GfKGCy2UvtJJlWpvYPw+2G506MyOJ1XHJwyTxjrPR LQFDGaJUV51vVNkVJiGS+b+JvjXGkaYu/US94MbokjJilFSqPswqLM9TYWrCy4tO GD9f/d2EtvkUEfmEFTMgmiYMY1HAzMaBfGmn2IEzWA6LHjKBDc5dAdpJmsLy32mt RsidC6szhhxgrfV8ApER6zTUex/m6wA= -----END CERTIFICATE-----Generated at Sun Jun 15 15:16:26 2025 by rpki-client