$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1340615b-1f97-3909-95a6-e4a0e3e503ab.roa File: 1340615b-1f97-3909-95a6-e4a0e3e503ab.roa (raw, json) Hash identifier: VfWsRT/Pb7e0t5IZdY//n8ToLJ1BkyFuOtHlipmGlf8= Subject key identifier: 9E:E7:17:C2:3E:AD:27:DC:B6:BA:7E:02:22:FC:B5:5A:E5:57:30:C0 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC80D19628C0282C76FB40 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1340615b-1f97-3909-95a6-e4a0e3e503ab.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 158.247.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:80:d1:96:28:c0:28:2c:76:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=de16e2e1-a5d3-4d42-9b78-a55988d49f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:13:f4:00:87:dc:0c:44:4b:c8:4a:65:5c: 3d:1f:c3:f6:0d:23:e2:32:c5:83:0f:9a:88:9a:20: ec:77:7f:ee:00:a6:25:de:78:01:de:0a:2d:d1:27: 28:f7:c5:10:10:f9:8f:9f:6c:a4:de:5b:98:72:19: bc:62:58:6f:7c:b3:f8:34:8e:6a:7c:e4:15:f7:07: 7f:6d:a2:7a:f7:4b:05:98:b8:78:bd:63:ca:16:6e: 49:61:cc:39:22:27:e7:6d:5c:54:78:0f:79:b9:e3: 60:44:37:63:15:00:dc:e1:38:48:7f:08:af:69:b6: 93:80:a2:a2:1f:36:cc:7e:93:81:99:69:59:8a:de: 20:8a:df:81:dc:26:7b:da:84:03:3d:ae:e8:78:85: 9b:ba:25:4d:bc:cb:b5:8e:1a:15:a1:96:b3:64:8b: e8:8e:35:50:f6:9e:e6:3d:2e:61:a4:4d:5d:21:0d: f0:fc:d1:c2:b5:22:da:0f:48:0d:46:b5:e1:01:e6: 96:10:c1:51:38:ac:e1:18:ba:31:ca:31:36:be:a2: b0:13:6a:7e:b6:10:45:1d:15:ea:a3:3f:4f:9d:5c: ab:70:c2:65:d1:ed:4c:5b:08:74:20:16:71:41:13: 48:2f:ee:56:be:72:44:91:26:e8:c9:64:21:a7:f6: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E7:17:C2:3E:AD:27:DC:B6:BA:7E:02:22:FC:B5:5A:E5:57:30:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1340615b-1f97-3909-95a6-e4a0e3e503ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 158.247.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0f:2b:1e:ef:b4:1e:c3:b7:f4:39:86:ff:8d:a9:79:a3:b7: 37:26:9f:a9:b6:a6:20:7d:65:dd:ab:81:8c:7a:4e:43:d9:2c: 87:af:ba:e3:da:e0:2a:31:e6:32:95:1e:d3:a0:0a:12:53:e8: 18:f7:50:7d:7b:37:ef:5a:92:0f:17:b0:7b:b7:3a:f4:b5:3c: f4:97:7d:c9:33:ca:70:d8:36:15:c8:14:ba:55:33:de:c9:c2: fa:cc:5d:4a:c7:98:dc:26:98:10:ff:6c:26:e4:c3:fe:f7:9d: d5:0b:cb:9d:1f:d4:1c:64:95:8d:78:c6:f2:a2:57:9a:45:f7: b5:a2:b0:5b:25:f8:af:05:2e:e0:e0:8c:80:1d:d1:fc:9e:b3: aa:ff:83:97:2b:3a:79:03:5e:03:34:2d:31:4c:b2:16:a4:8c: 0f:b9:2b:fe:60:91:76:53:4d:e5:46:15:1d:a8:d9:62:47:9a: a6:c4:8d:29:11:e6:c7:85:04:e1:d5:8c:d5:80:45:b5:ab:58: 7a:6a:11:64:b1:34:36:6d:8d:44:6c:5b:cc:a1:1f:46:f4:ac: 3c:c1:fa:51:cc:72:b2:48:d1:90:c6:92:9c:32:62:38:50:70: fa:fc:ae:c3:80:0c:f1:b3:d5:6e:ca:e6:db:38:79:31:a9:df: bc:01:04:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3IDRlijAKCx2+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGUxNmUyZTEtYTVkMy00ZDQyLTliNzgtYTU1OTg4ZDQ5ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhcT9ACH3AxES8hKZVw9H8P2DSPiMsWDD5qI miDsd3/uAKYl3ngB3got0Sco98UQEPmPn2yk3luYchm8YlhvfLP4NI5qfOQV9wd/ baJ690sFmLh4vWPKFm5JYcw5IifnbVxUeA95ueNgRDdjFQDc4ThIfwivabaTgKKi HzbMfpOBmWlZit4git+B3CZ72oQDPa7oeIWbuiVNvMu1jhoVoZazZIvojjVQ9p7m PS5hpE1dIQ3w/NHCtSLaD0gNRrXhAeaWEMFROKzhGLoxyjE2vqKwE2p+thBFHRXq oz9PnVyrcMJl0e1MWwh0IBZxQRNIL+5WvnJEkSboyWQhp/b9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7nF8I+rSfctrp+AiL8tVrlVzDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMTM0MDYxNWItMWY5Ny0z OTA5LTk1YTYtZTRhMGUzZTUwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnvdNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEPKx7vtB7Dt/Q5hv+NqXmjtzcmn6m2piB9Zd2rgYx6TkPZLIevuuPa 4Cox5jKVHtOgChJT6Bj3UH17N+9akg8XsHu3OvS1PPSXfckzynDYNhXIFLpVM97J wvrMXUrHmNwmmBD/bCbkw/73ndULy50f1BxklY14xvKiV5pF97WisFsl+K8FLuDg jIAd0fyes6r/g5crOnkDXgM0LTFMshakjA+5K/5gkXZTTeVGFR2o2WJHmqbEjSkR 5seFBOHVjNWARbWrWHpqEWSxNDZtjURsW8yhH0b0rDzB+lHMcrJI0ZDGkpwyYjhQ cPr8rsOADPGz1W7K5ts4eTGp37wBBNo= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:30 2025 by rpki-client