$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/12a15b08-53ce-3f90-bcd5-f44d48dad726.roa File: 12a15b08-53ce-3f90-bcd5-f44d48dad726.roa (raw, json) Hash identifier: w1lcsnYK4JFi4atiMIJp1fuPH7/r9mYj/NKSexlmUOI= Subject key identifier: 35:8C:0B:43:03:94:9C:CD:A6:C7:08:21:79:D5:29:EA:24:7D:A6:80 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B328C31942837C90699051176 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/12a15b08-53ce-3f90-bcd5-f44d48dad726.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 6079 IP address blocks: 198.145.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:31:94:28:37:c9:06:99:05:11:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=3c568a49-c011-4219-b266-3c1245c3a83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:7e:83:19:91:4e:6d:b9:51:44:65:68:2a: ba:ee:7b:80:70:28:70:8f:a2:a0:60:07:c1:f3:4b: dc:ac:fe:08:94:89:a1:5c:11:ff:b8:a8:25:c7:85: 3c:e0:25:ec:cb:05:46:f9:f0:b4:71:2f:cd:79:64: ae:00:a0:ac:5f:cb:bf:fa:53:eb:d9:e9:f6:85:13: 8a:b3:4e:24:7a:1a:c9:30:4e:0e:48:3b:07:db:d2: 6f:97:cc:ff:e1:50:d5:ec:ba:2d:bc:1c:aa:99:5b: 9d:ab:5e:11:32:13:c4:f0:fb:79:96:09:46:ec:63: ef:96:06:48:5b:1f:75:4b:60:2a:4c:35:26:ad:f9: 6f:bd:39:6d:c9:fb:d5:d6:18:1d:20:f0:0f:28:68: a1:61:5f:74:86:5c:b9:e2:b1:bf:3a:b0:50:d7:ab: 45:e6:a4:7f:00:9b:73:c2:f8:53:0c:ed:5d:e0:84: d0:d9:8c:c1:9a:3d:16:e0:cb:59:07:4e:71:f8:c5: bd:d0:c3:7b:d7:74:a3:35:05:fb:33:31:02:02:fc: 5a:e0:c5:d8:3e:10:04:39:70:c7:57:72:fa:da:72: c9:c2:fc:59:5c:b0:ce:7a:28:12:46:24:eb:2e:dd: 3a:27:60:d5:8a:b7:10:51:91:54:20:da:b2:7e:01: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8C:0B:43:03:94:9C:CD:A6:C7:08:21:79:D5:29:EA:24:7D:A6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/12a15b08-53ce-3f90-bcd5-f44d48dad726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:22:ea:ef:05:b5:bb:9e:e0:a6:f6:4b:a8:94:2f:a1:08:49: f6:48:53:ab:ed:8a:1b:f2:a3:e9:ec:ed:d7:27:7b:a6:b7:40: 41:af:38:84:20:b4:ef:64:ad:3c:5d:45:79:6a:34:2e:30:e4: 3c:8a:1e:66:94:28:7a:9a:7f:83:98:93:60:63:e7:94:fc:8f: 99:03:79:e7:5f:58:f3:86:e8:c3:e5:de:c3:91:8d:80:e6:a4: 37:16:8e:d6:9a:c2:88:8a:b3:a2:0e:d5:ce:51:66:c0:e5:55: d2:8d:13:d9:dc:6e:37:05:09:8a:2f:32:1a:71:40:42:f2:04: 1e:c4:9a:78:1d:b8:b4:21:37:61:a7:4c:93:ae:c9:14:56:ee: 7a:f8:70:61:eb:ff:d6:19:41:3a:a8:99:e0:df:fd:82:c8:9c: 8f:c5:c7:fc:c1:d9:a0:13:97:c4:0b:03:f4:02:d3:94:86:86: 7a:99:24:0d:8f:28:b7:af:07:5b:ad:90:c5:a5:9f:f3:03:1d: ce:1c:bd:fc:db:a2:a4:59:f9:e0:b0:74:72:93:81:22:2d:4e: 97:a3:9b:ea:fe:6c:b2:c6:30:a2:64:a4:4a:b7:55:ef:24:ed: de:e0:0f:af:15:5c:53:64:cd:30:93:66:60:6c:a9:8a:fa:2e: 44:b4:2d:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDGUKDfJBpkFEXYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk M2M1NjhhNDktYzAxMS00MjE5LWIyNjYtM2MxMjQ1YzNhODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS9+gxmRTm25UURlaCq67nuAcChwj6KgYAfB 80vcrP4IlImhXBH/uKglx4U84CXsywVG+fC0cS/NeWSuAKCsX8u/+lPr2en2hROK s04kehrJME4OSDsH29Jvl8z/4VDV7LotvByqmVudq14RMhPE8Pt5lglG7GPvlgZI Wx91S2AqTDUmrflvvTltyfvV1hgdIPAPKGihYV90hly54rG/OrBQ16tF5qR/AJtz wvhTDO1d4ITQ2YzBmj0W4MtZB05x+MW90MN713SjNQX7MzECAvxa4MXYPhAEOXDH V3L62nLJwvxZXLDOeigSRiTrLt06J2DVircQUZFUINqyfgEiMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWMC0MDlJzNpscIIXnVKeokfaaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMTJhMTViMDgtNTNjZS0z ZjkwLWJjZDUtZjQ0ZDQ4ZGFkNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpFmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoi6u8Ftbue4Kb2S6iUL6EISfZIU6vtihvyo+ns7dcne6a3QEGvOIQg tO9krTxdRXlqNC4w5DyKHmaUKHqaf4OYk2Bj55T8j5kDeedfWPOG6MPl3sORjYDm pDcWjtaawoiKs6IO1c5RZsDlVdKNE9ncbjcFCYovMhpxQELyBB7EmngduLQhN2Gn TJOuyRRW7nr4cGHr/9YZQTqomeDf/YLInI/Fx/zB2aATl8QLA/QC05SGhnqZJA2P KLevB1utkMWln/MDHc4cvfzboqRZ+eCwdHKTgSItTpejm+r+bLLGMKJkpEq3Ve8k 7d7gD68VXFNkzTCTZmBsqYr6LkS0LZQ= -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:20 2025 by rpki-client