$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa File: 54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa (raw, json) Hash identifier: z8jFPobBdHHv6Jg0Xs/B1rD3gbQZywjP22lyqa3AvR4= Subject key identifier: 23:03:DA:1A:87:86:95:41:91:57:0F:AB:5A:BD:2D:B4:22:9A:B0:9B Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584B1F0169AE64C0CB61090AA280 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 198.145.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:69:ae:64:c0:cb:61:09:0a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=b04b0f60-7db1-44a3-89dd-de392d5d4bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0a:e1:32:d2:42:54:3a:c2:48:40:2e:6d:ca: cb:5a:bd:35:4d:9e:c6:9f:dc:70:0b:61:b0:ba:dc: f6:59:a8:27:a3:12:6b:eb:8f:4f:ca:5a:bd:50:f1: 5c:18:5a:69:68:16:d6:4d:50:ba:91:b6:48:53:77: 55:07:0d:95:0d:c1:fc:bd:3a:29:02:48:20:09:b9: b9:42:9f:29:4b:3b:ad:0e:c2:95:ef:db:42:f7:02: d5:2a:75:99:a1:63:0c:d2:b8:ce:12:78:05:61:9d: ea:85:0b:bd:af:ca:d9:d5:03:73:8d:d8:51:7d:a9: f7:89:1b:d3:51:60:4a:87:ac:ac:08:43:37:8d:9e: a4:0d:48:bf:45:9e:c7:c6:df:6c:ac:a4:7a:be:6d: 35:95:d3:63:3b:7e:c9:24:16:b8:03:29:17:d6:4d: d7:e7:c7:4a:b6:85:b9:91:64:7d:fb:2f:cc:d1:ed: 92:e8:7b:2b:6e:33:23:2c:5a:1b:9c:3c:9b:2e:10: 28:c8:5d:40:98:c4:39:45:0f:cb:ab:17:54:23:4e: 78:56:63:12:f9:c8:31:23:d9:3a:24:3d:f6:80:5b: c9:b8:43:7e:17:44:c0:27:63:fb:b7:31:de:cb:16: 62:96:07:7e:27:df:da:0f:13:c0:2c:81:9f:4e:4b: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:03:DA:1A:87:86:95:41:91:57:0F:AB:5A:BD:2D:B4:22:9A:B0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/54ef36a0-a97a-33fe-9917-afb0d023f4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b7:4f:c4:19:2b:f2:86:a1:aa:5b:7b:d4:49:74:cf:80:50: 1b:e4:b1:e7:e3:03:65:8d:93:ce:9b:7c:7a:24:19:bc:97:3c: 31:df:75:a7:c1:60:c3:4a:1a:0b:ef:fe:39:b3:5f:9c:4b:5c: 5c:77:ce:6b:b7:41:bd:17:32:30:e6:df:38:ac:07:b5:b3:a4: 19:61:12:ff:ef:ad:14:04:65:23:64:95:d4:5c:c7:73:8d:4a: f8:a0:9c:cb:c4:da:1e:cf:d4:45:d1:cc:e6:78:fc:02:22:6e: 93:40:cb:36:81:d8:72:3d:c4:a5:8f:e2:d5:c2:51:a9:a8:0c: 7a:c9:0c:3e:78:98:8b:36:9f:76:54:b4:74:3c:77:66:8c:2d: 62:c9:f9:0f:89:5b:70:3e:a2:d7:dc:14:c1:9d:b3:c4:13:39: c2:3a:9f:c8:bb:3a:79:bc:98:c6:a6:be:cf:15:68:22:a2:a4: 24:33:0c:a5:d8:63:a6:49:ad:51:8c:74:0a:ad:8d:0a:53:e8: ac:a7:a0:25:f5:2b:91:32:31:fd:10:63:aa:45:de:c6:5b:a0: 20:c3:51:f4:28:c3:ce:68:14:dc:59:46:4b:8f:15:e7:27:f7: 7e:c7:43:c9:e8:39:f8:75:5d:64:33:3e:3f:ad:ba:7f:c7:e7: 64:1e:ab:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWmuZMDLYQkKooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YjA0YjBmNjAtN2RiMS00NGEzLTg5ZGQtZGUzOTJkNWQ0YmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwrhMtJCVDrCSEAubcrLWr01TZ7Gn9xwC2Gw utz2WagnoxJr649Pylq9UPFcGFppaBbWTVC6kbZIU3dVBw2VDcH8vTopAkggCbm5 Qp8pSzutDsKV79tC9wLVKnWZoWMM0rjOEngFYZ3qhQu9r8rZ1QNzjdhRfan3iRvT UWBKh6ysCEM3jZ6kDUi/RZ7Hxt9srKR6vm01ldNjO37JJBa4AykX1k3X58dKtoW5 kWR9+y/M0e2S6HsrbjMjLFobnDybLhAoyF1AmMQ5RQ/LqxdUI054VmMS+cgxI9k6 JD32gFvJuEN+F0TAJ2P7tzHeyxZilgd+J9/aDxPALIGfTkte3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMD2hqHhpVBkVcPq1q9LbQimrCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTRlZjM2YTAtYTk3YS0z M2ZlLTk5MTctYWZiMGQwMjNmNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm3T8QZK/KGoapbe9RJdM+AUBvksefjA2WNk86bfHokGbyXPDHfdafB YMNKGgvv/jmzX5xLXFx3zmu3Qb0XMjDm3zisB7WzpBlhEv/vrRQEZSNkldRcx3ON SvignMvE2h7P1EXRzOZ4/AIibpNAyzaB2HI9xKWP4tXCUamoDHrJDD54mIs2n3ZU tHQ8d2aMLWLJ+Q+JW3A+otfcFMGds8QTOcI6n8i7Onm8mMamvs8VaCKipCQzDKXY Y6ZJrVGMdAqtjQpT6KynoCX1K5EyMf0QY6pF3sZboCDDUfQow85oFNxZRkuPFecn 937HQ8noOfh1XWQzPj+tun/H52Qeqxw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:55:07 2025 by rpki-client