$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa File: 958bfc7c-2636-382b-b67f-ff905538c406.roa (raw, json) Hash identifier: bkJIJOlz2k9J2KBynCEmY06AfAYYXDEzrRoXE6JCEnQ= Subject key identifier: 7E:7B:2A:99:EB:CB:10:07:3A:1D:D3:19:35:62:4A:6E:F9:21:A9:AE Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B2FC18C29B1D9A795E01FFF40 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 198.145.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8c:29:b1:d9:a7:95:e0:1f:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=f2fa992d-b83e-44b7-a1e2-7071c0517285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:66:a5:fd:4b:cf:21:f6:7f:75:ab:2c:e9: 21:c9:93:1a:66:01:7c:0c:55:fb:2f:aa:bf:b7:62: fd:36:c7:4b:4f:a5:8c:38:68:4c:05:fa:31:5e:a7: bd:ac:23:18:db:00:6f:81:18:fb:bc:5f:f8:c3:f4: fd:6a:2c:ea:5b:8d:d8:96:05:f1:1d:92:c1:01:a2: 5e:4a:9c:15:ae:af:c9:14:4e:ac:62:91:7c:31:fe: d2:db:5b:54:89:a3:c3:eb:74:bf:e5:c8:9d:72:9a: fb:08:94:bc:85:d9:79:05:c3:66:07:af:a5:51:5c: 13:d9:02:d7:06:fc:36:21:6a:00:c5:c3:56:5a:d7: c3:06:45:f7:c6:b1:79:06:df:54:39:14:55:03:c5: c8:01:ce:89:d0:a9:16:85:2a:3e:d3:d2:66:8b:e9: 8b:82:3d:06:db:f7:94:86:ac:66:cf:29:18:ea:aa: 0c:d0:8c:cd:f4:b4:20:d7:da:f5:d1:ca:a9:a7:16: e8:4d:e1:9d:9a:25:f5:08:e9:80:f6:44:df:96:b4: d0:d0:46:07:f6:b0:46:4f:3a:2f:f2:d7:17:ae:22: 5c:da:05:75:73:b1:56:f5:4a:4f:99:3c:8a:38:4e: 36:f8:b3:e6:94:24:8f:2b:dc:29:c1:94:f3:55:3f: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7B:2A:99:EB:CB:10:07:3A:1D:D3:19:35:62:4A:6E:F9:21:A9:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:d9:d2:cf:46:10:df:a2:d6:cd:c8:dc:6a:1b:1e:75:ed:fb: 8d:93:24:82:15:86:2b:4c:81:f6:ed:fa:f9:70:ae:81:5d:08: 3e:3f:47:a4:dd:7f:eb:d8:a8:e4:60:85:24:71:be:c9:b3:4d: 23:85:44:cd:23:06:5a:7c:17:7c:0c:87:27:a8:9f:c5:16:bd: 06:8b:50:c6:85:ce:58:c2:2a:12:9a:dc:d9:00:19:a8:5f:85: 22:37:62:a8:be:60:cc:36:2c:42:3c:26:cc:c9:15:5d:72:e2: 69:c4:31:4f:db:61:02:fa:d3:c5:2e:35:23:53:07:98:73:e6: 56:f5:a7:8d:23:f8:b3:09:af:5a:37:c7:87:2a:1d:20:58:2e: d6:de:55:ed:3d:46:89:3a:05:9f:84:70:2c:25:67:59:ea:0d: ec:fd:c1:8a:08:ee:91:55:87:ac:5b:42:7e:7d:28:e6:1c:20: aa:84:dd:48:7e:6f:a9:20:ad:6f:b9:37:68:d4:8b:f6:3d:86: 58:5f:0b:90:1c:3f:66:11:e5:3e:51:f8:76:0d:d8:fa:61:fa: a0:69:ab:31:12:d0:f4:92:7b:fc:76:b5:9e:92:52:a4:c3:16: 57:af:3b:7e:11:8d:21:19:27:48:4a:d1:f1:f1:4c:52:52:bb: 98:d8:63:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYwpsdmnleAf/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjJmYTk5MmQtYjgzZS00NGI3LWExZTItNzA3MWMwNTE3Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMJmpf1LzyH2f3WrLOkhyZMaZgF8DFX7L6q/ t2L9NsdLT6WMOGhMBfoxXqe9rCMY2wBvgRj7vF/4w/T9aizqW43YlgXxHZLBAaJe SpwVrq/JFE6sYpF8Mf7S21tUiaPD63S/5cidcpr7CJS8hdl5BcNmB6+lUVwT2QLX Bvw2IWoAxcNWWtfDBkX3xrF5Bt9UORRVA8XIAc6J0KkWhSo+09Jmi+mLgj0G2/eU hqxmzykY6qoM0IzN9LQg19r10cqppxboTeGdmiX1COmA9kTflrTQ0EYH9rBGTzov 8tcXriJc2gV1c7FW9UpPmTyKOE42+LPmlCSPK9wpwZTzVT/t/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH57KpnryxAHOh3TGTViSm75IamuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOTU4YmZjN2MtMjYzNi0z ODJiLWI2N2YtZmY5MDU1MzhjNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLZ0s9GEN+i1s3I3GobHnXt+42TJIIVhitMgfbt+vlwroFdCD4/R6Td f+vYqORghSRxvsmzTSOFRM0jBlp8F3wMhyeon8UWvQaLUMaFzljCKhKa3NkAGahf hSI3Yqi+YMw2LEI8JszJFV1y4mnEMU/bYQL608UuNSNTB5hz5lb1p40j+LMJr1o3 x4cqHSBYLtbeVe09Rok6BZ+EcCwlZ1nqDez9wYoI7pFVh6xbQn59KOYcIKqE3Uh+ b6kgrW+5N2jUi/Y9hlhfC5AcP2YR5T5R+HYN2Pph+qBpqzES0PSSe/x2tZ6SUqTD FlevO34RjSEZJ0hK0fHxTFJSu5jYY4k= -----END CERTIFICATE-----Generated at Thu Sep 18 13:50:04 2025 by rpki-client