$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa File: 09123ace-0161-3859-8f63-f647fb1bbe09.roa (raw, json) Hash identifier: yPRP7UQyQSLYbvaHRFWbfszLWdZuKvRIsD8zwFuQgOk= Subject key identifier: 61:44:CD:9A:6E:33:86:4D:68:99:F7:97:2C:7C:3A:1E:07:B5:6C:27 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7B665A2F922EB5C910C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 140.82.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7b:66:5a:2f:92:2e:b5:c9:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=c84bc2d8-b130-4eaa-b310-d7ed71d826bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:9f:ac:a9:f2:bb:63:0e:79:40:44:ee:a2: ef:ec:81:f5:73:61:9b:58:dd:02:f4:80:e9:0a:0d: 19:be:a9:19:ac:02:f3:f7:f3:46:d9:04:cd:17:fd: 5f:47:7f:1d:14:dd:64:00:4b:00:01:df:88:cc:65: ea:34:90:7a:ec:ee:67:f5:8c:c7:c5:a1:99:42:00: 2d:c2:17:8f:fa:d3:e5:81:73:d1:2e:01:01:df:cb: e5:bc:a0:79:a8:ff:21:6a:f8:e5:09:c7:0f:21:e7: 26:f5:7d:58:5d:af:6d:85:8e:4e:6a:3a:d2:8a:8c: a2:70:f0:c5:ef:9a:50:10:0a:54:1f:58:6c:c3:b2: e1:79:34:c6:e2:0e:49:22:28:35:79:b1:ab:b6:69: eb:9a:45:47:42:9f:5f:5d:c9:1c:f3:65:ec:d0:e4: a6:c2:60:bf:15:21:42:84:18:19:0d:7a:2f:cc:55: eb:8d:96:24:77:b7:83:62:fe:18:93:94:80:e1:0d: 06:69:a1:a8:ea:10:53:bc:72:17:09:23:f4:92:33: dd:e5:4b:3f:08:08:13:9d:c5:0d:60:ab:9d:72:c6: fd:27:2b:d8:f7:98:f7:30:c9:49:c1:14:bc:73:09: 2e:4f:e1:f3:32:1d:fa:f7:93:4c:6d:fc:79:c8:50: e1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:44:CD:9A:6E:33:86:4D:68:99:F7:97:2C:7C:3A:1E:07:B5:6C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/09123ace-0161-3859-8f63-f647fb1bbe09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b0:30:e4:cc:a9:ad:92:83:01:fc:53:74:65:85:45:7c:d2: 2c:73:15:60:ac:4a:1d:77:7d:58:ca:18:78:da:89:37:29:29: 3c:3e:b0:d4:53:4c:bb:69:85:18:6e:7b:80:55:2a:03:d0:ba: b6:ba:35:55:16:ea:4c:38:2a:89:5f:65:ac:ca:4f:37:da:06: 80:10:31:4d:2d:3c:55:5f:c9:54:2c:94:7b:b2:8b:25:ff:10: a6:17:68:6d:7d:55:38:2b:10:4a:94:46:3a:c6:7e:f7:a1:cb: b3:c5:08:60:01:24:ac:3a:b1:d0:51:1b:b4:f4:74:53:ce:49: 51:b7:8b:83:5d:65:94:2b:dc:e1:57:bb:33:72:39:99:95:41: 8a:e3:4f:0c:08:e0:58:80:84:a5:20:84:ee:c4:81:0a:6e:ad: 70:1d:a5:90:d4:9a:15:56:d8:49:99:b1:fa:86:c8:55:88:55: d8:51:d6:31:07:79:09:c7:d6:91:ca:94:58:48:55:60:7a:3e: 39:1c:81:72:3e:8b:eb:54:4a:86:86:df:99:26:21:f1:51:44: f2:f5:18:46:2b:41:d5:42:89:7b:f2:f1:e8:fa:eb:b2:38:cc: ce:45:2c:77:ca:9c:3b:f5:a8:2a:b3:2a:d6:55:69:4b:56:80: 99:41:af:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HtmWi+SLrXJEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk Yzg0YmMyZDgtYjEzMC00ZWFhLWIzMTAtZDdlZDcxZDgyNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph6frKnyu2MOeUBE7qLv7IH1c2GbWN0C9IDp Cg0ZvqkZrALz9/NG2QTNF/1fR38dFN1kAEsAAd+IzGXqNJB67O5n9YzHxaGZQgAt wheP+tPlgXPRLgEB38vlvKB5qP8havjlCccPIecm9X1YXa9thY5OajrSioyicPDF 75pQEApUH1hsw7LheTTG4g5JIig1ebGrtmnrmkVHQp9fXckc82Xs0OSmwmC/FSFC hBgZDXovzFXrjZYkd7eDYv4Yk5SA4Q0GaaGo6hBTvHIXCSP0kjPd5Us/CAgTncUN YKudcsb9JyvY95j3MMlJwRS8cwkuT+HzMh3695NMbfx5yFDhHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFEzZpuM4ZNaJn3lyx8Oh4HtWwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMDkxMjNhY2UtMDE2MS0z ODU5LThmNjMtZjY0N2ZiMWJiZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFawMOTMqa2SgwH8U3RlhUV80ixzFWCsSh13fVjKGHjaiTcpKTw+sNRT TLtphRhue4BVKgPQura6NVUW6kw4KolfZazKTzfaBoAQMU0tPFVfyVQslHuyiyX/ EKYXaG19VTgrEEqURjrGfvehy7PFCGABJKw6sdBRG7T0dFPOSVG3i4NdZZQr3OFX uzNyOZmVQYrjTwwI4FiAhKUghO7EgQpurXAdpZDUmhVW2EmZsfqGyFWIVdhR1jEH eQnH1pHKlFhIVWB6PjkcgXI+i+tUSoaG35kmIfFRRPL1GEYrQdVCiXvy8ej667I4 zM5FLHfKnDv1qCqzKtZVaUtWgJlBrxU= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:29 2025 by rpki-client