$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa File: a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa (raw, json) Hash identifier: WcvOqz8Omwlo3kI66BFBL4mvD9HJrRemxbxtwkzpyqs= Subject key identifier: 0D:63:1B:17:84:6D:EB:B8:C6:5E:C0:13:03:A2:DB:A7:D2:3D:42:FE Certificate issuer: /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Certificate serial: 010D0C9F4328584A5FC5DEDBD1AFD0591D9EC680 Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 198.204.9.0/24 maxlen: 24 198.204.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:de:db:d1:af:d0:59:1d:9e:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=ae345aa1-ff1f-492d-8808-a6c70518b465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:87:67:93:61:5f:9c:7e:0e:19:74:68:aa: 32:72:3a:a7:a4:b1:9f:6e:1c:9c:91:81:a1:77:79: cf:25:a2:a2:db:dc:73:89:a3:33:ec:9d:41:88:83: 93:78:f0:b8:f2:0a:8e:0d:11:0a:5e:7f:2e:e1:ec: c4:7e:8f:de:a8:13:82:ea:45:1e:88:4b:d9:09:f3: 65:46:5d:a9:52:25:57:b5:77:b9:40:a9:02:95:10: ed:b4:6c:f0:c5:85:cf:eb:5d:ab:5c:f7:dd:4d:e1: 2b:0d:5f:16:3b:99:c3:36:27:71:56:23:4a:01:35: e2:b2:23:bc:01:05:35:15:5c:04:e2:4c:21:94:ee: af:84:8a:3d:97:b2:32:d5:d7:0a:47:cb:8a:37:55: fa:2a:c2:f3:b3:da:38:20:eb:7b:eb:1d:32:c2:32: 4f:a9:5b:19:08:fb:d6:d4:3c:3e:9a:c2:11:d5:a3: ab:2b:d7:bb:d1:de:eb:26:4f:1f:0a:84:21:1c:49: c8:37:bb:08:b9:04:d1:84:6d:b8:f4:9c:b1:71:3c: 19:54:17:90:1b:8f:6d:24:74:1c:fb:a3:56:92:d5: 17:2f:b6:51:b5:0f:be:08:cb:61:00:7a:fc:f7:d7: 75:f6:89:5c:f9:d9:81:84:0f:a6:4d:20:1a:db:da: 63:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:63:1B:17:84:6D:EB:B8:C6:5E:C0:13:03:A2:DB:A7:D2:3D:42:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/a9a123cf-fbdb-3fd4-ab9e-fe0a795ea246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl X509v3 Authority Key Identifier: keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer sbgp-ipAddrBlock: critical IPv4: 198.204.9.0/24 198.204.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a9:d1:44:4c:8a:a9:50:72:4e:66:37:2b:e3:10:2d:18:50: 3a:31:c4:09:cc:e7:f2:c8:8f:48:1a:06:40:b7:58:1d:a9:6e: 47:cc:d2:ca:11:94:51:25:d8:a4:a2:ab:75:4b:60:35:a8:3e: b9:49:9a:d6:e0:cd:3a:5e:6e:05:14:0d:85:c7:b9:b2:0d:b5: ec:af:1b:9c:d6:1f:ab:cf:9f:0b:15:50:0d:ff:05:ff:ff:78: 5a:7b:33:e5:a1:5b:14:53:ff:c7:89:ca:75:ac:c1:1d:96:00: 6b:8b:7d:12:ad:d5:94:e8:0f:2f:2d:76:d6:a1:42:e8:c4:26: d9:bf:b0:60:e0:5d:3a:a9:92:62:f6:08:7f:66:56:2e:a1:01: f2:27:9d:ed:a8:b1:99:d8:89:0a:b5:76:47:27:87:27:a0:35: cf:86:cb:98:2a:ca:ba:29:d1:89:d2:48:72:66:ed:ad:2e:cc: 6b:02:a7:39:7d:97:f5:69:57:4a:46:a9:2f:8e:d9:ab:04:ab: d3:7d:b1:5d:a4:20:73:11:92:fe:3a:b6:5f:df:7d:cd:0e:b2: 51:67:75:73:b4:ea:9f:9d:10:f8:6c:36:b3:8f:28:8f:8f:2e: fb:39:b3:e2:90:5b:6a:66:64:7f:84:81:b7:95:1c:cb:49:5f: 36:22:68:af -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpfxd7b0a/QWR2exoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYwN2Y4N2YtZDllYy00YTBmLWI2MTEtZDBlZWFkZGU2 YjQyMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YWUzNDVhYTEtZmYxZi00OTJkLTg4MDgtYTZjNzA1MThiNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGGHZ5NhX5x+Dhl0aKoycjqnpLGfbhyckYGh d3nPJaKi29xziaMz7J1BiIOTePC48gqODREKXn8u4ezEfo/eqBOC6kUeiEvZCfNl Rl2pUiVXtXe5QKkClRDttGzwxYXP612rXPfdTeErDV8WO5nDNidxViNKATXisiO8 AQU1FVwE4kwhlO6vhIo9l7Iy1dcKR8uKN1X6KsLzs9o4IOt76x0ywjJPqVsZCPvW 1Dw+msIR1aOrK9e70d7rJk8fCoQhHEnIN7sIuQTRhG249JyxcTwZVBeQG49tJHQc +6NWktUXL7ZRtQ++CMthAHr899d19olc+dmBhA+mTSAa29pjswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA1jGxeEbeu4xl7AEwOi26fSPUL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NjA3 Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVlYWRkZTZiNDIvYTlhMTIzY2YtZmJkYi0z ZmQ0LWFiOWUtZmUwYTc5NWVhMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzYwN2Y4N2YtZDllYy00YTBmLWI2 MTEtZDBlZWFkZGU2YjQyLzc2MDdmODdmLWQ5ZWMtNGEwZi1iNjExLWQwZWVhZGRl NmI0Mi5jcmwwHwYDVR0jBBgwFoAUlNlqgFk0RIaJSkjby4cZN5oJl6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NjA3Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVl YWRkZTZiNDIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxswJAwQA xswNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG+p0URMiqlQck5mNyvjEC0YUDoxxAnM5/LIj0gaBkC3WB2p bkfM0soRlFEl2KSiq3VLYDWoPrlJmtbgzTpebgUUDYXHubINteyvG5zWH6vPnwsV UA3/Bf//eFp7M+WhWxRT/8eJynWswR2WAGuLfRKt1ZToDy8tdtahQujEJtm/sGDg XTqpkmL2CH9mVi6hAfInne2osZnYiQq1dkcnhyegNc+Gy5gqyrop0YnSSHJm7a0u zGsCpzl9l/VpV0pGqS+O2asEq9N9sV2kIHMRkv46tl/ffc0OslFndXO06p+dEPhs NrOPKI+PLvs5s+KQW2pmZH+EgbeVHMtJXzYiaK8= -----END CERTIFICATE-----Generated at Fri Jul 11 04:34:10 2025 by rpki-client