$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa File: 5d3cc9ef-4f92-3787-8755-b634d19dda46.roa (raw, json) Hash identifier: VrIIXRQ8WHOAfhk7anK/6LzW1f0w+MapP9gic8T0fx8= Subject key identifier: 6D:A4:EB:6F:02:AE:34:1C:10:43:21:CA:B1:F0:EC:88:DD:81:1E:06 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B44B1C0A00E611EE2A965E5F4 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 15164 IP address blocks: 138.199.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c0:a0:0e:61:1e:e2:a9:65:e5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=9c690369-6c46-4065-859d-bcd95fea6d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:a5:ff:53:33:28:bc:40:ef:2e:cd:77:f6: c9:63:e8:b7:90:99:a0:48:35:fa:f7:85:35:17:e5: eb:18:64:53:f9:9a:1c:e5:90:18:b2:09:89:45:44: 0b:ee:67:57:e0:20:d6:8c:9f:c0:99:dc:56:a6:e2: e7:2e:c3:dc:cc:a6:41:8c:b0:bb:5e:68:60:9c:0f: e7:ac:a6:f0:8c:c9:8e:25:38:ee:9b:24:57:07:ab: a9:1b:ef:43:06:5c:08:7f:a8:3c:4a:6c:02:90:6e: 0a:a3:4c:fa:3b:19:77:6e:2b:a0:eb:53:de:ed:89: 74:c9:28:db:46:f3:f0:23:3d:2d:f9:1a:56:92:2f: 9b:0e:8e:e9:a0:86:30:67:dd:59:6a:31:6a:fe:72: 26:92:b7:7e:10:84:c7:53:17:e2:f0:fb:28:e7:8d: 18:05:eb:27:af:5e:34:10:a2:ac:59:d1:9d:cd:54: 3b:9e:cb:5b:76:6a:b0:fe:e5:57:57:e3:b4:ca:83: 60:83:5a:f1:50:06:27:bf:cb:6f:61:98:a0:50:af: d5:07:c6:ea:94:94:f6:8c:db:b3:13:a8:d9:13:cd: 26:5c:73:e8:5d:bf:91:d6:ca:84:3f:67:ee:cf:5c: 85:b3:b7:b4:dc:94:f3:e8:f3:15:15:7e:e2:da:6c: 05:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A4:EB:6F:02:AE:34:1C:10:43:21:CA:B1:F0:EC:88:DD:81:1E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5d3cc9ef-4f92-3787-8755-b634d19dda46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c7:75:20:48:89:a3:97:45:9b:6f:c7:df:0b:45:f8:75:f7: 57:52:06:3c:9e:38:82:b6:1d:3c:52:b5:24:2e:29:fe:67:30: 2c:c1:28:5e:0c:10:d4:61:83:ad:6a:7a:bd:9d:4e:ba:40:eb: e8:cb:99:32:51:37:49:36:4b:8e:65:f6:5e:e8:9c:84:92:9b: 14:cb:69:c3:05:5a:5d:7c:ce:cf:b8:d1:7d:91:f9:25:2c:6d: a2:44:cd:96:4c:57:bb:ec:fe:93:55:d8:a5:a6:5e:59:86:e0: 3d:b9:1c:32:19:32:56:89:1d:60:7b:04:45:b7:74:2d:c7:02: ef:b4:a6:a3:bf:35:09:3a:71:92:05:d0:d7:12:cc:48:2f:24: a4:3a:cd:a8:7a:a2:0d:ab:54:ea:e7:6f:6c:45:fc:2f:16:82: 07:49:c7:26:32:76:18:29:62:3b:cc:34:dd:33:40:a1:2e:15: e0:df:e0:83:00:3d:4b:f6:95:ae:46:61:5d:1a:f0:96:60:7a: 84:dc:5c:9f:cd:2b:1e:78:3f:10:b7:f2:00:31:ab:b5:1b:02: 37:52:36:aa:35:9d:e8:35:18:9e:5e:1e:68:5c:9a:37:9c:ce: 43:95:10:52:53:96:cc:79:18:d6:e5:1b:db:41:16:3b:eb:26: ff:99:98:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscCgDmEe4qll5fQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk OWM2OTAzNjktNmM0Ni00MDY1LTg1OWQtYmNkOTVmZWE2ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7ql/1MzKLxA7y7Nd/bJY+i3kJmgSDX694U1 F+XrGGRT+Zoc5ZAYsgmJRUQL7mdX4CDWjJ/AmdxWpuLnLsPczKZBjLC7XmhgnA/n rKbwjMmOJTjumyRXB6upG+9DBlwIf6g8SmwCkG4Ko0z6Oxl3biug61Pe7Yl0ySjb RvPwIz0t+RpWki+bDo7poIYwZ91ZajFq/nImkrd+EITHUxfi8Pso540YBesnr140 EKKsWdGdzVQ7nstbdmqw/uVXV+O0yoNgg1rxUAYnv8tvYZigUK/VB8bqlJT2jNuz E6jZE80mXHPoXb+R1sqEP2fuz1yFs7e03JTz6PMVFX7i2mwF4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2k628CrjQcEEMhyrHw7IjdgR4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNWQzY2M5ZWYtNGY5Mi0z Nzg3LTg3NTUtYjYzNGQxOWRkYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisd+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHHdSBIiaOXRZtvx98LRfh191dSBjyeOIK2HTxStSQuKf5nMCzBKF4M ENRhg61qer2dTrpA6+jLmTJRN0k2S45l9l7onISSmxTLacMFWl18zs+40X2R+SUs baJEzZZMV7vs/pNV2KWmXlmG4D25HDIZMlaJHWB7BEW3dC3HAu+0pqO/NQk6cZIF 0NcSzEgvJKQ6zah6og2rVOrnb2xF/C8WggdJxyYydhgpYjvMNN0zQKEuFeDf4IMA PUv2la5GYV0a8JZgeoTcXJ/NKx54PxC38gAxq7UbAjdSNqo1neg1GJ5eHmhcmjec zkOVEFJTlsx5GNblG9tBFjvrJv+ZmHE= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:29 2025 by rpki-client