$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/f81064c9-bd58-355f-bdcf-e895dd46de9d.roa File: f81064c9-bd58-355f-bdcf-e895dd46de9d.roa (raw, json) Hash identifier: UbXC7iypAb829qxF+FA6PhyfZCGNVAJRxE3aVvjy47I= Subject key identifier: 6A:23:9E:D1:AB:80:9F:2E:6C:C2:86:79:3B:C9:7C:2A:6A:F5:0C:B1 Certificate issuer: /CN=0f6c1648-2b22-43a6-8efb-17412332f6fe Certificate serial: 010D0C9F4328584A86CC37168BAEBA778A29FC60 Authority key identifier: D9:F5:72:69:96:80:76:47:F7:C4:42:79:20:9A:17:F6:B2:2B:3F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/f81064c9-bd58-355f-bdcf-e895dd46de9d.roa Signing time: Tue 15 Jul 2025 12:30:33 +0000 ROA not before: Tue 15 Jul 2025 12:30:33 +0000 ROA not after: Mon 13 Oct 2025 12:30:33 +0000 asID: 11501 IP address blocks: 198.205.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/0f6c1648-2b22-43a6-8efb-17412332f6fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/0f6c1648-2b22-43a6-8efb-17412332f6fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cc:37:16:8b:ae:ba:77:8a:29:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6c1648-2b22-43a6-8efb-17412332f6fe Validity Not Before: Jul 15 12:30:33 2025 GMT Not After : Oct 13 12:30:33 2025 GMT Subject: CN=10c9bf8a-6aa2-4fe3-b8cd-361f34ad2cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:8a:82:5d:74:db:64:09:ba:48:f4:f3:e4: 93:71:56:fb:6d:02:87:47:64:2d:7b:b0:15:e4:23: 34:1c:46:e4:f0:cd:b7:52:68:d9:13:21:c0:c2:0a: d0:90:18:b7:87:6a:c7:de:67:d5:cf:80:13:01:20: 6b:02:1e:e1:17:7f:7e:0e:26:33:dd:ae:ca:38:2a: c1:8f:23:2d:ad:c6:51:f7:f3:8e:f2:13:c0:48:14: 5b:a1:f4:ce:e1:59:f6:8f:af:c6:1b:eb:fc:cd:ac: b9:38:41:66:7b:41:a5:1e:5e:c8:dd:cf:88:b9:7a: 6d:07:99:bd:40:00:89:ec:f4:b5:b1:f6:d0:22:b3: a3:50:8c:46:2d:cc:ad:4e:46:f6:45:b5:d5:7b:0b: 7a:1f:5a:41:6c:70:21:98:61:09:9c:1b:95:94:bf: 65:87:a0:7c:63:61:d4:ec:dc:58:3c:58:44:0f:61: 00:3e:4c:2a:09:7f:b3:aa:1b:9f:b3:33:11:78:10: 26:35:b3:98:a4:f8:51:28:88:0e:cd:d7:92:c9:4e: 80:b2:5f:6f:b3:84:67:ab:5d:22:db:f8:53:67:d7: b5:ac:cc:05:5b:6a:34:c0:25:b9:ef:9d:bb:03:01: a8:aa:c8:82:f7:f1:c2:8e:5e:00:1a:a1:f0:94:07: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:23:9E:D1:AB:80:9F:2E:6C:C2:86:79:3B:C9:7C:2A:6A:F5:0C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/f81064c9-bd58-355f-bdcf-e895dd46de9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe/0f6c1648-2b22-43a6-8efb-17412332f6fe.crl X509v3 Authority Key Identifier: keyid:D9:F5:72:69:96:80:76:47:F7:C4:42:79:20:9A:17:F6:B2:2B:3F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0f6c1648-2b22-43a6-8efb-17412332f6fe.cer sbgp-ipAddrBlock: critical IPv4: 198.205.