$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f1ab6abd-360d-358e-ad42-6a4bdd69f7a3.roa File: f1ab6abd-360d-358e-ad42-6a4bdd69f7a3.roa (raw, json) Hash identifier: 81lDTxmVsyz0BDBN43C5AAHUy4AaA3ea0igg6wN0cSQ= Subject key identifier: 61:01:BB:8B:D3:2E:8D:E7:3C:0F:E7:80:9A:F4:DB:5E:2A:93:C7:9C Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584BC09A22E9C7C31A16E6009C40 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f1ab6abd-360d-358e-ad42-6a4bdd69f7a3.roa Signing time: Tue 04 Nov 2025 22:13:28 +0000 ROA not before: Tue 04 Nov 2025 22:13:28 +0000 ROA not after: Mon 02 Feb 2026 22:13:28 +0000 asID: 9009 IP address blocks: 198.145.157.0/24 maxlen: 24 209.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:9a:22:e9:c7:c3:1a:16:e6:00:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Nov 4 22:13:28 2025 GMT Not After : Feb 2 22:13:28 2026 GMT Subject: CN=21d6c4d9-c710-48ce-adc1-c5590a142a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:33:64:b3:30:9f:d7:66:e9:80:1b:0c:ea: dc:3e:ea:cf:96:cb:5d:88:ba:7f:8b:82:aa:64:ed: 68:1a:ad:d7:ba:0f:01:75:34:57:e6:20:39:8e:33: eb:0f:6c:a8:8d:c5:e3:c0:d1:5c:3f:93:ad:70:9f: 45:4a:3f:42:08:9a:b2:3f:c9:8b:23:eb:61:10:50: 48:32:61:ca:3b:69:d5:13:df:a7:c2:9b:61:6f:19: fc:40:48:26:f8:b4:a2:d8:51:a7:19:57:8a:90:6a: cc:e6:43:87:70:e8:98:49:05:49:5c:1f:86:d2:18: 3f:55:f9:a4:70:14:24:98:eb:79:79:18:ce:53:df: cb:e5:82:af:7c:34:51:59:c8:e6:7c:f8:9f:87:83: 02:b4:91:31:b2:53:e4:da:9e:c1:17:1f:e7:35:f2: 04:e3:4d:07:08:1c:fc:12:aa:59:d0:b2:b3:0a:82: 49:c8:97:00:a9:ae:fe:0c:40:3d:48:62:a0:6a:eb: 46:01:98:ce:7c:31:24:17:b5:fc:23:54:60:6b:7b: 70:89:97:19:83:77:8b:fd:40:5c:98:57:95:46:b6: 47:4a:6e:98:d8:c6:05:b9:9d:8d:62:93:61:f2:f3: f1:1b:79:75:35:82:6b:79:b1:c4:35:03:31:7d:d0: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:01:BB:8B:D3:2E:8D:E7:3C:0F:E7:80:9A:F4:DB:5E:2A:93:C7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f1ab6abd-360d-358e-ad42-6a4bdd69f7a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.157.0/24 209.20.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:1f:a3:2b:e4:a5:de:c4:2f:5a:3c:21:28:ec:c9:4e:a1:c4: a6:58:e3:d7:aa:9e:4e:92:33:4a:b7:ca:50:72:c6:e5:2f:ac: 1d:87:ef:1d:88:09:93:b4:ab:03:f4:f2:02:e7:24:a9:92:bb: 21:99:05:42:b4:78:35:a7:1c:2d:13:f8:98:82:7c:60:b9:19: 2c:25:ae:c1:fe:2b:0d:da:b9:10:b4:60:78:f3:ab:2d:9b:26: fc:9e:f3:b4:fb:4c:d9:5c:a4:54:6b:4c:20:76:ca:2c:50:01: d8:18:ae:33:fd:54:8c:92:ad:37:f4:9d:3a:b6:ca:23:89:78: 53:c3:54:59:98:6d:bb:86:21:6c:0f:d1:0c:f7:36:f3:5b:95: f7:00:e8:3d:a0:4c:7c:26:39:4d:16:1f:ef:ad:64:15:e3:a3: ea:5d:86:6a:89:f7:23:92:2e:aa:a5:7b:f1:ca:ef:11:30:41: c0:02:f6:31:ba:7c:45:5d:64:de:f9:c4:d2:38:d3:c0:cc:49: 53:9a:d1:cd:9b:a3:12:e3:d0:bf:24:c2:54:64:bf:eb:72:76: fb:fa:8f:7f:5f:d4:cd:9a:8b:4e:1a:6c:e5:c1:0c:38:5f:6d: 69:7f:61:33:8c:5f:00:50:9e:05:6e:b5:54:12:ac:66:39:fc: d7:93:51:2e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvAmiLpx8MaFuYAnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MTEwNDIyMTMyOFoXDTI2MDIwMjIyMTMyOFowLzEtMCsGA1UEAxMk MjFkNmM0ZDktYzcxMC00OGNlLWFkYzEtYzU1OTBhMTQyYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH4zZLMwn9dm6YAbDOrcPurPlstdiLp/i4Kq ZO1oGq3Xug8BdTRX5iA5jjPrD2yojcXjwNFcP5OtcJ9FSj9CCJqyP8mLI+thEFBI MmHKO2nVE9+nwpthbxn8QEgm+LSi2FGnGVeKkGrM5kOHcOiYSQVJXB+G0hg/Vfmk cBQkmOt5eRjOU9/L5YKvfDRRWcjmfPifh4MCtJExslPk2p7BFx/nNfIE400HCBz8 EqpZ0LKzCoJJyJcAqa7+DEA9SGKgautGAZjOfDEkF7X8I1Rga3twiZcZg3eL/UBc mFeVRrZHSm6Y2MYFuZ2NYpNh8vPxG3l1NYJrebHENQMxfdBlfwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGEBu4vTLo3nPA/ngJr0214qk8ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZjFhYjZhYmQtMzYwZC0z NThlLWFkNDItNmE0YmRkNjlmN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxpGdAwQA 0RSEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKQfoyvkpd7EL1o8ISjsyU6hxKZY49eqnk6SM0q3ylByxuUv rB2H7x2ICZO0qwP08gLnJKmSuyGZBUK0eDWnHC0T+JiCfGC5GSwlrsH+Kw3auRC0 YHjzqy2bJvye87T7TNlcpFRrTCB2yixQAdgYrjP9VIySrTf0nTq2yiOJeFPDVFmY bbuGIWwP0Qz3NvNblfcA6D2gTHwmOU0WH++tZBXjo+pdhmqJ9yOSLqqle/HK7xEw QcAC9jG6fEVdZN75xNI408DMSVOa0c2boxLj0L8kwlRkv+tydvv6j39f1M2ai04a bOXBDDhfbWl/YTOMXwBQngVutVQSrGY5/NeTUS4= -----END CERTIFICATE-----Generated at Tue Nov 11 22:15:04 2025 by rpki-client