$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa File: 46e9f517-eb87-34a5-9509-23f3b4683a98.roa (raw, json) Hash identifier: iO+ujyqANW7JvgAFlHmahXPvpp4DypaqE/nfl5OEJrw= Subject key identifier: 2A:95:8A:7B:59:D3:D5:71:DB:32:25:F8:66:89:07:EC:6C:E1:BC:C0 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584F119CFA5EF76512A0C58B3880 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 32780 IP address blocks: 198.145.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fa:5e:f7:65:12:a0:c5:8b:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=92c3ea1d-cb2e-4363-b7da-d3d5d6732d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:a3:20:48:e0:23:d5:8b:e0:93:c4:57:72: 42:c6:63:f4:77:73:9e:9a:8f:69:f9:38:73:3c:6c: b1:af:c5:50:bf:61:ba:27:ee:44:46:eb:f1:b0:5e: f8:63:4d:b5:b0:9f:40:d1:6b:b1:32:66:c5:29:5c: a8:d1:44:7d:fc:72:c9:3b:c2:2c:73:37:9c:af:2f: f5:8f:82:c3:8e:9b:c1:f9:b1:a9:43:c4:9b:a6:a2: f3:02:0f:55:a4:a5:70:6f:ca:49:9c:79:75:3f:f4: 81:95:c9:60:61:93:9b:7f:97:a6:67:ff:51:56:07: ec:75:dc:f6:0b:ca:c6:47:28:8a:46:bd:fc:33:60: 20:be:a0:e4:1c:d0:df:05:ec:6f:1a:d9:e5:0b:5a: ff:39:cc:7b:48:74:53:80:d1:42:dc:e4:97:72:2d: 0f:0d:45:5c:6e:77:2a:61:0d:7b:4c:c4:33:4e:4d: 41:4d:3f:a3:b0:a8:4e:b6:5f:18:0e:33:ae:64:8a: 03:3d:25:ab:37:92:57:79:5e:64:36:cc:56:fc:75: 6e:68:28:a4:d7:56:33:bc:50:4c:82:37:54:38:c8: ae:d0:b3:d8:1b:38:a4:3d:eb:9d:cd:46:be:c3:4b: a0:42:67:82:71:32:8e:cc:e0:b5:9b:d9:58:8e:df: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:95:8A:7B:59:D3:D5:71:DB:32:25:F8:66:89:07:EC:6C:E1:BC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:59:2c:c8:02:35:c5:7d:c0:ac:df:31:d8:32:e7:4c:ec:46: bc:73:4b:5a:49:e8:ea:ef:c9:50:90:08:31:e9:0a:fc:0f:79: 51:f4:f8:37:a3:cd:a5:2b:87:aa:e1:d2:e8:23:a3:25:bb:1c: 5b:c3:da:31:5d:a7:ad:b6:ff:c0:41:b9:08:42:9c:21:e6:5f: ee:35:d1:6a:85:2f:7d:37:8b:07:70:8d:bb:03:42:20:f7:f2: d4:6c:be:ac:1f:8b:37:be:42:01:2b:77:1a:5d:03:82:e9:04: 4b:11:67:7d:70:6c:ac:14:f6:97:ac:e7:ff:ef:25:19:1f:4b: 7d:ef:23:cf:88:bc:96:a0:67:28:69:95:db:3c:2c:3e:4a:b5: 2d:8c:67:6b:af:4a:f5:db:73:c1:c7:65:57:92:12:ed:eb:76: 52:26:b8:00:49:bb:67:16:d7:70:72:b3:59:93:98:c1:d8:c1: 96:8e:a8:2d:83:e9:af:39:06:e8:4b:6c:6e:42:82:68:59:f3: 1c:3c:64:07:eb:06:89:32:c5:68:8c:3c:c2:50:71:78:75:61: 4e:d6:2c:18:be:56:20:13:ee:b4:0d:15:20:bc:cb:76:37:e9: 80:4a:94:c5:7a:1d:c4:8b:e0:4f:1d:15:63:01:82:b7:d7:07: 7e:c0:77:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPpe92USoMWLOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OTJjM2VhMWQtY2IyZS00MzYzLWI3ZGEtZDNkNWQ2NzMyZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo86jIEjgI9WL4JPEV3JCxmP0d3Oemo9p+Thz PGyxr8VQv2G6J+5ERuvxsF74Y021sJ9A0WuxMmbFKVyo0UR9/HLJO8Isczecry/1 j4LDjpvB+bGpQ8SbpqLzAg9VpKVwb8pJnHl1P/SBlclgYZObf5emZ/9RVgfsddz2 C8rGRyiKRr38M2AgvqDkHNDfBexvGtnlC1r/Ocx7SHRTgNFC3OSXci0PDUVcbncq YQ17TMQzTk1BTT+jsKhOtl8YDjOuZIoDPSWrN5JXeV5kNsxW/HVuaCik11YzvFBM gjdUOMiu0LPYGzikPeudzUa+w0ugQmeCcTKOzOC1m9lYjt/bHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqVintZ09Vx2zIl+GaJB+xs4bzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDZlOWY1MTctZWI4Ny0z NGE1LTk1MDktMjNmM2I0NjgzYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhZLMgCNcV9wKzfMdgy50zsRrxzS1pJ6OrvyVCQCDHpCvwPeVH0+Dej zaUrh6rh0ugjoyW7HFvD2jFdp622/8BBuQhCnCHmX+410WqFL303iwdwjbsDQiD3 8tRsvqwfize+QgErdxpdA4LpBEsRZ31wbKwU9pes5//vJRkfS33vI8+IvJagZyhp lds8LD5KtS2MZ2uvSvXbc8HHZVeSEu3rdlImuABJu2cW13Bys1mTmMHYwZaOqC2D 6a85BuhLbG5CgmhZ8xw8ZAfrBokyxWiMPMJQcXh1YU7WLBi+ViAT7rQNFSC8y3Y3 6YBKlMV6HcSL4E8dFWMBgrfXB37Ad/M= -----END CERTIFICATE-----Generated at Sat Sep 26 11:49:46 2026 by rpki-client