$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa File: 2907bd3e-7be7-3179-abfd-3af4b6724521.roa (raw, json) Hash identifier: c9jjQU/PQwP2Hr51+4F6Nsplyj1S32guhWcA1V4BSpI= Subject key identifier: B6:51:EB:D7:EB:60:3B:97:32:FC:EC:26:8B:A7:21:3A:C4:80:68:C4 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584AF52129F6DDDA93FB67572A70 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 262287 IP address blocks: 198.145.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:29:f6:dd:da:93:fb:67:57:2a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=8a264c6a-42c4-45f5-8a49-ef3346fda251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:cc:d7:d8:3a:c0:25:06:c5:a8:47:1a:08: e9:6a:8a:b9:31:f7:0f:dc:7d:ef:57:97:65:e2:3f: 7e:c4:21:1f:f6:42:9b:bb:95:34:d4:8e:a6:62:d8: 5a:91:b4:cf:a6:ae:08:c2:45:38:45:a0:b0:2e:e3: e0:ca:bd:e0:1e:e5:d8:be:60:c0:73:d1:b2:29:8b: c8:a0:2b:96:f0:e1:42:d4:65:0c:40:a1:50:93:a5: b0:3d:45:0a:bd:dd:b4:25:8d:1c:8c:7c:80:f7:7f: 0e:30:bc:ef:65:d4:3e:f3:44:22:55:f3:a1:72:89: 0d:55:20:ef:f0:de:61:1d:9f:b4:60:5c:87:98:c9: f1:af:d7:52:91:bf:73:d2:a9:b0:1a:81:17:d7:ce: 78:7e:3b:d2:2b:ba:d9:6f:60:a4:a4:5a:95:ee:f4: 8b:cc:2c:f8:dd:da:25:af:bd:ed:bb:91:b4:2c:ad: 36:eb:d2:3b:0a:3d:e4:81:9f:b3:74:36:9c:d0:65: 6e:66:17:f5:ea:d5:eb:95:4f:e8:3d:2f:a9:93:cc: 90:ae:4a:e6:e0:28:89:a8:d6:da:4b:d7:94:46:9c: d3:aa:9c:61:04:4a:26:83:cc:c7:4b:bc:5b:cb:cc: 34:06:39:8f:85:e3:42:f6:10:70:98:e8:16:fd:1d: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:51:EB:D7:EB:60:3B:97:32:FC:EC:26:8B:A7:21:3A:C4:80:68:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2907bd3e-7be7-3179-abfd-3af4b6724521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8b:ae:06:ed:c3:c2:eb:37:57:d6:94:db:c6:f6:fc:9e:ea: ae:73:3d:07:5b:0a:63:63:0d:de:89:45:10:de:73:d8:e4:f4: d6:af:97:a9:50:d4:f3:e3:35:7e:25:a2:ec:65:2e:78:59:dc: 2e:bb:01:fe:1b:04:fb:0f:2c:70:93:d3:93:42:10:85:b6:8b: d5:5f:96:15:c1:c4:09:4d:4c:1b:91:81:bc:ae:8e:34:4f:ec: 33:9f:44:3a:db:50:4b:da:df:c7:11:7e:81:72:0a:97:ee:57: 9f:2b:94:5e:6a:0a:f9:e6:a6:7a:3e:48:2d:9c:05:a7:53:ab: 9e:4c:1f:7b:51:3e:ae:69:a6:27:1b:78:c1:5a:6e:b3:a6:2f: d1:25:2f:74:54:c2:eb:41:59:4e:bf:f9:7f:8a:00:3e:2e:b8: a1:3d:74:45:b5:3b:00:0a:7f:fc:41:60:4c:b8:bb:6c:28:2f: 05:43:a7:30:a3:29:b8:ca:95:24:82:b5:d1:d4:2d:33:9a:d4: 9a:82:5c:10:a8:9f:ed:4c:98:0e:15:68:d6:4b:2f:52:c4:8e: 26:6f:ea:d5:15:6c:bf:20:b4:aa:66:54:58:df:fb:05:80:ba: 08:0e:3f:b8:24:f3:da:2c:d4:bf:48:47:29:25:00:08:91:4d: 00:b9:4a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISn23dqT+2dXKnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGEyNjRjNmEtNDJjNC00NWY1LThhNDktZWYzMzQ2ZmRhMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dXM19g6wCUGxahHGgjpaoq5MfcP3H3vV5dl 4j9+xCEf9kKbu5U01I6mYthakbTPpq4IwkU4RaCwLuPgyr3gHuXYvmDAc9GyKYvI oCuW8OFC1GUMQKFQk6WwPUUKvd20JY0cjHyA938OMLzvZdQ+80QiVfOhcokNVSDv 8N5hHZ+0YFyHmMnxr9dSkb9z0qmwGoEX1854fjvSK7rZb2CkpFqV7vSLzCz43dol r73tu5G0LK0269I7Cj3kgZ+zdDac0GVuZhf16tXrlU/oPS+pk8yQrkrm4CiJqNba S9eURpzTqpxhBEomg8zHS7xby8w0BjmPheNC9hBwmOgW/R1UEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZR69frYDuXMvzsJounITrEgGjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMjkwN2JkM2UtN2JlNy0z MTc5LWFiZmQtM2FmNGI2NzI0NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaLrgbtw8LrN1fWlNvG9vye6q5zPQdbCmNjDd6JRRDec9jk9Navl6lQ 1PPjNX4louxlLnhZ3C67Af4bBPsPLHCT05NCEIW2i9VflhXBxAlNTBuRgbyujjRP 7DOfRDrbUEva38cRfoFyCpfuV58rlF5qCvnmpno+SC2cBadTq55MH3tRPq5ppicb eMFabrOmL9ElL3RUwutBWU6/+X+KAD4uuKE9dEW1OwAKf/xBYEy4u2woLwVDpzCj KbjKlSSCtdHULTOa1JqCXBCon+1MmA4VaNZLL1LEjiZv6tUVbL8gtKpmVFjf+wWA uggOP7gk89os1L9IRyklAAiRTQC5SiM= -----END CERTIFICATE-----Generated at Sat Oct 25 21:53:22 2025 by rpki-client