$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/932a5da3-c7fb-36ef-b054-08223c0f507b.roa File: 932a5da3-c7fb-36ef-b054-08223c0f507b.roa (raw, json) Hash identifier: s9ByHatONvpjgZwP9yvEvmzI4dw48x5YFToDb0Xoeeg= Subject key identifier: 5C:D0:F8:A5:CC:28:C9:6D:AA:1C:81:EB:6C:37:FA:FA:0D:45:D3:9A Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584AF95147814AD21010253F0F80 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/932a5da3-c7fb-36ef-b054-08223c0f507b.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 27602 IP address blocks: 198.145.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:47:81:4a:d2:10:10:25:3f:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=b86b5f6f-bb70-4abd-b60f-734f3ab6e3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c4:b9:6c:bf:7e:df:66:c7:47:b3:55:12:e3: 5d:14:e8:e4:f0:4c:97:3a:83:ca:e5:31:a2:64:03: 31:ed:fa:bd:24:01:ab:a0:db:d0:60:93:35:2c:74: 45:a9:d1:42:fd:bd:45:31:ab:ed:f3:3f:0c:1c:75: a4:f7:91:1e:43:b3:ac:79:ac:79:ee:53:aa:1e:1a: 7d:d1:41:2d:77:98:11:5c:3f:2c:19:aa:a8:63:15: 0c:6b:bf:ff:45:47:dd:c1:1b:23:7d:f2:52:b7:28: 65:66:95:64:36:df:ab:ac:5c:e0:5f:ea:45:8e:14: fd:cd:ee:d1:64:26:b5:2c:41:9b:9f:57:ed:9a:e4: 29:d3:22:f1:d0:13:c8:0a:54:52:77:64:5d:3d:5c: 62:28:ea:31:f2:ac:60:fe:f8:6b:22:52:2f:94:1c: 7a:f8:bc:a3:91:c3:0a:5c:9c:11:ed:e8:b2:36:87: 8f:bd:3c:59:6a:5b:da:9a:e7:db:9c:4d:24:83:42: 11:2a:23:f0:cd:49:62:d5:6f:4c:5b:37:97:52:69: f9:1f:a1:f9:a3:9d:c8:2b:c6:8a:57:24:5a:70:0c: 0c:bf:c2:46:13:ee:ac:65:8a:73:13:a2:d1:22:8d: 39:39:92:0d:2d:4d:e1:e2:be:96:f3:cd:9d:3c:d6: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D0:F8:A5:CC:28:C9:6D:AA:1C:81:EB:6C:37:FA:FA:0D:45:D3:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/932a5da3-c7fb-36ef-b054-08223c0f507b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:04:ba:b4:e2:2c:c8:9d:a2:26:8a:3e:c9:4c:70:7b:2b:58: eb:47:25:b0:0d:98:2f:ea:b7:6f:99:54:f4:5f:81:11:3f:c8: e3:18:cc:61:3e:82:be:f4:04:4e:73:43:c6:f2:42:b2:86:18: 63:22:70:e8:d1:fb:0b:c4:23:56:9d:f9:95:6d:6a:20:c4:bc: 57:fc:16:54:5f:6f:db:da:f5:4a:bc:19:2d:59:cc:de:cd:2d: b6:86:4c:04:26:ba:56:32:cf:b0:fd:f9:fc:8f:c9:4d:03:dc: ff:f1:14:6f:4b:d0:dc:c0:ee:1e:44:bc:6e:c4:a7:a6:5e:66: 87:d8:91:6e:e0:9b:ce:23:13:69:6d:0d:7e:28:e1:28:eb:fe: 26:c7:4c:5f:2a:5b:ea:71:07:2c:b5:8c:8e:53:78:9f:d9:eb: d1:c6:1b:be:68:d9:6c:02:6e:12:a6:f6:ed:0e:ff:7a:82:01: 97:f2:9c:46:48:d3:d9:66:26:d8:32:ed:46:5f:8e:c7:30:71: b3:5d:fb:99:7a:c0:32:77:50:0a:16:6c:6f:88:d4:73:b0:a1: 4f:72:cc:02:21:96:79:05:25:8a:8a:58:75:c9:12:58:03:64: 0b:c1:2b:6e:97:a0:6f:b4:6d:62:17:f2:72:29:c7:4a:4f:80: de:96:5d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUeBStIQECU/D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Yjg2YjVmNmYtYmI3MC00YWJkLWI2MGYtNzM0ZjNhYjZlM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsS5bL9+32bHR7NVEuNdFOjk8EyXOoPK5TGi ZAMx7fq9JAGroNvQYJM1LHRFqdFC/b1FMavt8z8MHHWk95EeQ7Oseax57lOqHhp9 0UEtd5gRXD8sGaqoYxUMa7//RUfdwRsjffJStyhlZpVkNt+rrFzgX+pFjhT9ze7R ZCa1LEGbn1ftmuQp0yLx0BPIClRSd2RdPVxiKOox8qxg/vhrIlIvlBx6+LyjkcMK XJwR7eiyNoePvTxZalvamufbnE0kg0IRKiPwzUli1W9MWzeXUmn5H6H5o53IK8aK VyRacAwMv8JGE+6sZYpzE6LRIo05OZINLU3h4r6W882dPNag6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzQ+KXMKMltqhyB62w3+voNRdOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOTMyYTVkYTMtYzdmYi0z NmVmLWIwNTQtMDgyMjNjMGY1MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYEurTiLMidoiaKPslMcHsrWOtHJbANmC/qt2+ZVPRfgRE/yOMYzGE+ gr70BE5zQ8byQrKGGGMicOjR+wvEI1ad+ZVtaiDEvFf8FlRfb9va9Uq8GS1ZzN7N LbaGTAQmulYyz7D9+fyPyU0D3P/xFG9L0NzA7h5EvG7Ep6ZeZofYkW7gm84jE2lt DX4o4Sjr/ibHTF8qW+pxByy1jI5TeJ/Z69HGG75o2WwCbhKm9u0O/3qCAZfynEZI 09lmJtgy7UZfjscwcbNd+5l6wDJ3UAoWbG+I1HOwoU9yzAIhlnkFJYqKWHXJElgD ZAvBK26XoG+0bWIX8nIpx0pPgN6WXRE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:34:44 2025 by rpki-client