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:54:99:6c:ea:f9:0a:90:d7:26:c7:f0:88:01:cc:01:ac:54: fd:38:4a:69:f8:c6:99:ce:ed:d1:bd:2a:2f:df:e9:3e:36:66: 91:c3:17:2a:38:ee:c1:dd:6a:cc:20:0b:11:15:11:ac:0e:0e: 4f:fc:26:75:6d:4c:1c:75:ea:de:20:02:21:5b:93:77:87:ef: 42:06:6f:ab:17:86:5b:32:6b:8b:2a:14:74:37:3d:ba:58:2a: 5c:42:5b:62:e4:d6:bb:b4:90:2b:93:cf:28:62:79:51:6d:b5: d1:f4:f1:19:89:37:e0:93:2a:21:07:43:c3:13:3c:a1:51:23: 57:34:ab:b8:ca:3c:ca:48:bc:9f:0e:fa:5b:05:02:74:07:26: 25:69:32:d4:20:24:33:e3:3a:41:33:23:eb:b3:45:c9:ed:a1: 9d:81:34:55:88:18:33:57:2d:5e:74:af:05:31:c9:21:6e:b2: 61:05:51:e1:43:8c:30:59:11:c6:13:2e:a8:20:ca:b0:ee:6b: a2:24:0d:9a:2c:f0:8e:4b:01:a9:b0:d4:b1:ca:4b:76:49:8b: 82:f2:a7:0f:23:27:b6:18:3a:41:51:62:0f:e3:2b:58:2b:48: 14:66:6d:bc:b7:66:71:73:dd:8e:bb:ab:c2:91:d4:67:c1:9a: 1b:33:07:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqGzDcWi666d4op/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY2YzE2NDgtMmIyMi00M2E2LThlZmItMTc0MTIzMzJm NmZlMB4XDTI1MDcxNTEyMzAzM1oXDTI1MTAxMzEyMzAzM1owLzEtMCsGA1UEAxMk MTBjOWJmOGEtNmFhMi00ZmUzLWI4Y2QtMzYxZjM0YWQyY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfyKgl1022QJukj08+STcVb7bQKHR2Qte7AV 5CM0HEbk8M23UmjZEyHAwgrQkBi3h2rH3mfVz4ATASBrAh7hF39+DiYz3a7KOCrB jyMtrcZR9/OO8hPASBRbofTO4Vn2j6/GG+v8zay5OEFme0GlHl7I3c+IuXptB5m9 QACJ7PS1sfbQIrOjUIxGLcytTkb2RbXVewt6H1pBbHAhmGEJnBuVlL9lh6B8Y2HU 7NxYPFhED2EAPkwqCX+zqhufszMReBAmNbOYpPhRKIgOzdeSyU6Asl9vs4Rnq10i 2/hTZ9e1rMwFW2o0wCW57527AwGoqsiC9/HCjl4AGqHwlAfqnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGojntGrgJ8ubMKGeTvJfCpq9QyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZjZj MTY0OC0yYjIyLTQzYTYtOGVmYi0xNzQxMjMzMmY2ZmUvZjgxMDY0YzktYmQ1OC0z NTVmLWJkY2YtZTg5NWRkNDZkZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGY2YzE2NDgtMmIyMi00M2E2LThl ZmItMTc0MTIzMzJmNmZlLzBmNmMxNjQ4LTJiMjItNDNhNi04ZWZiLTE3NDEyMzMy ZjZmZS5jcmwwHwYDVR0jBBgwFoAU2fVyaZaAdkf3xEJ5IJoX9rIrPxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wZjZjMTY0OC0yYjIyLTQzYTYtOGVmYi0xNzQx MjMzMmY2ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxs0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxUmWzq+QqQ1ybH8IgBzAGsVP04Smn4xpnO7dG9Ki/f6T42ZpHDFyo4 7sHdaswgCxEVEawODk/8JnVtTBx16t4gAiFbk3eH70IGb6sXhlsya4sqFHQ3PbpY KlxCW2Lk1ru0kCuTzyhieVFttdH08RmJN+CTKiEHQ8MTPKFRI1c0q7jKPMpIvJ8O +lsFAnQHJiVpMtQgJDPjOkEzI+uzRcntoZ2BNFWIGDNXLV50rwUxySFusmEFUeFD jDBZEcYTLqggyrDua6IkDZos8I5LAamw1LHKS3ZJi4Lypw8jJ7YYOkFRYg/jK1gr SBRmbby3ZnFz3Y67q8KR1GfBmhszBzw= -----END CERTIFICATE-----Generated at Sat Aug 9 20:47:51 2025 by rpki-client