$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/af91cf66-8750-35c9-80cd-d7922160bcad.roa File: af91cf66-8750-35c9-80cd-d7922160bcad.roa (raw, json) Hash identifier: XuZ5/mGbwmCbaN6A+QTIMSXsjuTWSLjf9z5kBLg0cf0= Subject key identifier: C8:58:62:38:96:5E:89:AB:C4:6F:E4:B5:14:41:07:5D:05:FA:6D:B7 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584AFC1BFBC131D8CF5917BEA780 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/af91cf66-8750-35c9-80cd-d7922160bcad.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 198.145.152.0/24 maxlen: 24 198.145.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:fb:c1:31:d8:cf:59:17:be:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=a087fd57-100b-4b12-b1c8-7f9b9bd423a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:4d:b7:ec:83:48:7d:e2:91:f1:c7:cd:0a: c2:75:df:6b:f3:e8:8d:60:4b:b8:66:8c:a2:36:d9: 03:a9:c4:e0:5f:a0:c6:5e:bf:71:5c:cd:dd:91:18: 57:f2:0a:7a:da:d5:d9:b5:bf:76:8c:8f:f0:0e:02: 03:48:0f:7a:a6:33:bc:0c:a5:01:28:ef:bf:d7:01: d4:b2:3a:ea:df:1e:02:4b:a5:a3:3a:10:94:de:8c: b7:9f:03:19:d2:37:7b:c8:c5:f6:ec:a1:4c:38:a9: ab:83:39:17:3d:6a:42:d6:5c:5f:6d:f0:96:1a:f2: de:fc:1f:18:5e:0a:cc:4c:19:da:43:47:5c:3d:65: 85:f9:1b:94:aa:04:ad:c0:e3:98:9b:a9:1a:48:4b: af:18:96:a6:cd:63:15:47:34:f3:52:7f:45:6d:27: fe:65:9b:d3:4f:e9:49:49:ac:f1:d9:6e:b1:d8:fc: 54:b1:6c:76:87:29:53:d6:e3:00:77:94:f1:af:54: fb:bb:b0:be:f0:38:ef:2d:de:d9:08:32:b0:e1:08: 15:9d:c6:10:51:19:c2:90:3d:14:46:c3:89:83:3c: eb:85:7b:33:73:9c:d2:88:fc:92:96:ce:d9:e7:0d: 2b:69:4e:77:8b:5b:28:65:d8:c4:ee:21:ee:ae:b7: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:58:62:38:96:5E:89:AB:C4:6F:E4:B5:14:41:07:5D:05:FA:6D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/af91cf66-8750-35c9-80cd-d7922160bcad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.152.0/24 198.145.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:36:ab:1a:0f:21:29:2c:e4:a8:31:16:c6:ce:38:0f:ed:0c: 76:03:77:ec:07:fb:86:e0:d6:96:cd:70:4c:63:d1:2f:cb:5f: e5:85:67:1e:fd:0b:3e:c4:5b:17:76:2f:4f:a1:4b:60:b4:51: 4d:3a:cd:6e:da:11:b5:ea:ff:62:ef:56:c3:65:25:0a:f5:1a: c0:90:ab:f0:cd:1a:32:d9:b6:3d:f6:c0:31:c1:d0:c8:e7:8c: 67:95:7e:4c:5d:48:8a:02:cb:e3:16:59:1f:bf:fa:f0:a4:16: bb:86:43:47:0b:04:bc:fc:fd:62:66:7f:76:0a:e8:63:96:77: 6d:b4:c8:d2:c5:b6:39:ba:93:c2:8d:c5:e5:3d:95:8c:ad:1c: eb:cc:3c:ce:63:e6:04:89:60:6d:d2:14:45:4f:f9:5a:72:a4: da:13:65:7d:5b:ef:b4:42:64:96:d6:92:63:c8:24:42:9c:ab: be:90:bf:87:92:5b:ea:79:8e:8f:3f:8e:f7:09:64:94:51:c2: e6:92:b0:f8:61:d7:3e:87:a8:6b:0a:d1:9e:4d:4d:48:0f:3d: f5:bc:1c:e5:82:34:54:6b:4b:89:42:13:7a:05:39:f4:a6:aa: ee:f0:24:74:e0:52:f9:8b:8c:f6:46:5b:80:4d:6c:5d:b7:11: cd:82:86:4b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEr8G/vBMdjPWRe+p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTA4N2ZkNTctMTAwYi00YjEyLWIxYzgtN2Y5YjliZDQyM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXVNt+yDSH3ikfHHzQrCdd9r8+iNYEu4Zoyi NtkDqcTgX6DGXr9xXM3dkRhX8gp62tXZtb92jI/wDgIDSA96pjO8DKUBKO+/1wHU sjrq3x4CS6WjOhCU3oy3nwMZ0jd7yMX27KFMOKmrgzkXPWpC1lxfbfCWGvLe/B8Y XgrMTBnaQ0dcPWWF+RuUqgStwOOYm6kaSEuvGJamzWMVRzTzUn9FbSf+ZZvTT+lJ Sazx2W6x2PxUsWx2hylT1uMAd5Txr1T7u7C+8DjvLd7ZCDKw4QgVncYQURnCkD0U RsOJgzzrhXszc5zSiPySls7Z5w0raU53i1soZdjE7iHurrfSnwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMhYYjiWXomrxG/ktRRBB10F+m23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYWY5MWNmNjYtODc1MC0z NWM5LTgwY2QtZDc5MjIxNjBiY2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxpGYAwQA xpGaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALM2qxoPISks5KgxFsbOOA/tDHYDd+wH+4bg1pbNcExj0S/L X+WFZx79Cz7EWxd2L0+hS2C0UU06zW7aEbXq/2LvVsNlJQr1GsCQq/DNGjLZtj32 wDHB0MjnjGeVfkxdSIoCy+MWWR+/+vCkFruGQ0cLBLz8/WJmf3YK6GOWd220yNLF tjm6k8KNxeU9lYytHOvMPM5j5gSJYG3SFEVP+VpypNoTZX1b77RCZJbWkmPIJEKc q76Qv4eSW+p5jo8/jvcJZJRRwuaSsPhh1z6HqGsK0Z5NTUgPPfW8HOWCNFRrS4lC E3oFOfSmqu7wJHTgUvmLjPZGW4BNbF23Ec2Chks= -----END CERTIFICATE-----Generated at Thu Sep 18 09:25:53 2025 by rpki-client