$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a9f399e1-adc1-3b4c-af76-161ffb3cb198.roa File: a9f399e1-adc1-3b4c-af76-161ffb3cb198.roa (raw, json) Hash identifier: gL+h1nrZ3+4rL3xaw/X+WeaHbs+hhHhmQg6Eo8PRR4c= Subject key identifier: 18:0D:22:74:8E:13:92:FE:5F:C5:71:17:38:4F:BC:0F:E2:6F:CC:F3 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584BBE9DAD1E21F65FB7991E5160 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a9f399e1-adc1-3b4c-af76-161ffb3cb198.roa Signing time: Tue 04 Nov 2025 05:08:59 +0000 ROA not before: Tue 04 Nov 2025 05:08:59 +0000 ROA not after: Mon 02 Feb 2026 05:08:59 +0000 asID: 6079 IP address blocks: 198.145.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:9d:ad:1e:21:f6:5f:b7:99:1e:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Nov 4 05:08:59 2025 GMT Not After : Feb 2 05:08:59 2026 GMT Subject: CN=7d925a16-76c6-4e7d-a35f-7d283ed37512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:1b:df:44:29:06:e6:fa:b2:54:37:e6:75: 36:03:59:13:0e:28:ca:a3:48:42:38:6e:11:78:d6: 56:df:0f:7c:27:60:bb:61:c1:28:df:6e:ce:6b:cd: 2c:7a:a8:ee:c4:8d:a8:03:41:e9:0a:a9:f8:50:09: 0a:df:d8:e0:be:19:a7:26:97:3f:a0:a1:de:8b:7a: 7c:0f:dd:69:a3:72:97:30:2b:87:76:75:b5:d7:e0: fe:9d:18:b1:f8:c7:4d:8e:a9:32:54:5e:49:ec:f6: 0e:26:6e:7f:12:02:af:62:a8:ab:a5:98:fc:94:12: 00:34:79:b1:fa:98:a1:b6:54:ec:01:dc:e5:13:aa: f9:71:7b:07:d7:80:54:a5:fd:93:96:9f:38:34:86: 50:05:1b:7e:30:54:22:9d:38:1f:84:54:0c:93:81: e1:bf:6c:36:38:06:c3:0d:50:6e:e0:de:5b:3b:7b: 49:4a:39:20:8f:c7:ce:15:9c:b2:66:2e:bf:a7:1f: 1e:c9:d3:d3:cf:d3:77:27:a5:ad:92:fc:a4:0b:a2: db:d3:14:8c:67:23:6c:71:18:62:54:48:45:88:28: ff:aa:b5:17:66:34:d7:c3:3a:3d:fd:09:06:c0:81: 9e:3d:d4:f1:74:f3:78:a1:c1:ec:e3:f7:b5:f2:fc: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0D:22:74:8E:13:92:FE:5F:C5:71:17:38:4F:BC:0F:E2:6F:CC:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a9f399e1-adc1-3b4c-af76-161ffb3cb198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c3:9c:d8:51:f0:95:02:21:d5:f1:86:7e:e4:86:2c:da:bb: 04:28:c8:96:05:03:15:9b:c9:f6:86:fc:d4:5e:fc:00:18:b3: f1:d0:24:cf:19:44:f5:91:31:ab:bb:9c:16:6f:bd:b7:3c:f5: 4e:44:f4:7b:2b:79:cb:4b:68:db:91:66:18:4d:61:47:18:3c: cb:2d:d8:08:47:52:d1:bc:d8:49:cc:33:41:02:e5:e2:d8:ad: 20:7d:7c:bf:05:90:24:a6:4c:c8:c9:3f:00:27:86:13:f4:cd: a3:b4:ea:ba:29:54:00:68:67:d5:de:6e:d2:97:3c:9a:5d:14: a7:98:35:c0:25:a5:fa:57:a9:64:8c:79:6f:34:20:a8:59:5c: 40:1f:3e:56:1f:b1:bc:c9:a6:10:d2:cb:9b:bc:88:69:dc:13: 90:fa:f4:1c:86:85:52:22:08:39:4e:a0:24:69:b4:a6:65:21: 7f:32:3b:14:75:73:fa:1f:1d:02:ec:4c:2a:36:cd:23:82:f5: 42:00:3c:cd:74:86:13:f4:35:e7:c9:86:3f:c6:58:d0:76:c6: b6:c7:71:18:33:17:b6:04:57:b0:eb:94:60:d4:31:b5:95:5e: 8c:96:b3:b6:fb:b1:61:25:b1:fa:2c:0f:24:07:aa:47:a5:85: 88:8e:43:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+na0eIfZft5keUWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MTEwNDA1MDg1OVoXDTI2MDIwMjA1MDg1OVowLzEtMCsGA1UEAxMk N2Q5MjVhMTYtNzZjNi00ZTdkLWEzNWYtN2QyODNlZDM3NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOIb30QpBub6slQ35nU2A1kTDijKo0hCOG4R eNZW3w98J2C7YcEo327Oa80seqjuxI2oA0HpCqn4UAkK39jgvhmnJpc/oKHei3p8 D91po3KXMCuHdnW11+D+nRix+MdNjqkyVF5J7PYOJm5/EgKvYqirpZj8lBIANHmx +pihtlTsAdzlE6r5cXsH14BUpf2Tlp84NIZQBRt+MFQinTgfhFQMk4Hhv2w2OAbD DVBu4N5bO3tJSjkgj8fOFZyyZi6/px8eydPTz9N3J6WtkvykC6Lb0xSMZyNscRhi VEhFiCj/qrUXZjTXwzo9/QkGwIGePdTxdPN4ocHs4/e18vw2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgNInSOE5L+X8VxFzhPvA/ib8zzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYTlmMzk5ZTEtYWRjMS0z YjRjLWFmNzYtMTYxZmZiM2NiMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjDnNhR8JUCIdXxhn7khizauwQoyJYFAxWbyfaG/NRe/AAYs/HQJM8Z RPWRMau7nBZvvbc89U5E9HsrectLaNuRZhhNYUcYPMst2AhHUtG82EnMM0EC5eLY rSB9fL8FkCSmTMjJPwAnhhP0zaO06ropVABoZ9XebtKXPJpdFKeYNcAlpfpXqWSM eW80IKhZXEAfPlYfsbzJphDSy5u8iGncE5D69ByGhVIiCDlOoCRptKZlIX8yOxR1 c/ofHQLsTCo2zSOC9UIAPM10hhP0NefJhj/GWNB2xrbHcRgzF7YEV7DrlGDUMbWV XoyWs7b7sWElsfosDyQHqkelhYiOQ2k= -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:21 2025 by rpki-client