$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7ac98ce8-7e32-3df0-a790-4b4691072d96.roa File: 7ac98ce8-7e32-3df0-a790-4b4691072d96.roa (raw, json) Hash identifier: ZGOYOrxBZjEkRAIkKvDziU93VDjYkTJNU55aFBXr3WI= Subject key identifier: DD:58:26:4F:14:45:13:47:81:CB:85:CE:78:D0:74:D5:D7:C4:D8:2D Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B047C1852487B33979EBD4300 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7ac98ce8-7e32-3df0-a790-4b4691072d96.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 7018 IP address blocks: 198.145.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:18:52:48:7b:33:97:9e:bd:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=a18096ed-434b-423d-80cd-fd012a1edc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:c9:08:1f:16:e4:7c:2e:d4:8d:d0:c9:90: a8:78:65:fd:30:36:0d:1f:9e:b5:ad:ea:5b:3c:11: b4:33:9b:9f:d5:39:64:10:dc:e5:b9:bc:dd:7c:14: 89:1a:7c:ca:3a:de:f9:80:6b:8d:5b:58:f0:b9:d6: 8c:f5:a2:ef:42:8c:81:2d:d8:3b:82:9f:fd:3d:bb: b4:47:2f:18:b9:30:c5:8f:a1:a4:68:75:fa:22:7c: 85:3b:86:a8:44:0b:37:8a:9c:1e:f3:e4:2f:38:57: 67:0d:e4:e5:c0:52:c1:66:c5:c3:27:f3:da:03:da: 05:fd:f0:f2:90:60:1e:4c:25:7d:b1:39:88:79:c5: 7e:af:af:13:86:ec:0f:99:5a:93:dd:ad:4a:9a:a0: 12:ce:13:bb:cc:d7:85:63:18:7b:6b:b6:38:91:02: b7:69:01:46:b4:29:99:9b:11:56:d6:a3:a3:84:b9: 05:7c:e1:c6:91:d2:cf:9c:ca:f6:37:73:a0:63:93: 60:5f:04:e3:08:bf:e5:49:36:64:b1:3b:f2:15:9f: 62:f4:33:76:64:24:a8:73:7e:91:fe:d3:4a:38:03: 00:00:60:58:9d:81:3d:22:66:df:df:92:19:68:fb: 4f:9d:2f:ed:17:a4:ba:9c:c4:8e:37:d4:6c:90:41: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:58:26:4F:14:45:13:47:81:CB:85:CE:78:D0:74:D5:D7:C4:D8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7ac98ce8-7e32-3df0-a790-4b4691072d96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d0:cd:68:5c:30:96:26:bb:f2:68:b5:f8:9b:fc:f5:a8:79: e9:d2:19:0d:eb:40:44:6c:a2:26:4c:9b:e0:02:d1:af:17:aa: fa:2e:84:ab:c5:8b:51:ee:5e:34:74:bd:f3:5f:71:3a:d9:df: 0d:2d:3e:ff:bb:bd:58:a4:e5:4d:60:88:35:bc:8e:5d:08:b9: d6:02:a2:62:e4:1e:3c:a4:a2:32:e1:d4:f3:40:e8:bb:b3:e5: f0:a7:da:22:c2:60:b6:e3:6a:b7:54:5e:14:09:4f:18:87:da: 2f:7b:fa:24:f0:aa:f7:ca:43:64:6d:8a:b4:a2:b1:72:57:ee: 90:11:1f:2f:1f:ec:d1:e8:44:62:76:34:76:b1:33:23:ed:50: 34:e1:10:92:64:7b:0d:f5:32:a9:fa:c7:73:51:36:5b:05:3e: f8:2b:3a:57:97:43:a0:5c:c7:90:9a:54:e3:4b:de:d5:5d:a0: 02:39:fa:ad:58:62:4c:d2:01:ee:31:93:46:72:d1:3f:47:43: a3:e9:54:93:df:25:b4:f3:b1:88:20:a0:d3:55:b3:86:16:77: 72:2d:d5:c5:aa:6a:7b:e2:53:cb:5d:91:be:23:12:2f:a9:79: f9:32:a1:f0:53:19:bb:7e:0b:f1:b1:7f:ea:99:01:83:4a:8e: fe:6a:11:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBhSSHszl569QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTE4MDk2ZWQtNDM0Yi00MjNkLTgwY2QtZmQwMTJhMWVkYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdnJCB8W5Hwu1I3QyZCoeGX9MDYNH561repb PBG0M5uf1TlkENzlubzdfBSJGnzKOt75gGuNW1jwudaM9aLvQoyBLdg7gp/9Pbu0 Ry8YuTDFj6GkaHX6InyFO4aoRAs3ipwe8+QvOFdnDeTlwFLBZsXDJ/PaA9oF/fDy kGAeTCV9sTmIecV+r68ThuwPmVqT3a1KmqASzhO7zNeFYxh7a7Y4kQK3aQFGtCmZ mxFW1qOjhLkFfOHGkdLPnMr2N3OgY5NgXwTjCL/lSTZksTvyFZ9i9DN2ZCSoc36R /tNKOAMAAGBYnYE9Imbf35IZaPtPnS/tF6S6nMSON9RskEGDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1YJk8URRNHgcuFznjQdNXXxNgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvN2FjOThjZTgtN2UzMi0z ZGYwLWE3OTAtNGI0NjkxMDcyZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfQzWhcMJYmu/Jotfib/PWoeenSGQ3rQERsoiZMm+AC0a8XqvouhKvF i1HuXjR0vfNfcTrZ3w0tPv+7vVik5U1giDW8jl0IudYComLkHjykojLh1PNA6Luz 5fCn2iLCYLbjardUXhQJTxiH2i97+iTwqvfKQ2RtirSisXJX7pARHy8f7NHoRGJ2 NHaxMyPtUDThEJJkew31Mqn6x3NRNlsFPvgrOleXQ6Bcx5CaVONL3tVdoAI5+q1Y YkzSAe4xk0Zy0T9HQ6PpVJPfJbTzsYggoNNVs4YWd3It1cWqanviU8tdkb4jEi+p efkyofBTGbt+C/Gxf+qZAYNKjv5qESY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:02:08 2025 by rpki-client