$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa File: 4958a300-389c-3447-9137-eb63e47ab7a1.roa (raw, json) Hash identifier: eHK+VnwHiQIOOztsKgGgyyA2wx3UDa+gBxFjHN16XHE= Subject key identifier: 7E:93:E9:97:CE:FC:24:26:ED:5E:F0:2E:76:89:D7:ED:DA:D6:14:88 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584AFEE69E342FFEECE7E22A3780 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 262287 IP address blocks: 198.145.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9e:34:2f:fe:ec:e7:e2:2a:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=6148947a-1df8-4afc-9c50-5572c29c5165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:3a:3b:66:02:55:fe:b7:4a:0f:f6:d7:13: bf:4b:19:f4:15:7d:75:7c:79:58:c9:ce:95:31:11: 36:70:fc:c0:22:8e:70:86:42:b9:59:75:05:56:c3: f3:02:00:f9:f6:7d:5a:36:26:6c:28:39:92:25:82: 6b:9a:36:57:98:02:fb:46:d0:ad:a2:99:af:8c:6b: 9b:b8:ed:32:34:01:37:27:15:2b:c2:97:df:8f:9d: c9:82:bd:99:dd:5d:ed:c1:f2:b3:f4:61:3f:4f:dd: ce:00:d7:c5:0e:f3:51:91:25:b4:31:1c:1f:63:42: 7c:47:64:9b:9a:19:df:18:33:20:24:d9:57:86:18: 59:5b:a8:ab:7f:46:a3:e3:23:51:71:dc:27:d5:cf: d0:39:f8:d3:cc:91:75:5f:82:66:d0:e0:03:94:52: 48:aa:1a:c3:af:8c:27:a2:77:4b:25:5c:c2:21:44: ed:e8:0f:28:72:d2:62:14:b7:58:43:85:69:39:94: 7b:9a:24:07:15:92:f7:ba:98:a6:59:66:21:59:59: 9e:43:67:d3:a9:a0:54:36:08:4b:4a:c2:40:f3:86: 98:3b:e1:2f:3a:67:dc:48:68:16:fd:e8:06:70:ee: 33:ee:74:77:46:e0:d8:86:e0:92:9d:fc:56:2e:66: c9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:E9:97:CE:FC:24:26:ED:5E:F0:2E:76:89:D7:ED:DA:D6:14:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4958a300-389c-3447-9137-eb63e47ab7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:94:a6:14:1e:53:6e:48:87:7f:34:f7:75:fc:ab:ad:e3:54: 1d:ba:42:28:9a:05:5c:0e:ba:f0:f4:d0:ce:df:ec:8f:cc:95: 40:2b:be:88:56:0b:d8:a3:45:06:e1:1a:36:ab:13:88:21:95: 1a:3e:24:18:93:2c:a4:9d:6f:59:c3:f4:18:f3:fb:de:01:6f: dc:86:e0:dd:1c:b9:b0:b7:0c:fe:2f:18:01:80:41:6c:75:b9: 95:b8:cb:46:7c:d0:aa:f1:cd:80:44:d2:83:b3:9d:da:5b:f9: 57:16:d1:bd:d4:c7:8e:e0:bd:42:22:8d:4f:bc:2c:48:df:7a: d3:69:1d:af:52:5d:f9:eb:9c:36:e1:3f:7c:ea:6c:1f:41:5f: 61:22:12:34:9b:6f:29:55:c3:ee:75:96:14:28:ca:7a:9e:68: 84:21:65:80:64:1f:8a:e1:ee:f7:20:8d:01:af:bd:7d:59:c4: 91:d7:2a:cf:74:1a:12:2c:b8:24:b2:79:af:7e:0f:4d:f6:5d: c7:ef:fd:ed:e5:30:8d:83:ce:1d:44:59:36:c7:6f:d7:f9:ec: a1:0e:17:78:c9:d0:9b:26:35:c9:64:6f:41:b8:2e:81:04:5d: 08:d7:5a:1f:b7:8a:19:d4:50:2d:ee:bd:3f:1c:13:57:2b:12: 45:15:e5:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5p40L/7s5+IqN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NjE0ODk0N2EtMWRmOC00YWZjLTljNTAtNTU3MmMyOWM1MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtew6O2YCVf63Sg/21xO/Sxn0FX11fHlYyc6V MRE2cPzAIo5whkK5WXUFVsPzAgD59n1aNiZsKDmSJYJrmjZXmAL7RtCtopmvjGub uO0yNAE3JxUrwpffj53Jgr2Z3V3twfKz9GE/T93OANfFDvNRkSW0MRwfY0J8R2Sb mhnfGDMgJNlXhhhZW6irf0aj4yNRcdwn1c/QOfjTzJF1X4Jm0OADlFJIqhrDr4wn ondLJVzCIUTt6A8octJiFLdYQ4VpOZR7miQHFZL3upimWWYhWVmeQ2fTqaBUNghL SsJA84aYO+EvOmfcSGgW/egGcO4z7nR3RuDYhuCSnfxWLmbJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6T6ZfO/CQm7V7wLnaJ1+3a1hSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDk1OGEzMDAtMzg5Yy0z NDQ3LTkxMzctZWI2M2U0N2FiN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeUphQeU25Ih38093X8q63jVB26QiiaBVwOuvD00M7f7I/MlUArvohW C9ijRQbhGjarE4ghlRo+JBiTLKSdb1nD9Bjz+94Bb9yG4N0cubC3DP4vGAGAQWx1 uZW4y0Z80KrxzYBE0oOzndpb+VcW0b3Ux47gvUIijU+8LEjfetNpHa9SXfnrnDbh P3zqbB9BX2EiEjSbbylVw+51lhQoynqeaIQhZYBkH4rh7vcgjQGvvX1ZxJHXKs90 GhIsuCSyea9+D032Xcfv/e3lMI2Dzh1EWTbHb9f57KEOF3jJ0JsmNclkb0G4LoEE XQjXWh+3ihnUUC3uvT8cE1crEkUV5bY= -----END CERTIFICATE-----Generated at Thu Sep 18 06:29:32 2025 by rpki-client