$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa File: f0d22b76-e797-3089-8dfe-00a9447c23e8.roa (raw, json) Hash identifier: inQucozCYLW1BN8gijWCJpplZjQPGYlg0+Yip0oTjzY= Subject key identifier: 46:AE:39:18:72:61:08:64:A7:90:68:0A:CF:37:8E:8F:94:12:4A:F5 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584A92063432DAB90A87E33FDF80 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 3300 IP address blocks: 204.140.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:34:32:da:b9:0a:87:e3:3f:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=c34ea973-eea1-40c8-9a65-f23a8e99e68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:bb:6c:2f:27:be:fd:7c:cc:ca:b8:28:7c: eb:e8:e1:d2:01:bb:5a:ee:ea:35:d8:b4:d6:c2:13: b9:51:b9:ed:8f:ff:f4:8c:61:4d:4a:31:15:05:0a: 91:a0:89:18:8c:19:50:8e:fe:97:99:d7:c5:55:0d: 0d:19:62:0e:d2:07:ab:ad:09:53:c3:37:d4:a7:d9: 0c:52:53:d1:e0:b4:87:6b:5e:0d:68:b6:d1:4b:b1: 04:37:4c:f7:cf:56:b8:21:6a:fb:83:29:be:41:fd: d0:8d:9c:c0:24:6b:cf:17:9d:80:4d:d6:49:2b:9b: 87:d2:c4:be:0e:87:af:4b:08:7e:bb:99:62:ec:1c: e5:dd:34:3f:1d:a7:93:50:47:fd:f7:84:26:64:aa: 07:3a:08:bd:9b:e8:88:bc:33:8e:c3:35:1c:89:11: 2d:7d:19:56:09:76:f8:3b:bb:de:9a:d0:55:73:a2: bb:7c:9f:ed:8f:f3:91:fa:a3:ea:d3:2e:fe:25:a9: d5:13:dd:fa:e9:5a:ed:5f:9b:73:22:41:9b:29:78: 77:dc:59:6d:e3:65:75:7a:48:cd:9f:b6:1b:b1:38: fe:fc:8d:5b:24:56:d4:38:05:36:cd:be:5c:75:93: 59:af:c4:ca:2e:c2:2f:0a:da:6c:50:74:b3:eb:b1: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AE:39:18:72:61:08:64:A7:90:68:0A:CF:37:8E:8F:94:12:4A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/f0d22b76-e797-3089-8dfe-00a9447c23e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 204.140.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f8:32:1d:9a:96:7c:5c:4c:31:a9:bb:0d:92:d7:23:e4:4c: 8e:83:0f:34:27:e0:b7:2c:c0:56:37:de:e1:3c:ac:5e:01:06: 24:d9:cf:b7:0e:9d:74:6b:f3:cb:4a:00:80:a4:ff:16:e6:e3: 9a:06:8d:99:93:22:7a:a3:46:9c:62:e7:1a:66:ff:5e:5e:ed: 61:03:73:8c:25:69:ad:ba:2b:dc:21:2d:06:b5:5f:cf:85:9b: bb:78:18:90:35:b0:c4:60:fc:ed:29:f8:f3:ce:cd:17:54:ae: 12:50:48:eb:b9:ec:7a:57:0f:31:a2:61:41:7b:81:58:52:72: 9c:83:04:1a:fe:4b:96:dc:05:08:4c:f3:24:cf:92:27:66:fc: 4d:56:fd:32:20:3c:a3:a4:9b:3b:fb:2b:40:1e:27:cc:8e:81: 57:c6:ad:08:98:37:4a:e9:24:f3:ac:0b:5d:30:13:bf:c5:eb: 14:49:13:38:29:5a:38:cf:21:63:67:30:42:33:7f:d1:53:27: 53:94:aa:35:61:40:89:a1:5f:f7:bf:69:ea:cc:e2:86:d6:2c: dc:c9:17:cd:24:a2:47:cb:a9:b6:54:97:7c:a2:5b:1c:6b:05: f6:c2:d2:31:92:57:a2:18:a8:b4:df:42:8d:40:87:49:e8:5a: a8:37:97:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjQy2rkKh+M/34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk YzM0ZWE5NzMtZWVhMS00MGM4LTlhNjUtZjIzYThlOTllNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3i7bC8nvv18zMq4KHzr6OHSAbta7uo12LTW whO5Ubntj//0jGFNSjEVBQqRoIkYjBlQjv6XmdfFVQ0NGWIO0gerrQlTwzfUp9kM UlPR4LSHa14NaLbRS7EEN0z3z1a4IWr7gym+Qf3QjZzAJGvPF52ATdZJK5uH0sS+ DoevSwh+u5li7Bzl3TQ/HaeTUEf994QmZKoHOgi9m+iIvDOOwzUciREtfRlWCXb4 O7vemtBVc6K7fJ/tj/OR+qPq0y7+JanVE9366VrtX5tzIkGbKXh33Flt42V1ekjN n7YbsTj+/I1bJFbUOAU2zb5cdZNZr8TKLsIvCtpsUHSz67G7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEauORhyYQhkp5BoCs83jo+UEkr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvZjBkMjJiNzYtZTc5Ny0z MDg5LThkZmUtMDBhOTQ0N2MyM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzIxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr4Mh2alnxcTDGpuw2S1yPkTI6DDzQn4LcswFY33uE8rF4BBiTZz7cO nXRr88tKAICk/xbm45oGjZmTInqjRpxi5xpm/15e7WEDc4wlaa26K9whLQa1X8+F m7t4GJA1sMRg/O0p+PPOzRdUrhJQSOu57HpXDzGiYUF7gVhScpyDBBr+S5bcBQhM 8yTPkidm/E1W/TIgPKOkmzv7K0AeJ8yOgVfGrQiYN0rpJPOsC10wE7/F6xRJEzgp WjjPIWNnMEIzf9FTJ1OUqjVhQImhX/e/aerM4obWLNzJF80kokfLqbZUl3yiWxxr BfbC0jGSV6IYqLTfQo1Ah0noWqg3l6o= -----END CERTIFICATE-----Generated at Sun Jul 27 08:41:44 2025 by rpki-client