$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa File: caa9c6f8-021f-3be2-bae4-31f4834a4921.roa (raw, json) Hash identifier: CKikcDcPiTo5SOTkinNTcxjqJodwSgLtxZtk8XRxoxE= Subject key identifier: 36:E2:28:58:95:A4:42:75:7B:60:1D:F2:1E:F9:87:4C:1D:A8:CA:ED Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A6AF092C746A9054769588D20 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 1239 IP address blocks: 198.16.70.0/23 maxlen: 23 198.16.72.0/23 maxlen: 23 198.16.76.0/23 maxlen: 23 198.16.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:92:c7:46:a9:05:47:69:58:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=356c1c91-71c7-433c-afa7-8f6041f2c5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:14:13:8b:f0:61:9d:d6:b2:61:2b:d9:9e: ec:22:05:78:ba:a9:54:95:df:31:0d:80:12:5f:1a: 4d:13:31:95:44:84:dd:8f:c9:8b:eb:15:b4:ca:18: d3:0e:55:7c:38:70:ff:c9:e1:cc:99:50:da:e4:c0: 2e:be:24:d5:a2:53:56:aa:82:06:69:61:80:ac:dc: 7d:0b:7e:56:ce:d3:2d:72:0d:09:d9:ed:60:98:4d: 74:c9:bf:af:19:18:34:65:4b:72:45:de:46:fa:06: 6d:1e:3d:09:0d:eb:af:79:93:c6:03:a6:24:91:85: e6:2f:d2:3a:ee:55:7e:d5:ad:df:b8:1e:71:c6:11: 7f:e6:0f:fa:23:4c:0a:f6:08:2d:4c:9e:e7:73:3a: a9:47:21:21:28:1a:4d:3c:18:b1:50:18:8f:76:d4: d3:c3:4b:c6:38:70:fc:50:f8:71:82:87:2c:e3:0c: 2e:e2:ef:09:de:53:d3:4e:31:b5:b5:c4:2a:93:e9: f6:9b:c2:f3:0c:26:25:c7:fc:dc:b5:1c:39:a8:3c: a1:c7:dc:ff:4d:60:0f:22:2f:2d:54:da:f7:af:4d: 91:86:89:2a:7b:24:6f:8a:0c:68:b3:a2:20:88:4c: a2:04:a6:7a:68:45:78:d7:af:5b:ac:35:b0:90:6e: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E2:28:58:95:A4:42:75:7B:60:1D:F2:1E:F9:87:4C:1D:A8:CA:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/caa9c6f8-021f-3be2-bae4-31f4834a4921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.70.0-198.16.73.255 198.16.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c2:fd:1e:bf:6e:4c:c7:39:fd:2b:7a:77:e7:c6:27:37:6e: 8f:66:98:b6:17:b5:f3:45:16:8d:53:95:77:46:29:4a:7e:ab: 5c:73:3a:a3:57:0c:72:f2:9d:95:00:73:5e:8e:02:3a:49:73: d2:f1:fe:b6:73:1d:49:4b:8f:ab:0e:bc:7a:a5:e9:e5:3c:f9: 8f:67:ce:64:d7:8f:85:fe:27:5e:70:93:9b:ac:23:8c:22:df: 71:df:9b:1f:91:5a:a5:33:7d:ea:d0:a1:5e:f2:87:d3:da:fe: d9:cc:30:5d:e2:56:98:51:d5:03:15:f5:e2:95:c9:c1:19:17: e7:27:50:0c:ec:8e:e4:cd:6c:6e:5e:56:f2:c7:36:3b:d4:59: b1:1c:89:36:65:5a:15:4d:0a:c5:71:47:47:5a:44:76:fd:d7: 8e:f4:43:be:05:c0:8e:75:38:1d:6b:43:f0:e2:f5:98:2a:0e: c1:db:05:45:2d:a1:d6:34:ab:d2:8f:38:91:98:39:16:38:73: 0b:93:62:dd:47:1b:86:ae:64:6b:77:3e:a6:f1:a7:98:a4:d4: cb:58:70:4c:ee:0b:92:45:a2:29:cc:e4:1d:5b:65:45:2b:48: ea:bf:5e:84:7d:f3:e1:57:cc:31:45:00:64:6d:f4:a4:e6:37: f4:99:83:d0 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEpq8JLHRqkFR2lYjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk MzU2YzFjOTEtNzFjNy00MzNjLWFmYTctOGY2MDQxZjJjNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKIUE4vwYZ3WsmEr2Z7sIgV4uqlUld8xDYAS XxpNEzGVRITdj8mL6xW0yhjTDlV8OHD/yeHMmVDa5MAuviTVolNWqoIGaWGArNx9 C35WztMtcg0J2e1gmE10yb+vGRg0ZUtyRd5G+gZtHj0JDeuveZPGA6YkkYXmL9I6 7lV+1a3fuB5xxhF/5g/6I0wK9ggtTJ7nczqpRyEhKBpNPBixUBiPdtTTw0vGOHD8 UPhxgocs4wwu4u8J3lPTTjG1tcQqk+n2m8LzDCYlx/zctRw5qDyhx9z/TWAPIi8t VNr3r02RhokqeyRvigxos6IgiEyiBKZ6aEV4169brDWwkG7cnwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFDbiKFiVpEJ1e2Ad8h75h0wdqMrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvY2FhOWM2ZjgtMDIxZi0z YmUyLWJhZTQtMzFmNDgzNGE0OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHGEEYD BAHGEEgDBALGEEwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAscL9Hr9uTMc5/St6d+fGJzduj2aYthe180UW jVOVd0YpSn6rXHM6o1cMcvKdlQBzXo4COklz0vH+tnMdSUuPqw68eqXp5Tz5j2fO ZNePhf4nXnCTm6wjjCLfcd+bH5FapTN96tChXvKH09r+2cwwXeJWmFHVAxX14pXJ wRkX5ydQDOyO5M1sbl5W8sc2O9RZsRyJNmVaFU0KxXFHR1pEdv3XjvRDvgXAjnU4 HWtD8OL1mCoOwdsFRS2h1jSr0o84kZg5FjhzC5Ni3Ucbhq5ka3c+pvGnmKTUy1hw TO4LkkWiKczkHVtlRStI6r9ehH3z4VfMMUUAZG30pOY39JmD0A== -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:19 2025 by rpki-client