$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/095b3dd6-20ae-3a8b-b0ed-6555d22d4a1b.roa File: 095b3dd6-20ae-3a8b-b0ed-6555d22d4a1b.roa (raw, json) Hash identifier: jMBYxevmD61x/VuuMGvSmbMQoCH6GJOj/ymXFBzeoTY= Subject key identifier: 16:8A:18:1C:C5:A1:D3:6C:9F:76:0B:4B:67:C3:50:33:5A:69:87:ED Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584AF52136684534399048508540 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/095b3dd6-20ae-3a8b-b0ed-6555d22d4a1b.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 1239 IP address blocks: 216.65.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:36:68:45:34:39:90:48:50:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a7f0edab-aa7d-4137-8dae-5b7ef75e31cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:ce:62:29:ac:e2:fa:d5:84:88:b6:f0:a6: 5f:c1:58:12:68:60:20:ae:3b:37:1d:a1:16:8f:1d: ab:aa:c9:f4:be:ee:7e:67:9d:cf:ff:67:ce:9a:90: 0c:08:f1:d4:28:8f:cb:ae:ea:7a:55:5d:e2:8c:19: df:fb:e7:7d:b6:ec:9c:77:68:0b:e5:3b:47:5c:b3: 9a:fa:87:35:fd:2f:bd:12:3b:c1:48:67:34:91:20: 85:19:d5:67:53:42:a3:95:83:46:db:8b:27:3d:60: ec:e5:b2:e7:a8:4a:59:5c:14:ad:da:d4:c5:20:cc: aa:b7:52:cd:ac:1e:2e:c0:6e:fd:31:6d:52:07:ff: 20:73:d1:b4:92:b7:07:68:52:d6:e3:74:ad:58:6b: fe:d6:af:1a:75:cc:2c:69:88:49:9b:cf:b3:0d:1e: ab:e7:c6:17:6d:6a:1b:d7:8f:45:c6:4c:d9:b5:22: b0:06:94:52:56:85:d8:b9:44:27:dd:0c:70:1b:99: c9:50:3d:c1:12:fa:0f:fe:28:c4:26:9d:5e:c5:4e: e5:7b:be:1f:6f:50:56:4a:92:ee:01:5d:92:9c:6b: a4:1c:c1:d7:10:5f:45:b8:29:85:75:e1:ed:2f:a2: d7:53:bc:07:12:40:c3:fe:aa:ca:a7:79:f8:95:93: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8A:18:1C:C5:A1:D3:6C:9F:76:0B:4B:67:C3:50:33:5A:69:87:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/095b3dd6-20ae-3a8b-b0ed-6555d22d4a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 216.65.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7e:3c:f7:9c:36:fb:9a:69:b7:3f:65:63:98:89:80:b1:4f: 0b:0f:60:95:cb:5c:de:07:cf:37:67:f9:72:c0:77:e6:3a:f7: 28:72:72:1e:55:71:78:51:fe:b9:a2:3e:b4:4c:5f:d7:ca:a0: 59:fa:16:02:7d:2c:ed:8a:9b:7e:2d:6b:4a:a3:30:b4:4a:47: 30:be:e1:97:47:fd:e4:9d:49:3b:37:54:71:b0:15:47:07:e1: 12:be:a5:0a:1d:7e:a9:cd:fd:cd:24:67:d4:2c:c6:98:46:c5: f4:3c:20:4c:0a:82:de:f5:52:fa:81:d8:89:71:e3:0c:df:6e: e8:00:9e:6e:9e:6d:b9:c2:b3:a9:77:72:38:11:34:27:5f:39: ec:94:93:f0:15:11:86:22:56:0b:c1:60:f3:8c:20:2a:3b:8c: 99:b5:56:68:30:c1:cb:f8:fd:e0:57:24:ac:30:c1:9d:a2:aa: 16:f2:3a:4d:c5:2a:ee:61:c0:ca:e4:aa:ec:31:65:b5:05:b9: 90:8f:21:2f:2c:0e:00:9d:6e:81:24:bd:8f:ba:49:36:dd:1b: 1b:2e:f7:0e:46:f7:b2:ba:79:df:73:cd:4e:5a:97:a9:ad:19: 39:2a:76:d4:0b:cb:b3:a1:79:29:f3:ab:57:a0:a1:7c:3f:87: 13:f3:5e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITZoRTQ5kEhQhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTdmMGVkYWItYWE3ZC00MTM3LThkYWUtNWI3ZWY3NWUzMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggzOYims4vrVhIi28KZfwVgSaGAgrjs3HaEW jx2rqsn0vu5+Z53P/2fOmpAMCPHUKI/Lrup6VV3ijBnf++d9tuycd2gL5TtHXLOa +oc1/S+9EjvBSGc0kSCFGdVnU0KjlYNG24snPWDs5bLnqEpZXBSt2tTFIMyqt1LN rB4uwG79MW1SB/8gc9G0krcHaFLW43StWGv+1q8adcwsaYhJm8+zDR6r58YXbWob 149FxkzZtSKwBpRSVoXYuUQn3QxwG5nJUD3BEvoP/ijEJp1exU7le74fb1BWSpLu AV2SnGukHMHXEF9FuCmFdeHtL6LXU7wHEkDD/qrKp3n4lZMB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaKGBzFodNsn3YLS2fDUDNaaYftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMDk1YjNkZDYtMjBhZS0z YThiLWIwZWQtNjU1NWQyMmQ0YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2EGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl+PPecNvuaabc/ZWOYiYCxTwsPYJXLXN4Hzzdn+XLAd+Y69yhych5V cXhR/rmiPrRMX9fKoFn6FgJ9LO2Km34ta0qjMLRKRzC+4ZdH/eSdSTs3VHGwFUcH 4RK+pQodfqnN/c0kZ9QsxphGxfQ8IEwKgt71UvqB2Ilx4wzfbugAnm6ebbnCs6l3 cjgRNCdfOeyUk/AVEYYiVgvBYPOMICo7jJm1Vmgwwcv4/eBXJKwwwZ2iqhbyOk3F Ku5hwMrkquwxZbUFuZCPIS8sDgCdboEkvY+6STbdGxsu9w5G97K6ed9zzU5al6mt GTkqdtQLy7OheSnzq1egoXw/hxPzXgs= -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:49 2025 by rpki-client