$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa File: 5f99b2c0-a5d9-339c-825e-94a6f461f236.roa (raw, json) Hash identifier: 8iZmZ7nzd8QNjRgaMOBIoTXtUdqIMmNkmPBa4DrcKWo= Subject key identifier: 5B:EC:4A:25:C3:38:0F:7A:CB:F0:9C:6C:94:F7:AF:FC:B2:50:16:17 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B41E71308920164B6598EDF80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 104.218.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:13:08:92:01:64:b6:59:8e:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=354ff638-663e-4203-9e91-8309b8890bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:34:ec:2f:17:dc:8b:fa:f9:96:1d:10:eb: 9f:f9:81:c5:d1:03:10:ec:ca:fb:5e:27:84:2b:01: af:2d:da:b5:f2:60:66:62:1a:e2:03:fe:10:d7:4b: 39:66:47:98:1e:b4:da:2d:27:c2:36:cc:cf:2d:bc: 30:0b:b7:76:05:56:a2:89:35:58:4b:98:19:76:f5: 78:ca:1f:32:e8:ca:84:ec:20:ce:ee:ba:a5:81:91: 3d:48:18:e0:c9:be:f1:5e:32:25:41:fe:02:ce:2b: 42:df:84:ed:62:04:f3:fd:7e:65:07:1c:a2:16:e2: b1:d2:14:35:ef:46:86:eb:94:72:72:df:90:62:38: a0:61:8e:df:59:e5:63:fd:12:d2:c7:b8:77:27:15: b0:9b:8b:01:bc:4a:dd:d4:94:3d:97:03:dc:f8:8b: 02:b5:9b:3b:c9:32:79:d6:75:11:8f:89:ae:72:a2: 5b:66:4c:70:7d:54:33:c8:a8:db:f6:c2:e0:74:98: 3a:ff:46:3f:ad:b1:4b:5f:28:a0:74:bd:d6:e5:32: 4c:04:1f:68:b3:3f:4b:e1:c5:65:06:1b:bd:0e:7e: b8:b8:9b:a4:40:af:bc:2b:01:39:35:6b:20:56:0b: 4a:10:35:4f:af:02:fd:ef:5f:e3:15:f4:96:dc:3a: 49:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EC:4A:25:C3:38:0F:7A:CB:F0:9C:6C:94:F7:AF:FC:B2:50:16:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/5f99b2c0-a5d9-339c-825e-94a6f461f236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 104.218.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:75:48:fe:fe:f0:9d:d2:38:67:70:51:e8:36:19:24:2e:26: 13:33:5a:fd:6e:bc:86:13:bb:0e:2e:d2:57:b8:0a:24:7d:3f: db:8d:d1:75:4f:fe:c8:0e:13:80:6b:f8:1c:2c:fd:a5:c7:b0: 22:3d:13:24:93:a8:0e:ca:f9:9a:ad:ce:0c:3a:70:21:80:9b: 0e:aa:b7:c7:55:2b:be:e6:8e:57:44:06:85:d4:5c:a6:7f:73: db:5b:32:76:1f:dc:71:d5:7b:09:a9:5e:a5:92:8e:a5:0d:d3: b3:ac:22:a7:0a:27:8b:53:81:1d:75:f5:1b:6e:7f:46:89:3d: 01:9d:49:c5:98:27:2b:47:a3:9a:7c:fc:86:fa:6b:e6:0a:89: 53:80:a3:ef:4e:6d:b7:a0:d0:79:a3:26:99:8e:41:4e:ff:7b: f1:6c:1e:d7:f9:5d:94:cf:cb:8d:8a:cf:13:a9:c5:a4:d4:6f: d0:b6:75:42:3c:f5:8b:74:73:61:ae:59:bb:4d:89:f6:17:02: e5:a4:75:0c:16:8a:9a:05:03:67:3d:86:82:1c:11:e7:6b:8c: aa:04:64:93:2f:f6:4c:bd:a2:3f:2e:36:0e:4c:97:77:e2:d6: dc:fd:95:84:4d:82:4b:26:73:e0:1b:ae:ca:18:38:97:cd:2f: e9:44:c8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xMIkgFktlmO34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MzU0ZmY2MzgtNjYzZS00MjAzLTllOTEtODMwOWI4ODkwYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd007C8X3Iv6+ZYdEOuf+YHF0QMQ7Mr7XieE KwGvLdq18mBmYhriA/4Q10s5ZkeYHrTaLSfCNszPLbwwC7d2BVaiiTVYS5gZdvV4 yh8y6MqE7CDO7rqlgZE9SBjgyb7xXjIlQf4CzitC34TtYgTz/X5lBxyiFuKx0hQ1 70aG65Ryct+QYjigYY7fWeVj/RLSx7h3JxWwm4sBvErd1JQ9lwPc+IsCtZs7yTJ5 1nURj4mucqJbZkxwfVQzyKjb9sLgdJg6/0Y/rbFLXyigdL3W5TJMBB9osz9L4cVl Bhu9Dn64uJukQK+8KwE5NWsgVgtKEDVPrwL971/jFfSW3DpJlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvsSiXDOA96y/CcbJT3r/yyUBYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNWY5OWIyYzAtYTVkOS0z MzljLTgyNWUtOTRhNmY0NjFmMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ11SP7+8J3SOGdwUeg2GSQuJhMzWv1uvIYTuw4u0le4CiR9P9uN0XVP /sgOE4Br+Bws/aXHsCI9EySTqA7K+Zqtzgw6cCGAmw6qt8dVK77mjldEBoXUXKZ/ c9tbMnYf3HHVewmpXqWSjqUN07OsIqcKJ4tTgR119Rtuf0aJPQGdScWYJytHo5p8 /Ib6a+YKiVOAo+9Obbeg0HmjJpmOQU7/e/FsHtf5XZTPy42KzxOpxaTUb9C2dUI8 9Yt0c2GuWbtNifYXAuWkdQwWipoFA2c9hoIcEedrjKoEZJMv9ky9oj8uNg5Ml3fi 1tz9lYRNgksmc+AbrsoYOJfNL+lEyDE= -----END CERTIFICATE-----Generated at Thu Oct 9 11:09:06 2025 by rpki-client