$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa File: 0909e0b4-b777-341e-9a49-697f016e5a74.roa (raw, json) Hash identifier: o+Kt3pBx+Kett9fybYZdpyfs2oi0zI2uXBHlnn0rzVY= Subject key identifier: BB:CA:DB:C2:A3:8C:09:00:D0:13:87:B9:97:39:E5:D8:30:13:76:8C Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584B9E07A0BD6652CC25F0ED6FC0 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 36445 IP address blocks: 198.133.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a0:bd:66:52:cc:25:f0:ed:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=5a75de31-bc91-4957-9add-b04c29a31244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f1:f8:99:77:5d:c4:1c:9f:02:68:56:a5:0c: 50:68:3c:06:64:77:ee:ef:5e:00:0b:8b:32:89:8c: 97:c5:99:51:be:62:e8:b9:ce:2c:2e:2c:2b:86:ca: 7f:05:4a:23:53:c8:f2:95:ea:e9:af:67:9b:86:2b: 27:82:28:8d:dc:2d:b7:5a:9c:81:d7:61:e6:e0:99: ff:14:f4:e2:df:f7:78:f1:da:0a:47:1a:c7:f0:23: a1:9e:9b:b3:ea:d5:28:e3:6e:c3:d2:5d:7f:2e:63: 8c:e5:a5:73:e1:bc:1f:ea:95:52:e9:3e:3d:68:27: dc:65:e4:93:da:22:a2:b1:e9:8c:fb:00:be:66:bb: e8:06:bf:8c:e1:2a:2f:cd:95:a3:01:b7:f6:6b:a9: b9:ba:38:39:03:e1:8c:c7:ef:50:c0:ed:d2:25:23: 9e:ca:3c:ac:21:bc:f5:1f:55:ce:0e:ef:91:c3:10: 51:2f:56:88:87:35:33:7f:6b:e2:0b:f4:f5:da:4f: 91:eb:7f:26:9b:56:d7:56:86:3b:7b:1d:68:1a:8b: 73:fd:f4:67:0f:56:0e:7f:85:43:b5:b6:d0:f7:1d: 07:93:be:46:af:e6:ac:fc:9a:e9:76:24:0f:81:d1: 5a:e2:72:3d:29:b7:de:b6:0f:a8:5b:36:96:e9:bb: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:DB:C2:A3:8C:09:00:D0:13:87:B9:97:39:E5:D8:30:13:76:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/0909e0b4-b777-341e-9a49-697f016e5a74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 198.133.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:77:bb:31:86:27:17:fd:bd:45:fb:ed:4d:5d:19:1d:02:a1: 55:cf:7b:16:ee:7d:d1:91:b0:b5:66:6c:50:ed:33:00:38:d7: 96:bc:1b:56:d7:49:b5:22:7c:4f:1e:0b:b3:87:ce:99:62:1e: 84:d7:d5:8e:85:ed:21:87:a0:d9:31:9e:bb:de:28:14:71:b1: 78:c9:39:3d:0f:69:e5:7a:c2:0e:bb:5a:fa:9e:2f:da:40:db: fc:ca:12:43:bf:e5:15:6d:0a:68:9e:31:ad:81:b9:24:3f:89: 03:4f:9d:f3:0b:c5:05:43:19:b9:da:16:18:eb:26:fc:2a:43: 85:cd:1b:b5:2c:56:6f:1f:be:97:52:b3:0a:a2:1f:e8:bc:31: a6:c2:1c:67:cc:76:ea:73:1d:3e:a6:59:5f:0b:9e:54:0c:28: 4d:16:09:16:ff:74:54:1a:c6:84:78:90:ad:2d:46:c8:91:ea: dd:a2:e1:8f:f3:47:e5:64:da:87:d9:3a:e4:7c:ee:a9:e7:ad: 34:55:cf:f5:10:d2:8a:9d:8a:da:48:1c:1a:eb:28:c1:8e:8e: fc:ff:bc:ef:59:d9:20:da:7a:85:c1:6a:69:20:34:6c:70:b5: ab:94:93:12:82:a8:1f:4f:de:e1:73:13:48:7e:6c:34:ba:99: 6f:0b:59:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6C9ZlLMJfDtb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NWE3NWRlMzEtYmM5MS00OTU3LTlhZGQtYjA0YzI5YTMxMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfH4mXddxByfAmhWpQxQaDwGZHfu714AC4sy iYyXxZlRvmLouc4sLiwrhsp/BUojU8jylerpr2ebhisngiiN3C23WpyB12Hm4Jn/ FPTi3/d48doKRxrH8COhnpuz6tUo427D0l1/LmOM5aVz4bwf6pVS6T49aCfcZeST 2iKisemM+wC+ZrvoBr+M4SovzZWjAbf2a6m5ujg5A+GMx+9QwO3SJSOeyjysIbz1 H1XODu+RwxBRL1aIhzUzf2viC/T12k+R638mm1bXVoY7ex1oGotz/fRnD1YOf4VD tbbQ9x0Hk75Gr+as/JrpdiQPgdFa4nI9Kbfetg+oWzaW6bsQHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvK28KjjAkA0BOHuZc55dgwE3aMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMDkwOWUwYjQtYjc3Ny0z NDFlLTlhNDktNjk3ZjAxNmU1YTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMF3uzGGJxf9vUX77U1dGR0CoVXPexbufdGRsLVmbFDtMwA415a8G1bX SbUifE8eC7OHzpliHoTX1Y6F7SGHoNkxnrveKBRxsXjJOT0PaeV6wg67WvqeL9pA 2/zKEkO/5RVtCmieMa2BuSQ/iQNPnfMLxQVDGbnaFhjrJvwqQ4XNG7UsVm8fvpdS swqiH+i8MabCHGfMdupzHT6mWV8LnlQMKE0WCRb/dFQaxoR4kK0tRsiR6t2i4Y/z R+Vk2ofZOuR87qnnrTRVz/UQ0oqditpIHBrrKMGOjvz/vO9Z2SDaeoXBamkgNGxw tauUkxKCqB9P3uFzE0h+bDS6mW8LWVQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:09 2025 by rpki-client