$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ba5c830d-11a1-3e9e-a99d-00f4bdf13805.roa File: ba5c830d-11a1-3e9e-a99d-00f4bdf13805.roa (raw, json) Hash identifier: bzbxJyfMYgKPPRhBjZA2QqpJjpOFj7yQrryJMBb69k4= Subject key identifier: 8A:54:E3:A3:2B:68:2B:A9:83:F4:06:7E:2B:53:EC:50:00:01:F8:72 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584A682605ED2CEB054397F11280 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ba5c830d-11a1-3e9e-a99d-00f4bdf13805.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 7029 IP address blocks: 198.145.105.0/24 maxlen: 24 209.20.192.0/18 maxlen: 18 216.65.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:05:ed:2c:eb:05:43:97:f1:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=ecc71b3c-7125-4b19-b9a3-dceb870ac4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:6e:d1:45:fc:60:51:d0:29:14:ad:e1:81: 20:cd:ee:e8:b4:4b:a3:a7:27:8e:62:df:55:0a:7d: d6:a6:8a:6e:92:68:e6:15:e9:8a:6c:69:7a:05:c5: 8a:c0:7b:8d:e2:07:84:57:c0:36:14:63:79:9c:83: bc:29:64:83:bc:18:0c:da:50:41:58:59:9a:b4:a9: 4d:5e:57:44:ef:02:4f:5c:50:07:4e:db:af:af:56: 5d:8b:8e:1b:97:0c:86:d9:24:8b:3e:9b:27:f3:a5: 10:79:4c:fd:12:38:11:92:39:49:d2:1b:c6:86:17: 3b:b2:91:60:06:ec:fc:b2:5d:dd:46:5e:3f:01:de: 73:1d:87:96:9c:0d:b0:fb:2c:a3:a3:f0:79:fa:38: dd:36:f8:53:db:b8:d4:8a:f1:70:c5:eb:e9:13:1a: 69:e9:24:19:5c:43:e8:d5:9b:b9:71:78:ab:ba:23: 7a:d2:81:72:a3:2d:e0:21:2f:fb:45:98:7f:63:e6: 70:c4:46:9f:7c:f7:60:c6:29:ed:e8:cf:69:21:e1: 20:ab:a6:e0:76:ef:e5:e2:48:64:4f:16:16:e8:72: cd:e6:59:0c:36:c6:c0:ee:04:f2:d7:ed:cb:12:34: 56:a9:3b:a2:a0:ec:bd:7a:2e:89:85:e3:73:9b:9a: 8b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:54:E3:A3:2B:68:2B:A9:83:F4:06:7E:2B:53:EC:50:00:01:F8:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/ba5c830d-11a1-3e9e-a99d-00f4bdf13805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.105.0/24 209.20.192.0/18 216.65.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b2:3b:8f:05:9b:22:a5:19:5e:3a:41:d0:8f:5a:12:49:db: 0b:5c:f4:ba:c1:88:97:a2:ad:54:0a:4f:5e:3f:33:6a:22:1b: 22:36:94:2b:c5:4a:ee:37:39:50:7a:8b:d9:8d:80:bd:6b:60: bf:76:0b:f3:a1:d6:37:e3:7d:5e:c3:b9:66:0e:67:55:8e:3b: 6f:0f:56:1a:e9:4f:ee:27:fe:23:e7:e4:cb:23:69:72:af:4f: a5:85:20:33:00:bd:37:22:b9:e5:10:d1:20:23:1b:dd:f2:43: 07:c7:d2:7f:be:19:ee:e9:a5:a5:d3:ef:9e:17:5c:d4:ae:dc: 44:90:17:a4:a8:da:a0:1d:63:de:09:65:10:e5:c2:d8:2f:4a: f9:aa:64:d6:1b:05:b0:bd:a2:a2:dd:bb:2b:86:4c:b1:df:85: 83:5e:b6:26:73:70:ab:72:24:52:26:d9:f7:0c:94:49:e7:b4: 7d:cb:f6:47:2f:db:bf:12:cc:81:33:29:6f:85:ac:57:ae:ef: a2:9f:05:34:50:6b:04:49:2c:30:67:01:8f:ea:b3:1e:0f:fe: f0:b0:ac:18:49:18:d9:dd:62:c1:0a:c9:ea:2a:d9:79:0e:d9: 30:46:85:31:1b:c5:d3:be:51:a9:18:ef:04:2b:8f:b9:57:a6: 3f:96:d3:09 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEpoJgXtLOsFQ5fxEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZWNjNzFiM2MtNzEyNS00YjE5LWI5YTMtZGNlYjg3MGFjNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Ju0UX8YFHQKRSt4YEgze7otEujpyeOYt9V Cn3WpopukmjmFemKbGl6BcWKwHuN4geEV8A2FGN5nIO8KWSDvBgM2lBBWFmatKlN XldE7wJPXFAHTtuvr1Zdi44blwyG2SSLPpsn86UQeUz9EjgRkjlJ0hvGhhc7spFg Buz8sl3dRl4/Ad5zHYeWnA2w+yyjo/B5+jjdNvhT27jUivFwxevpExpp6SQZXEPo 1Zu5cXiruiN60oFyoy3gIS/7RZh/Y+ZwxEaffPdgxint6M9pIeEgq6bgdu/l4khk TxYW6HLN5lkMNsbA7gTy1+3LEjRWqTuioOy9ei6JheNzm5qL+QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIpU46MraCupg/QGfitT7FAAAfhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYmE1YzgzMGQtMTFhMS0z ZTllLWE5OWQtMDBmNGJkZjEzODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAxpFpAwQG 0RTAAwQF2EGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJyyO48FmyKlGV46QdCPWhJJ2wtc9LrBiJeirVQK T14/M2oiGyI2lCvFSu43OVB6i9mNgL1rYL92C/Oh1jfjfV7DuWYOZ1WOO28PVhrp T+4n/iPn5MsjaXKvT6WFIDMAvTciueUQ0SAjG93yQwfH0n++Ge7ppaXT754XXNSu 3ESQF6So2qAdY94JZRDlwtgvSvmqZNYbBbC9oqLduyuGTLHfhYNetiZzcKtyJFIm 2fcMlEnntH3L9kcv278SzIEzKW+FrFeu76KfBTRQawRJLDBnAY/qsx4P/vCwrBhJ GNndYsEKyeoq2XkO2TBGhTEbxdO+UakY7wQrj7lXpj+W0wk= -----END CERTIFICATE-----Generated at Sun Jul 20 14:14:09 2025 by rpki-client