$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4debc5bf-2b62-36fa-a8ab-b5b9deca5ac3.roa File: 4debc5bf-2b62-36fa-a8ab-b5b9deca5ac3.roa (raw, json) Hash identifier: gXSqEibFDPBmuNATvAaCsua0A3sj3iO0ZQlI6Inwc40= Subject key identifier: 7A:87:7D:2B:B7:1D:9E:93:5F:D6:44:5D:68:A7:53:54:6C:BA:0C:A1 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B2FC18C3E469CC14A256FD560 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4debc5bf-2b62-36fa-a8ab-b5b9deca5ac3.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 198.145.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8c:3e:46:9c:c1:4a:25:6f:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=bcff281c-8ec0-4480-80c5-a5c7d71bd315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:a5:e0:b6:00:10:94:71:bd:99:b9:79:f7: ca:bf:fb:6d:cd:de:90:24:78:aa:23:95:79:cd:73: 7e:9a:f5:bb:a7:10:3f:43:55:96:e2:c1:44:bc:9f: 46:b4:ab:32:29:71:94:ec:0a:15:38:9b:3b:8b:d8: ab:8d:f9:35:a2:8d:89:67:da:c4:1f:95:dc:84:b5: 33:d9:f1:47:14:e7:4f:23:38:ac:d4:25:1d:5e:c4: 0a:2a:7c:a2:c2:57:67:f3:35:7c:22:ef:da:85:8e: 6f:17:cd:f9:7a:2c:1d:c5:db:2d:6b:e8:f6:b7:ae: 4b:86:90:33:44:dc:fe:00:2e:8a:de:12:e5:79:ff: dd:fe:bc:91:c1:72:b9:3f:5f:1c:69:29:7a:06:37: 0e:11:96:25:20:23:44:20:49:30:22:05:ed:59:70: 81:ef:b1:f2:17:80:7e:b7:b9:9f:6e:1c:59:83:33: fd:87:ee:70:fd:74:bb:c8:ce:81:63:5b:35:b1:0e: b5:d5:a4:f6:c2:67:48:82:83:0f:79:22:60:f6:6f: 3f:f2:57:64:1e:f9:29:93:30:e7:f8:91:f7:5f:bd: 93:f6:a9:c8:b3:fc:fd:d7:29:89:73:21:2d:ea:79: bd:80:ce:37:2e:1d:a7:7f:3d:95:55:7c:31:06:59: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:87:7D:2B:B7:1D:9E:93:5F:D6:44:5D:68:A7:53:54:6C:BA:0C:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4debc5bf-2b62-36fa-a8ab-b5b9deca5ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2c:36:ae:c7:f8:2b:ac:2e:e3:3b:97:96:54:16:5c:82:e6: 8c:dd:b7:a4:42:00:b8:aa:81:7b:2f:64:d3:18:d5:e2:77:c2: 08:27:84:58:71:a6:11:28:ed:4c:f8:43:fa:95:c5:54:41:e8: 8b:0c:25:72:4a:00:62:7a:00:f5:a7:7a:d5:82:92:88:84:42: 80:51:56:7c:41:5e:f0:a0:c2:73:fd:12:e8:78:b1:ad:de:05: 67:e7:82:e4:fd:81:b9:c7:56:ed:fb:4a:5a:0d:60:42:e7:bb: 25:79:dc:65:7a:90:73:86:b1:65:e2:60:f0:37:4e:85:e7:d2: 55:ca:5d:76:ed:ad:67:ab:3d:80:04:32:61:a4:87:89:d1:1b: 5b:bd:ef:14:b2:94:6e:7e:7b:1e:9c:1e:b2:9b:18:bc:5f:06: 7f:4e:bd:ca:8e:56:75:c9:c4:0f:39:0e:81:e2:6b:72:75:00: 1a:83:a0:d7:a3:6b:1f:dd:7d:bc:9b:5d:03:15:c3:0e:48:0d: 09:cb:7b:73:89:55:18:46:d5:a6:ac:33:e5:c6:27:fc:89:ec: 03:2d:be:3c:6e:c5:cb:ca:8a:12:af:eb:96:e7:ed:ba:e4:50: c1:a8:01:00:e4:44:52:88:3d:dd:4f:95:18:5f:dd:07:5a:84: 75:31:05:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYw+RpzBSiVv1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YmNmZjI4MWMtOGVjMC00NDgwLTgwYzUtYTVjN2Q3MWJkMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj2l4LYAEJRxvZm5effKv/ttzd6QJHiqI5V5 zXN+mvW7pxA/Q1WW4sFEvJ9GtKsyKXGU7AoVOJs7i9irjfk1oo2JZ9rEH5XchLUz 2fFHFOdPIzis1CUdXsQKKnyiwldn8zV8Iu/ahY5vF835eiwdxdsta+j2t65LhpAz RNz+AC6K3hLlef/d/ryRwXK5P18caSl6BjcOEZYlICNEIEkwIgXtWXCB77HyF4B+ t7mfbhxZgzP9h+5w/XS7yM6BY1s1sQ611aT2wmdIgoMPeSJg9m8/8ldkHvkpkzDn +JH3X72T9qnIs/z91ymJcyEt6nm9gM43Lh2nfz2VVXwxBllxBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqHfSu3HZ6TX9ZEXWinU1RsugyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNGRlYmM1YmYtMmI2Mi0z NmZhLWE4YWItYjViOWRlY2E1YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIsNq7H+CusLuM7l5ZUFlyC5ozdt6RCALiqgXsvZNMY1eJ3wggnhFhx phEo7Uz4Q/qVxVRB6IsMJXJKAGJ6APWnetWCkoiEQoBRVnxBXvCgwnP9Euh4sa3e BWfnguT9gbnHVu37SloNYELnuyV53GV6kHOGsWXiYPA3ToXn0lXKXXbtrWerPYAE MmGkh4nRG1u97xSylG5+ex6cHrKbGLxfBn9OvcqOVnXJxA85DoHia3J1ABqDoNej ax/dfbybXQMVww5IDQnLe3OJVRhG1aasM+XGJ/yJ7AMtvjxuxcvKihKv65bn7brk UMGoAQDkRFKIPd1PlRhf3QdahHUxBWc= -----END CERTIFICATE-----Generated at Wed Sep 17 07:54:48 2025 by rpki-client