$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa File: 9a380ce2-8038-318b-a975-39bee35aa94f.roa (raw, json) Hash identifier: Fv3W5MXVHXswD4FpCfhLDd5WcDU7kx0FH7NbUdErWNQ= Subject key identifier: 7F:17:84:14:6F:49:9F:48:48:A0:D3:1E:E1:F3:A0:1A:83:EE:4B:3C Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B196C0685300E7CA5B4C9CB00 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22653 IP address blocks: 104.238.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:06:85:30:0e:7c:a5:b4:c9:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=f9cf7eb3-310e-4fea-a8fb-3ec4179738f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:37:97:c4:ff:71:78:2a:47:2e:03:25:bc: fd:54:c1:2e:21:45:be:1c:49:65:f6:31:08:0d:6e: 60:af:9d:9f:a2:e6:e5:99:d7:55:fb:57:c1:73:a5: 7a:c2:82:7a:db:86:81:a8:15:9a:53:1c:03:90:71: 9b:ca:88:41:71:77:7d:77:ce:cc:33:c8:29:93:ab: da:12:2b:2f:87:6e:56:68:c6:71:a6:84:77:c9:bb: e4:8d:4d:e8:c0:5c:1a:34:b1:0b:c8:5a:9a:a2:93: 3c:df:dc:f1:0d:d2:93:cc:7d:23:03:2e:bd:fa:c2: f5:79:d2:7f:40:74:a7:d1:46:14:c1:b8:a1:ba:a6: 83:e8:b8:19:48:76:54:60:e7:22:bb:99:1d:ef:52: e2:9d:7e:41:9b:23:83:3b:b3:ba:58:a2:ce:cf:4f: fc:8c:40:8c:0c:6a:2e:eb:2b:4e:3c:47:30:be:2a: c4:41:01:c4:48:b5:bd:6c:f2:20:77:51:af:49:e8: 78:0c:36:fd:fd:18:c6:d9:72:f9:38:a0:ea:0f:94: 9b:22:07:19:05:df:1d:d5:86:7d:79:33:44:23:43: 03:45:25:0d:54:99:2c:de:a3:35:93:72:d5:35:c1: 13:ec:39:10:36:e3:d3:62:a8:44:a3:0c:20:8b:b1: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:17:84:14:6F:49:9F:48:48:A0:D3:1E:E1:F3:A0:1A:83:EE:4B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/9a380ce2-8038-318b-a975-39bee35aa94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 104.238.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9e:28:c1:92:4a:a0:41:14:39:5d:33:33:34:0e:8c:65:c3: 67:8b:5b:bc:d2:3e:4e:5f:ac:49:99:7b:c2:eb:91:31:b6:ba: 6e:8e:46:48:ee:f9:f7:12:89:46:76:40:61:29:0d:4f:1a:cb: 9a:8c:cf:c3:45:11:d4:e7:b7:14:0d:e5:57:7a:46:bf:15:6e: 8a:ae:67:f1:d4:80:e4:3f:38:11:fa:65:f7:9c:dd:42:00:2d: 32:2d:b0:e1:31:5b:1c:e2:bc:f2:52:a1:6d:0b:ed:85:da:93: fb:14:f6:ed:ea:4b:d1:67:89:e1:ae:e8:98:d3:2f:3b:21:d8: 15:ab:77:2c:95:3e:b3:2c:44:cb:12:26:f5:a5:74:dd:66:75: ca:53:16:94:fe:f8:e3:77:8c:d6:ae:b0:a7:d0:41:8d:54:4d: 82:6a:6d:23:d2:e6:b9:ec:cb:fa:15:11:b7:be:12:33:f2:82: 80:55:bb:c5:a0:41:79:cd:39:58:fa:32:64:8b:b2:0b:27:10: 6e:bc:c8:76:d8:d0:20:92:53:6e:ab:30:3e:a9:d9:2c:56:2a: ea:6b:62:e8:c6:da:5f:7b:0a:3e:e3:67:4f:d1:21:d9:bc:da: 15:a4:07:52:c1:1e:e8:d0:f4:02:f8:17:cd:08:45:e8:9f:e6: 55:1b:0a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbAaFMA58pbTJywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZjljZjdlYjMtMzEwZS00ZmVhLWE4ZmItM2VjNDE3OTczOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1k3l8T/cXgqRy4DJbz9VMEuIUW+HEll9jEI DW5gr52foublmddV+1fBc6V6woJ624aBqBWaUxwDkHGbyohBcXd9d87MM8gpk6va Eisvh25WaMZxpoR3ybvkjU3owFwaNLELyFqaopM839zxDdKTzH0jAy69+sL1edJ/ QHSn0UYUwbihuqaD6LgZSHZUYOciu5kd71LinX5BmyODO7O6WKLOz0/8jECMDGou 6ytOPEcwvirEQQHESLW9bPIgd1GvSeh4DDb9/RjG2XL5OKDqD5SbIgcZBd8d1YZ9 eTNEI0MDRSUNVJks3qM1k3LVNcET7DkQNuPTYqhEowwgi7EC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8XhBRvSZ9ISKDTHuHzoBqD7ks8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvOWEzODBjZTItODAzOC0z MThiLWE5NzUtMzliZWUzNWFhOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyeKMGSSqBBFDldMzM0Doxlw2eLW7zSPk5frEmZe8LrkTG2um6ORkju +fcSiUZ2QGEpDU8ay5qMz8NFEdTntxQN5Vd6Rr8VboquZ/HUgOQ/OBH6Zfec3UIA LTItsOExWxzivPJSoW0L7YXak/sU9u3qS9FnieGu6JjTLzsh2BWrdyyVPrMsRMsS JvWldN1mdcpTFpT++ON3jNausKfQQY1UTYJqbSPS5rnsy/oVEbe+EjPygoBVu8Wg QXnNOVj6MmSLsgsnEG68yHbY0CCSU26rMD6p2SxWKuprYujG2l97Cj7jZ0/RIdm8 2hWkB1LBHujQ9AL4F80IReif5lUbCn0= -----END CERTIFICATE-----Generated at Tue Sep 16 09:49:14 2025 by rpki-client