$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa File: 29b0a77c-0492-339d-aa9c-b106f0acf458.roa (raw, json) Hash identifier: xQNkADC3SX4jzYAyG5fyIZPbZODohId/Z98fBYNCY0o= Subject key identifier: 3E:5E:F7:D7:75:BE:03:9D:B5:7E:2A:13:E0:BA:92:42:94:5D:BA:36 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B44B1C104E51616E3C337F540 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 15164 IP address blocks: 138.199.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c1:04:e5:16:16:e3:c3:37:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=88364aec-e69a-40c2-a18d-9acb506e1f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e1:61:c1:6d:90:65:6c:ca:c2:10:f8:61:0a: e1:c1:82:77:bf:17:e4:8b:9b:57:1b:03:b0:66:82: 14:30:b0:89:5c:e0:ea:7f:2e:9c:47:74:14:7c:d2: 9e:f0:27:fc:ee:eb:48:51:6b:94:3e:c4:86:0d:4b: f8:d0:7c:f5:c4:42:5d:3c:4d:39:59:13:fe:24:28: 85:5c:97:da:4b:10:91:52:28:53:79:de:63:cb:f3: 45:3e:a1:9e:64:fe:f7:58:69:ad:21:af:8c:16:61: fc:7b:6c:4e:df:d6:77:a0:d7:b0:d9:ed:7b:84:d5: 7e:83:4c:ab:6a:3f:f3:31:91:87:d9:b2:d2:e2:1f: a3:82:c0:b8:a9:51:7a:d2:2b:b8:ce:fc:2a:ee:21: 93:3d:c7:cf:96:e0:e4:ed:26:3d:ae:ba:ab:1b:e2: a7:1a:45:05:e4:74:de:cf:9d:a7:4e:13:c3:b3:78: bb:3c:b1:90:e1:c6:37:2e:8c:be:fa:e4:c7:c9:69: 12:53:06:fb:21:35:62:8d:80:43:b1:9b:be:f3:92: 0c:65:8e:f7:a4:c8:0e:77:21:12:e6:1c:3b:42:72: 4a:87:3c:3d:6a:af:08:f7:21:1d:e8:eb:77:25:fc: 51:d1:95:f4:ae:3d:03:c0:8c:ea:d9:db:ed:08:c8: 63:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5E:F7:D7:75:BE:03:9D:B5:7E:2A:13:E0:BA:92:42:94:5D:BA:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6c:ee:58:2e:f2:81:a6:c6:e9:8a:87:06:83:a6:5f:79:a1: 6e:52:77:9e:51:05:e9:ef:71:73:26:93:7c:05:64:39:f9:8f: 7f:18:95:2f:43:40:7e:99:73:76:8e:47:b3:5a:ed:11:de:a5: 3c:65:4a:ea:f7:4d:bb:54:35:c7:1b:8e:48:73:47:bb:4c:48: 7b:b6:c8:b5:1e:ea:53:d1:88:1b:7a:8b:40:e9:28:6a:42:4d: 82:6c:8d:64:bf:06:76:b3:e3:c6:bf:2c:e1:b1:a7:0b:f2:74: 2f:29:59:23:74:8e:bd:6b:23:ef:42:bb:b5:b1:64:d2:9c:c2: 8b:d2:8c:b6:62:9c:0e:2e:f2:8a:88:23:94:79:3f:c7:0c:a0: 96:c8:aa:23:9b:27:9d:2c:8b:11:6e:93:c5:06:92:5b:fc:8e: 91:41:2c:7a:c6:4f:bc:2a:0c:07:7a:c4:a9:85:1b:0f:fb:96: a8:4f:24:94:29:8d:fb:c4:13:09:5a:35:bc:af:d3:8f:ae:7f: 29:6e:30:e8:67:08:8c:12:f7:39:ee:c8:a1:10:ad:d1:25:42: 56:51:bb:5b:fa:3a:b8:6b:46:ab:07:55:9e:1d:9d:48:7c:3c: dd:0c:49:83:aa:9c:82:01:cc:b1:ea:42:09:d7:8c:90:1d:9b: 9b:e7:65:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscEE5RYW48M39UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk ODgzNjRhZWMtZTY5YS00MGMyLWExOGQtOWFjYjUwNmUxZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuFhwW2QZWzKwhD4YQrhwYJ3vxfki5tXGwOw ZoIUMLCJXODqfy6cR3QUfNKe8Cf87utIUWuUPsSGDUv40Hz1xEJdPE05WRP+JCiF XJfaSxCRUihTed5jy/NFPqGeZP73WGmtIa+MFmH8e2xO39Z3oNew2e17hNV+g0yr aj/zMZGH2bLS4h+jgsC4qVF60iu4zvwq7iGTPcfPluDk7SY9rrqrG+KnGkUF5HTe z52nThPDs3i7PLGQ4cY3Loy++uTHyWkSUwb7ITVijYBDsZu+85IMZY73pMgOdyES 5hw7QnJKhzw9aq8I9yEd6Ot3JfxR0ZX0rj0DwIzq2dvtCMhjBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5e99d1vgOdtX4qE+C6kkKUXbo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjliMGE3N2MtMDQ5Mi0z MzlkLWFhOWMtYjEwNmYwYWNmNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRs7lgu8oGmxumKhwaDpl95oW5Sd55RBenvcXMmk3wFZDn5j38YlS9D QH6Zc3aOR7Na7RHepTxlSur3TbtUNccbjkhzR7tMSHu2yLUe6lPRiBt6i0DpKGpC TYJsjWS/Bnaz48a/LOGxpwvydC8pWSN0jr1rI+9Cu7WxZNKcwovSjLZinA4u8oqI I5R5P8cMoJbIqiObJ50sixFuk8UGklv8jpFBLHrGT7wqDAd6xKmFGw/7lqhPJJQp jfvEEwlaNbyv04+ufyluMOhnCIwS9znuyKEQrdElQlZRu1v6OrhrRqsHVZ4dnUh8 PN0MSYOqnIIBzLHqQgnXjJAdm5vnZW8= -----END CERTIFICATE-----Generated at Thu Oct 9 11:07:32 2025 by rpki-client