$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/564fa559-cdf2-3923-b4e2-bf8bcf342ffa.roa File: 564fa559-cdf2-3923-b4e2-bf8bcf342ffa.roa (raw, json) Hash identifier: 3ryS+NnAjJD0FdmM7qlULYQEmDh1VxOHhVp+NkTesHA= Subject key identifier: C2:4C:10:68:10:83:A5:13:33:29:AA:6C:31:76:D1:3D:27:70:3C:E9 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B44B1C1D25C3422D08BFB9840 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/564fa559-cdf2-3923-b4e2-bf8bcf342ffa.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 15164 IP address blocks: 138.199.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c1:d2:5c:34:22:d0:8b:fb:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=c8bea869-090f-4c11-89c0-3584e9103c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5c:a0:1e:e3:18:70:a7:96:2b:59:37:3c:af: 4d:63:b2:44:38:72:4f:72:8a:c0:69:0a:e6:e0:0a: 0c:3e:3c:3f:ce:11:8c:0a:f2:8a:ed:68:1c:77:11: 12:d7:95:5d:4e:63:d7:ef:b0:e6:a2:97:64:76:60: e6:c9:05:37:4f:41:bd:be:bf:26:eb:25:c5:de:68: 07:78:d9:6f:ba:26:c2:a9:c4:05:62:c7:1f:36:1d: 5d:c2:d0:b5:8a:f1:e6:01:98:e8:2b:86:22:19:5a: 57:39:d8:8c:04:cf:b9:f2:e0:91:87:cb:15:0b:25: b7:04:f2:75:cc:98:49:63:96:72:cf:9e:50:ac:04: f8:c7:0e:fa:e7:42:d5:02:ad:c7:ff:59:50:88:29: 0b:32:49:b7:30:9e:5d:2a:80:b5:0a:e6:ec:73:be: 95:84:be:9d:0b:c2:36:92:db:37:69:ad:02:4c:90: 9f:6a:5d:69:d1:cf:ae:d1:b5:90:e5:34:c1:0f:a9: 91:9f:99:d0:82:5e:21:8d:fb:40:64:5f:16:61:10: ce:35:ad:be:af:eb:b6:b4:9d:a3:84:de:b8:24:68: 40:11:af:71:56:61:d6:9d:42:50:2a:7b:d2:47:c4: 1e:62:20:d7:cf:32:8c:ee:d0:b5:ed:59:7c:fb:c1: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4C:10:68:10:83:A5:13:33:29:AA:6C:31:76:D1:3D:27:70:3C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/564fa559-cdf2-3923-b4e2-bf8bcf342ffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:40:5e:6f:21:8a:68:0a:45:04:a7:b7:73:03:94:7e:68:d5: dd:19:41:52:a7:e6:eb:c3:6f:33:f7:4e:84:28:7f:58:7d:50: 8b:be:17:22:3b:74:ab:3f:c6:c6:80:1e:03:a8:6e:b3:d8:a0: 6a:0d:8f:37:4a:85:bd:77:de:0e:4a:b2:ed:6f:3d:3b:74:29: 2e:fc:ac:ef:0b:ed:5e:0f:2d:ac:3a:6d:4d:82:35:62:de:1c: 70:8a:85:82:c5:5b:63:6b:fd:77:85:15:cd:ca:8e:fb:cc:5e: bb:36:f6:d3:0d:7a:34:62:4c:37:ef:6b:6c:93:37:ae:eb:16: 67:c1:ce:1f:70:9b:ee:ef:b9:62:82:05:09:46:6f:d1:a5:9b: 2e:8f:fc:9d:86:2c:e4:27:d7:3f:79:f3:ed:28:45:db:57:be: 92:0f:da:92:3e:f6:ba:17:63:82:8a:66:80:19:c7:d1:1b:68: ba:bb:67:e6:af:35:90:25:03:81:8b:ff:e0:16:09:82:56:b2: e3:ee:23:d0:27:cc:91:c2:62:10:3a:9b:51:55:6e:3b:92:8e: 90:01:4f:4f:a8:c0:de:a5:c4:63:72:11:a9:19:42:3e:1a:e2: 23:07:84:3a:1b:94:42:1f:3c:31:13:85:75:68:5d:7e:87:84: 4f:5d:aa:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscHSXDQi0Iv7mEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk YzhiZWE4NjktMDkwZi00YzExLTg5YzAtMzU4NGU5MTAzYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlygHuMYcKeWK1k3PK9NY7JEOHJPcorAaQrm 4AoMPjw/zhGMCvKK7WgcdxES15VdTmPX77DmopdkdmDmyQU3T0G9vr8m6yXF3mgH eNlvuibCqcQFYscfNh1dwtC1ivHmAZjoK4YiGVpXOdiMBM+58uCRh8sVCyW3BPJ1 zJhJY5Zyz55QrAT4xw7650LVAq3H/1lQiCkLMkm3MJ5dKoC1Cubsc76VhL6dC8I2 kts3aa0CTJCfal1p0c+u0bWQ5TTBD6mRn5nQgl4hjftAZF8WYRDONa2+r+u2tJ2j hN64JGhAEa9xVmHWnUJQKnvSR8QeYiDXzzKM7tC17Vl8+8GdNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJMEGgQg6UTMymqbDF20T0ncDzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTY0ZmE1NTktY2RmMi0z OTIzLWI0ZTItYmY4YmNmMzQyZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFAXm8himgKRQSnt3MDlH5o1d0ZQVKn5uvDbzP3ToQof1h9UIu+FyI7 dKs/xsaAHgOobrPYoGoNjzdKhb133g5Ksu1vPTt0KS78rO8L7V4PLaw6bU2CNWLe HHCKhYLFW2Nr/XeFFc3KjvvMXrs29tMNejRiTDfva2yTN67rFmfBzh9wm+7vuWKC BQlGb9Glmy6P/J2GLOQn1z958+0oRdtXvpIP2pI+9roXY4KKZoAZx9EbaLq7Z+av NZAlA4GL/+AWCYJWsuPuI9AnzJHCYhA6m1FVbjuSjpABT0+owN6lxGNyEakZQj4a 4iMHhDoblEIfPDEThXVoXX6HhE9dqtM= -----END CERTIFICATE-----Generated at Thu Oct 9 11:09:37 2025 by rpki-client