$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa File: c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa (raw, json) Hash identifier: vtU1idEhRtqS4HeWi6sFi7QzT3RoocFDjy8A7MEHtvg= Subject key identifier: 8D:8C:43:A7:26:06:E3:54:3A:12:C1:21:9E:EF:30:27:26:B5:42:6C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A5FC5E905E1CAF97DA2D97580 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 30058 IP address blocks: 198.16.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e9:05:e1:ca:f9:7d:a2:d9:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=a6868a36-06e0-4e95-86af-193f24e4437e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c7:ad:bc:74:77:53:5b:7f:b5:b7:17:01:de: fd:cf:a1:34:52:76:68:37:f1:30:42:ae:cd:c0:f1: 34:a0:b0:09:f7:34:68:b8:6f:f4:b0:39:24:79:04: fc:66:82:9a:f8:f0:15:2e:c6:bb:93:dd:59:94:24: e7:b8:99:37:1c:84:5f:40:9d:b3:4e:ee:d1:e4:94: 0f:b9:b1:e6:f1:ae:ea:e9:43:74:7a:11:c9:01:3b: 00:b3:10:aa:8b:66:04:51:81:74:4c:8e:83:79:57: e5:6c:e6:1b:38:79:b2:dd:a1:f4:59:da:b5:e7:71: c1:7f:80:87:74:1b:86:7f:e5:a3:c3:26:a9:d0:c8: 82:fa:15:67:0e:ef:0a:99:be:28:5d:bb:09:7f:e7: d3:f7:79:0d:dc:19:db:46:3a:fb:f4:13:fd:78:9e: c6:aa:3d:00:4a:a9:8b:c6:e8:cb:bf:f4:ae:37:15: d1:ff:fc:c7:fb:97:a9:f0:84:40:cf:ef:c7:b8:02: e3:27:87:1a:48:a3:23:c4:13:6f:b7:2c:4d:05:3f: 24:8a:c4:2c:cc:65:18:55:bd:cb:3d:55:8b:ba:80: 34:49:5e:fa:ac:43:6b:14:be:0d:a6:d9:87:00:95: eb:37:67:c8:af:ce:20:1f:14:ca:9b:74:94:9a:e8: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8C:43:A7:26:06:E3:54:3A:12:C1:21:9E:EF:30:27:26:B5:42:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:14:38:3d:19:4b:5c:6a:d9:60:88:ba:2d:f0:23:82:df:09: 2c:19:ed:d1:c0:a5:6f:ab:0c:02:cb:94:0f:8d:29:2a:57:fa: 3d:78:66:aa:b6:4a:08:62:5b:66:cc:a0:8c:da:8b:42:5a:05: df:c9:81:bc:8a:10:49:f3:fa:48:7f:41:89:03:c7:36:4b:0c: f7:f9:20:32:e5:1e:9a:bb:01:c6:a1:aa:0c:30:77:07:1c:dc: 46:05:dc:eb:bb:ee:d0:d5:7e:44:73:0d:f1:58:1a:9b:cd:30: 3f:d7:95:f3:65:66:61:b9:82:7a:cc:c4:14:70:59:9e:17:e1: f6:0b:fe:7c:92:3f:d1:94:21:36:a9:4b:2a:dd:f5:94:c7:aa: d3:0e:59:90:ae:65:58:7e:55:5e:ff:2c:f3:85:5e:53:a7:51: 33:93:2b:d4:c1:e3:04:c4:19:ef:c4:3e:1d:63:8a:1a:ba:3c: 9b:8b:fa:ec:69:10:92:4c:11:76:3f:83:80:75:f9:8d:9d:c2: a1:51:ef:f4:cb:75:13:c8:83:70:e4:20:54:1c:51:91:ed:b8: 7f:81:eb:6b:c8:5e:c7:89:92:7b:fd:04:2a:7b:3b:25:12:1a: 14:75:cd:57:84:f2:7f:fc:73:4d:93:25:3d:36:2a:03:ae:82: dd:97:20:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxekF4cr5faLZdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YTY4NjhhMzYtMDZlMC00ZTk1LTg2YWYtMTkzZjI0ZTQ0MzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcetvHR3U1t/tbcXAd79z6E0UnZoN/EwQq7N wPE0oLAJ9zRouG/0sDkkeQT8ZoKa+PAVLsa7k91ZlCTnuJk3HIRfQJ2zTu7R5JQP ubHm8a7q6UN0ehHJATsAsxCqi2YEUYF0TI6DeVflbOYbOHmy3aH0Wdq153HBf4CH dBuGf+Wjwyap0MiC+hVnDu8Kmb4oXbsJf+fT93kN3BnbRjr79BP9eJ7Gqj0ASqmL xujLv/SuNxXR//zH+5ep8IRAz+/HuALjJ4caSKMjxBNvtyxNBT8kisQszGUYVb3L PVWLuoA0SV76rENrFL4NptmHAJXrN2fIr84gHxTKm3SUmug83QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2MQ6cmBuNUOhLBIZ7vMCcmtUJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzgwYjdjYzQtYTRjNi0z MjgyLTk4YjktY2I5MTRhMDM3NzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsUOD0ZS1xq2WCIui3wI4LfCSwZ7dHApW+rDALLlA+NKSpX+j14Zqq2 SghiW2bMoIzai0JaBd/JgbyKEEnz+kh/QYkDxzZLDPf5IDLlHpq7Acahqgwwdwcc 3EYF3Ou77tDVfkRzDfFYGpvNMD/XlfNlZmG5gnrMxBRwWZ4X4fYL/nySP9GUITap Syrd9ZTHqtMOWZCuZVh+VV7/LPOFXlOnUTOTK9TB4wTEGe/EPh1jihq6PJuL+uxp EJJMEXY/g4B1+Y2dwqFR7/TLdRPIg3DkIFQcUZHtuH+B62vIXseJknv9BCp7OyUS GhR1zVeE8n/8c02TJT02KgOugt2XIAg= -----END CERTIFICATE-----Generated at Wed Jul 23 17:10:16 2025 by rpki-client