$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa File: 5b09870e-a712-3eab-8443-890377b3a362.roa (raw, json) Hash identifier: 8/m5LoBWEvV4IAZMv4t1Ae6G38AGp1vayk2VkyNaMI0= Subject key identifier: 58:83:15:6F:E9:C5:60:A6:AE:14:BF:D7:D7:6A:45:87:EE:90:C2:8C Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B0E414B8005C68E631D1E1120 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 9009 IP address blocks: 198.145.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:4b:80:05:c6:8e:63:1d:1e:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=f85f7f10-eca7-4c5f-9317-4d57bd85c013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4d:1d:da:7a:d2:fc:24:7e:c7:5c:d0:56:0b: 40:98:7b:13:94:49:86:1f:03:81:39:4f:27:cb:77: 28:0b:f5:42:cd:40:59:3d:85:da:9b:48:7e:a3:24: 6a:e7:1e:71:d4:cb:ad:d2:d3:ee:36:80:18:51:8d: 0b:40:f6:b5:86:c9:dc:36:60:91:6e:02:74:96:e0: dc:1b:7c:03:be:ae:b2:6e:07:22:28:c4:8d:71:07: cf:40:12:08:9c:4f:fe:5e:bc:7e:80:b9:ab:28:0e: 58:c2:72:66:dd:e3:97:3c:cc:f4:57:b2:f9:88:d7: f0:ff:a3:3d:74:83:3a:96:98:9d:22:8b:5e:67:6c: f1:12:04:ba:6d:fc:42:58:43:82:7a:6c:9a:18:d2: 8b:cd:76:94:9e:65:13:af:53:ec:02:48:f6:bd:2b: 7f:61:67:fe:8c:c1:7c:d8:48:17:a7:e3:39:1f:ba: a4:93:59:3d:b7:71:cd:e5:e5:73:90:ab:1d:8a:30: 02:90:dd:dd:4a:d3:cb:c9:43:f7:3d:b9:9c:79:7a: 6c:15:95:70:da:5b:53:d8:cd:b9:5b:bf:3d:c0:c6: 8f:2f:55:15:7a:87:59:01:bd:ec:99:22:89:4f:bf: 10:c9:e5:b5:d6:b2:fe:d9:4c:fa:23:5a:15:6f:f8: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:83:15:6F:E9:C5:60:A6:AE:14:BF:D7:D7:6A:45:87:EE:90:C2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ac:96:77:ea:06:e0:7f:82:bb:c5:3b:47:90:02:41:05:5c: 6c:86:bd:a6:6b:13:37:3a:97:bb:f5:a2:cc:ac:c1:19:61:d8: 55:81:78:2c:4c:49:5b:40:06:77:1c:b2:18:a5:fd:d5:4d:9a: d8:77:16:bf:d4:68:fe:19:ac:09:95:ca:c6:e0:1e:7f:91:0e: 36:76:a3:a4:bf:95:ad:ab:41:b8:c3:d4:59:d0:f2:d4:3d:b7: 06:b4:82:8e:93:eb:97:cd:20:98:d5:81:22:d2:7f:8a:e4:b5: 91:72:95:a6:89:97:59:a9:e0:34:fa:95:f1:86:85:64:c1:4b: ff:61:66:87:e5:4a:a8:b1:87:e8:c2:d0:9b:b3:ba:28:13:b8: 53:fe:07:5e:0e:51:e3:56:af:89:6a:ac:39:55:01:d6:e7:b4: e8:39:d2:d8:1c:04:95:ed:49:a7:e6:78:d7:5b:18:3a:79:67: 4e:9f:d7:11:0c:c0:ac:1d:a2:da:6c:76:f3:c1:be:ff:30:98: fe:fd:dc:9b:7e:4e:ab:a1:44:42:43:2f:82:40:a7:08:a5:12: 5e:3c:11:d2:28:7b:eb:53:70:16:90:4c:3c:4a:78:6a:36:f4: a3:1d:bc:99:82:29:65:8d:bf:4c:c5:44:4a:1c:de:87:c6:71: fe:47:09:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQUuABcaOYx0eESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk Zjg1ZjdmMTAtZWNhNy00YzVmLTkzMTctNGQ1N2JkODVjMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk0d2nrS/CR+x1zQVgtAmHsTlEmGHwOBOU8n y3coC/VCzUBZPYXam0h+oyRq5x5x1Mut0tPuNoAYUY0LQPa1hsncNmCRbgJ0luDc G3wDvq6ybgciKMSNcQfPQBIInE/+Xrx+gLmrKA5YwnJm3eOXPMz0V7L5iNfw/6M9 dIM6lpidIoteZ2zxEgS6bfxCWEOCemyaGNKLzXaUnmUTr1PsAkj2vSt/YWf+jMF8 2EgXp+M5H7qkk1k9t3HN5eVzkKsdijACkN3dStPLyUP3PbmceXpsFZVw2ltT2M25 W789wMaPL1UVeodZAb3smSKJT78QyeW11rL+2Uz6I1oVb/g+lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiDFW/pxWCmrhS/19dqRYfukMKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNWIwOTg3MGUtYTcxMi0z ZWFiLTg0NDMtODkwMzc3YjNhMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2slnfqBuB/grvFO0eQAkEFXGyGvaZrEzc6l7v1osyswRlh2FWBeCxM SVtABnccshil/dVNmth3Fr/UaP4ZrAmVysbgHn+RDjZ2o6S/la2rQbjD1FnQ8tQ9 twa0go6T65fNIJjVgSLSf4rktZFylaaJl1mp4DT6lfGGhWTBS/9hZoflSqixh+jC 0JuzuigTuFP+B14OUeNWr4lqrDlVAdbntOg50tgcBJXtSafmeNdbGDp5Z06f1xEM wKwdotpsdvPBvv8wmP793Jt+TquhREJDL4JApwilEl48EdIoe+tTcBaQTDxKeGo2 9KMdvJmCKWWNv0zFREoc3ofGcf5HCQc= -----END CERTIFICATE-----Generated at Fri Sep 5 02:35:12 2025 by rpki-client