$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa File: df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa (raw, json) Hash identifier: LnHVzDx9I47bSEcj2virKoLr2+HLhlNmZaieIlRHMZI= Subject key identifier: 18:2A:E4:C4:6A:EE:C0:3B:25:13:12:B5:91:66:F5:A7:4B:25:71:BE Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584F4973E5D02AC8BDBD5B2684C0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13213 IP address blocks: 198.145.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e5:d0:2a:c8:bd:bd:5b:26:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=06e8f6fc-d13f-497b-838f-89a356696bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:70:e7:29:f7:4d:a6:d5:fb:f6:b8:71:27:de: 7c:8a:13:ce:ed:f8:62:e9:12:e8:b6:0c:c1:e9:a6: 3d:98:04:d3:1f:5a:c1:38:1f:01:ee:62:7a:3a:9f: 03:15:8a:92:2e:4a:ce:80:66:67:82:c5:78:c3:f2: 27:89:bb:8d:7d:b2:72:d2:43:51:b3:49:9b:78:f5: a5:54:c6:63:9a:a3:1e:0c:b5:1e:cd:75:6d:75:38: ae:da:5e:a3:e8:74:c3:29:53:5f:85:6d:2d:15:a5: 66:ed:7c:e5:e2:43:e0:99:99:85:0f:a8:a0:da:2d: d3:9d:a9:85:b6:ba:34:fc:4b:88:2c:f3:ec:a7:11: 91:ff:9e:bb:62:8f:41:f1:4e:c2:7e:eb:fe:58:08: e0:6a:3f:f4:69:1c:e9:c4:f7:a8:39:5b:72:a1:4e: e3:35:5c:3f:3a:3a:7e:63:b4:54:77:b7:34:7c:d1: 37:c8:1d:08:23:02:0f:a4:f8:41:7b:af:72:d8:f2: 09:b4:fc:a7:56:37:43:b8:16:bc:8d:bd:5a:93:df: 0b:12:0c:12:b4:e8:a2:65:42:a3:fc:bd:50:5c:18: 9f:79:54:23:1b:07:95:d2:74:84:81:ac:0b:94:ee: bd:46:5f:fc:20:ac:fa:9e:73:84:0d:e9:6a:82:78: 3c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2A:E4:C4:6A:EE:C0:3B:25:13:12:B5:91:66:F5:A7:4B:25:71:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 198.145.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:93:17:8c:d6:1a:e3:4a:ab:9a:6e:b7:31:5b:15:4b:a7:57: 3b:94:27:94:76:78:e0:7c:ee:c1:aa:81:f8:88:53:26:90:46: 3b:75:5f:df:62:0a:14:dc:82:de:90:89:65:92:3c:7d:c8:4b: c0:cb:2c:68:5a:d9:2d:93:7f:1a:b0:af:99:64:07:8e:82:04: d9:48:68:c1:34:26:14:0e:74:bc:83:3f:2a:a7:ab:77:8d:85: 3d:52:64:2f:d8:39:f9:90:f9:df:2c:c7:49:f7:f1:56:17:40: 7e:90:4e:08:7d:24:47:89:29:8e:88:5d:24:4f:46:2f:7c:19: 46:ce:ba:13:7e:ae:45:d5:e1:7a:02:c5:a4:25:e8:e9:dd:0f: 4d:3d:28:12:dd:ca:95:11:31:a5:8d:f3:60:7e:0c:1b:99:31: 7a:1d:4e:d3:c1:d3:c3:88:ce:3c:ae:67:ea:81:d3:6f:4c:cf: 15:fc:30:b3:fe:1e:54:60:43:20:cb:a1:f7:e9:c7:76:ff:21: 07:94:85:02:fb:36:f2:e4:26:5f:6f:78:8c:16:ff:c7:40:70: 83:d9:98:20:59:67:84:d6:b9:d1:6c:a0:13:cf:6e:d6:a8:f9: be:fd:d4:bc:82:c5:20:51:9a:e3:ad:33:46:4b:3b:80:b8:94: 4a:82:89:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+XQKsi9vVsmhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDZlOGY2ZmMtZDEzZi00OTdiLTgzOGYtODlhMzU2Njk2YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3DnKfdNptX79rhxJ958ihPO7fhi6RLotgzB 6aY9mATTH1rBOB8B7mJ6Op8DFYqSLkrOgGZngsV4w/InibuNfbJy0kNRs0mbePWl VMZjmqMeDLUezXVtdTiu2l6j6HTDKVNfhW0tFaVm7Xzl4kPgmZmFD6ig2i3TnamF tro0/EuILPPspxGR/567Yo9B8U7Cfuv+WAjgaj/0aRzpxPeoOVtyoU7jNVw/Ojp+ Y7RUd7c0fNE3yB0IIwIPpPhBe69y2PIJtPynVjdDuBa8jb1ak98LEgwStOiiZUKj /L1QXBifeVQjGweV0nSEgawLlO69Rl/8IKz6nnOEDelqgng8kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgq5MRq7sA7JRMStZFm9adLJXG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZGY0ZDZmNTQtNzcxNS0z ZTlhLThjNmMtYmM1MjIwZDNiM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqTF4zWGuNKq5putzFbFUunVzuUJ5R2eOB87sGqgfiIUyaQRjt1X99i ChTcgt6QiWWSPH3IS8DLLGha2S2Tfxqwr5lkB46CBNlIaME0JhQOdLyDPyqnq3eN hT1SZC/YOfmQ+d8sx0n38VYXQH6QTgh9JEeJKY6IXSRPRi98GUbOuhN+rkXV4XoC xaQl6OndD009KBLdypURMaWN82B+DBuZMXodTtPB08OIzjyuZ+qB029MzxX8MLP+ HlRgQyDLoffpx3b/IQeUhQL7NvLkJl9veIwW/8dAcIPZmCBZZ4TWudFsoBPPbtao +b791LyCxSBRmuOtM0ZLO4C4lEqCiSo= -----END CERTIFICATE-----Generated at Fri Sep 25 18:18:17 2026 by rpki-client