$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/27f09594-e78a-3022-b223-cd9ae76c00da.roa File: 27f09594-e78a-3022-b223-cd9ae76c00da.roa (raw, json) Hash identifier: axv3MN4q14yasUYBoD7rYPSN7g++Kzj+I0X+3F0hXhk= Subject key identifier: 03:B4:E3:5A:34:44:12:FF:FD:B4:56:FB:41:3D:B2:37:BA:B9:1A:23 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B44B1B4B8E7A814730F8A988E Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/27f09594-e78a-3022-b223-cd9ae76c00da.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 15164 IP address blocks: 138.199.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b4:b8:e7:a8:14:73:0f:8a:98:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=b1a4e593-b50d-490f-b614-cffe738e7a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:40:c4:b0:cf:70:ee:74:05:46:e7:1a:35:0f: 36:8c:b0:26:13:c0:c1:32:4b:f1:65:fc:91:13:71: 49:18:ed:4a:fb:63:bf:81:8a:e0:03:20:7d:95:4d: e2:87:03:01:a8:83:aa:82:9a:ff:00:1b:9f:3c:5b: d7:1e:b9:86:c6:7d:7c:32:c1:b4:1a:28:7f:04:71: e0:e1:6b:68:1c:f2:93:86:6a:af:46:c9:c0:c6:31: 35:d1:7d:46:cf:00:b1:14:29:8b:88:db:80:b8:92: 86:9d:c5:25:57:6f:b7:7b:53:af:ae:c2:cd:57:2b: 42:59:bd:93:11:a0:f6:2d:13:af:0e:a2:8e:72:6a: 3e:fc:b3:33:d6:12:b6:d2:3f:3b:3a:a3:fa:62:dc: 5f:ce:42:9d:ab:b1:a3:b9:11:16:cd:68:65:dd:3d: 64:f7:93:33:2a:f1:42:63:c1:84:34:e2:70:a6:3a: 30:22:59:85:d2:2f:24:00:1d:a2:30:1d:1f:64:c9: 1c:da:33:09:06:ad:d2:db:ac:68:9a:43:5d:b6:d8: db:fa:6d:57:cf:b2:6e:57:25:4e:62:1b:b3:0b:02: 82:f9:2d:9e:60:b5:2a:b0:b8:02:ed:c4:40:34:3e: 57:95:02:04:90:fe:b7:12:10:9c:05:0d:56:f5:1b: f8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B4:E3:5A:34:44:12:FF:FD:B4:56:FB:41:3D:B2:37:BA:B9:1A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/27f09594-e78a-3022-b223-cd9ae76c00da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:de:91:18:17:41:94:a9:32:59:04:6f:59:5b:e2:e0:0f:f6: 94:be:05:76:ec:86:cd:d1:f9:68:67:fb:ce:89:c8:1b:51:ed: c3:3b:11:9b:86:0c:73:6c:f2:3c:a0:e7:a1:b5:ea:e6:dc:d2: 2e:e8:9c:43:93:2e:2d:80:e1:85:83:3d:78:cf:1e:53:f3:80: 00:cb:38:81:87:b6:fb:7f:a7:50:d7:ba:c6:ec:04:e3:14:24: cf:9c:3a:e0:56:67:01:4b:c1:8c:88:22:90:2f:93:2d:87:0b: 4f:d1:66:af:58:8d:69:bd:bc:01:73:d9:d0:02:73:e7:c8:94: 68:00:f7:61:db:5b:1f:36:52:4f:a2:8d:e9:02:89:a0:b3:3c: e2:f2:d7:c6:11:20:75:22:9a:84:94:e0:5a:44:db:98:fa:6c: b7:3b:57:44:5b:a9:82:60:b5:2a:cf:6c:28:ed:9c:3b:01:ec: cb:ad:0e:3a:86:ab:7e:02:3f:a1:ef:94:59:6d:a2:d0:e1:66: 71:30:ba:f0:1b:a7:d5:a4:88:38:5a:ff:cf:da:30:36:12:ab: 21:d1:2c:d6:96:72:08:ec:f7:11:6d:0b:48:94:77:12:3f:b1: 9c:e1:95:04:d2:3c:cc:33:94:c9:63:73:8a:b1:82:2a:a7:9d: 26:4b:a8:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbS456gUcw+KmI4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk YjFhNGU1OTMtYjUwZC00OTBmLWI2MTQtY2ZmZTczOGU3YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+kDEsM9w7nQFRucaNQ82jLAmE8DBMkvxZfyR E3FJGO1K+2O/gYrgAyB9lU3ihwMBqIOqgpr/ABufPFvXHrmGxn18MsG0Gih/BHHg 4WtoHPKThmqvRsnAxjE10X1GzwCxFCmLiNuAuJKGncUlV2+3e1OvrsLNVytCWb2T EaD2LROvDqKOcmo+/LMz1hK20j87OqP6YtxfzkKdq7GjuREWzWhl3T1k95MzKvFC Y8GENOJwpjowIlmF0i8kAB2iMB0fZMkc2jMJBq3S26xomkNdttjb+m1Xz7JuVyVO YhuzCwKC+S2eYLUqsLgC7cRAND5XlQIEkP63EhCcBQ1W9Rv4fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO041o0RBL//bRW+0E9sje6uRojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjdmMDk1OTQtZTc4YS0z MDIyLWIyMjMtY2Q5YWU3NmMwMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXekRgXQZSpMlkEb1lb4uAP9pS+BXbshs3R+Whn+86JyBtR7cM7EZuG DHNs8jyg56G16ubc0i7onEOTLi2A4YWDPXjPHlPzgADLOIGHtvt/p1DXusbsBOMU JM+cOuBWZwFLwYyIIpAvky2HC0/RZq9YjWm9vAFz2dACc+fIlGgA92HbWx82Uk+i jekCiaCzPOLy18YRIHUimoSU4FpE25j6bLc7V0RbqYJgtSrPbCjtnDsB7MutDjqG q34CP6HvlFltotDhZnEwuvAbp9WkiDha/8/aMDYSqyHRLNaWcgjs9xFtC0iUdxI/ sZzhlQTSPMwzlMljc4qxgiqnnSZLqC0= -----END CERTIFICATE-----Generated at Thu Oct 9 11:13:31 2025 by rpki-client