$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/320fdeb8-c471-3094-a6ba-daefddc52f23.roa File: 320fdeb8-c471-3094-a6ba-daefddc52f23.roa (raw, json) Hash identifier: poFhhx0V6mA2xIH8QZRs59lM172L1HBvupL3xQ/1lBE= Subject key identifier: 69:4B:97:88:6A:BC:C7:9F:C1:83:B6:3B:0F:E6:CA:A4:FC:A2:59:6A Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A5E60618C4D4F6C54AECC2FC0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/320fdeb8-c471-3094-a6ba-daefddc52f23.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 30058 IP address blocks: 198.16.100.0/23 maxlen: 23 198.16.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:61:8c:4d:4f:6c:54:ae:cc:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=6000ac12-16f2-4267-8cb9-ccbe8306d999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:a2:66:a6:45:d9:fd:a0:89:d0:50:06:e0: 00:08:5d:9c:dd:0d:86:80:2b:a0:88:9e:00:02:da: be:d4:87:9d:3c:b1:e8:c0:36:d6:16:5d:e1:c8:f6: 65:74:74:28:ab:05:c7:41:e7:e8:a1:bc:e9:45:fd: 2c:8a:17:ec:26:3b:fe:e7:43:26:74:b2:25:4d:c3: 03:40:73:c7:8a:d1:d2:24:b2:4f:32:8a:ec:cc:f9: a5:8d:20:e4:f4:e4:93:36:98:73:99:a1:a6:f1:22: 82:c8:e3:95:19:f1:2a:a3:0d:34:d5:d0:a3:ff:d9: ba:bd:8c:d1:2e:45:82:9b:ef:22:be:07:4b:b0:1c: a3:84:15:43:d4:b3:59:1b:1d:c9:e2:22:ab:6e:3e: 1f:2b:e3:53:f0:6b:5e:5f:d6:30:8f:9e:b8:f2:82: 15:d5:fd:93:45:3f:a1:30:46:40:c9:0e:4e:c1:52: 86:15:c0:8f:70:19:e6:d3:74:8a:3a:f9:20:b1:25: 36:73:ff:53:2b:12:82:36:8e:a9:91:31:6d:3b:70: dc:21:a4:37:ab:b6:e3:55:ab:5f:2e:23:2f:6f:bf: ec:55:44:c7:2c:f0:be:5a:66:81:1e:87:56:24:4e: 68:c2:3e:59:e5:40:43:27:82:d5:08:3f:87:0d:8b: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4B:97:88:6A:BC:C7:9F:C1:83:B6:3B:0F:E6:CA:A4:FC:A2:59:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/320fdeb8-c471-3094-a6ba-daefddc52f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.100.0/23 198.16.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7a:53:b2:ae:4f:d7:7a:e8:c4:77:51:67:15:27:c9:fa:75: ea:f5:63:26:c1:f9:3e:48:d1:f4:fc:08:ef:7b:12:67:e5:10: 13:95:55:55:35:03:76:db:06:df:95:d7:45:d1:f3:42:eb:d2: bb:9b:9f:3e:d7:aa:79:93:72:74:49:ad:7f:a1:ba:0b:31:1f: 64:fd:29:c6:83:82:43:51:43:f3:32:4c:89:4d:0f:04:31:93: f7:2e:df:d3:29:a7:e7:95:11:cb:a3:2b:36:ff:3b:36:49:74: 58:7e:16:8f:eb:d2:3c:95:a6:ea:b6:27:69:47:8a:9b:65:be: fd:d0:21:55:bf:53:6c:62:a4:0c:e9:2a:7c:a7:1a:91:9f:9c: ba:c4:c1:24:96:81:d2:6c:54:88:19:9c:a3:c8:95:01:85:bf: d1:51:2d:be:36:8a:11:72:6a:85:89:86:59:9c:fe:b8:65:1a: e1:7c:01:32:58:f3:d2:19:97:9a:cc:4c:7d:80:8c:03:36:b8: ab:5e:ff:12:cc:46:82:3b:00:81:1f:b5:cb:7f:2b:59:cb:7b: 3f:f8:d6:ce:7e:f7:d3:bd:f7:12:b2:92:68:50:7e:7d:c3:9e: 24:a7:ec:bc:e8:39:36:86:8b:f4:00:dc:41:0f:34:24:0c:b5: 79:7d:d2:f5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpeYGGMTU9sVK7ML8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NjAwMGFjMTItMTZmMi00MjY3LThjYjktY2NiZTgzMDZkOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbOiZqZF2f2gidBQBuAACF2c3Q2GgCugiJ4A Atq+1IedPLHowDbWFl3hyPZldHQoqwXHQefoobzpRf0sihfsJjv+50MmdLIlTcMD QHPHitHSJLJPMorszPmljSDk9OSTNphzmaGm8SKCyOOVGfEqow001dCj/9m6vYzR LkWCm+8ivgdLsByjhBVD1LNZGx3J4iKrbj4fK+NT8GteX9Ywj5648oIV1f2TRT+h MEZAyQ5OwVKGFcCPcBnm03SKOvkgsSU2c/9TKxKCNo6pkTFtO3DcIaQ3q7bjVatf LiMvb7/sVUTHLPC+WmaBHodWJE5owj5Z5UBDJ4LVCD+HDYtsYQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGlLl4hqvMefwYO2Ow/myqT8ollqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzIwZmRlYjgtYzQ3MS0z MDk0LWE2YmEtZGFlZmRkYzUyZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxhBkAwQB xhBqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJJ6U7KuT9d66MR3UWcVJ8n6der1YybB+T5I0fT8CO97Emfl EBOVVVU1A3bbBt+V10XR80Lr0rubnz7XqnmTcnRJrX+hugsxH2T9KcaDgkNRQ/My TIlNDwQxk/cu39Mpp+eVEcujKzb/OzZJdFh+Fo/r0jyVpuq2J2lHiptlvv3QIVW/ U2xipAzpKnynGpGfnLrEwSSWgdJsVIgZnKPIlQGFv9FRLb42ihFyaoWJhlmc/rhl GuF8ATJY89IZl5rMTH2AjAM2uKte/xLMRoI7AIEftct/K1nLez/41s5+99O99xKy kmhQfn3DniSn7LzoOTaGi/QA3EEPNCQMtXl90vU= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:46 2025 by rpki-client