$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa File: a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa (raw, json) Hash identifier: ursxZ4dUDpI2/W2/suJUY9w7FgaPB3W4i9mgxwwgr54= Subject key identifier: 9C:63:89:C1:4A:58:FA:CC:E4:30:62:15:07:B2:9B:0A:21:24:91:BB Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC72D7B714D0D6EBE3D740 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 199.200.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:72:d7:b7:14:d0:d6:eb:e3:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=bc456359-242a-459d-b12b-9578db275f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:64:6f:8e:39:7a:e4:c2:28:0e:92:59:ab: e8:fa:b2:c1:8c:9e:34:d8:9e:30:f0:55:d1:d1:aa: 3d:f9:5b:2e:de:ba:be:38:3b:73:d5:a2:fb:ff:9d: 37:13:61:f4:ec:47:09:01:7b:a0:c8:42:20:14:84: 74:0f:da:95:9f:aa:f7:de:44:46:13:51:4b:e2:f7: 5c:a2:a3:14:33:6c:67:11:96:06:6a:ca:57:4e:95: 2e:d6:c3:3d:12:c5:8b:87:33:ec:be:c2:5d:55:c8: f1:c9:88:1d:ba:f3:d5:5d:e9:b1:1e:4d:da:ef:ba: 1e:e4:5f:91:a4:90:9c:9e:5d:2e:7c:ab:77:c1:3c: be:58:7f:b6:49:21:4b:e5:bd:2b:c2:6c:e9:80:0e: df:c0:fc:57:12:a0:a7:c4:10:1e:cc:7e:6e:a4:86: 56:e1:65:15:9c:4a:8a:d5:86:63:bf:56:f7:9a:2c: 6e:df:c3:c9:69:ab:f1:12:11:8f:18:91:55:7f:89: 6d:26:9e:dc:f8:44:48:8b:39:fe:f5:1c:61:91:8c: d9:4c:9d:77:63:5b:6b:04:fc:f8:1d:e8:b1:97:30: 1b:80:98:eb:29:da:f8:2b:40:c4:07:7d:b6:10:59: e8:20:72:39:8e:a9:a1:6f:46:a3:27:4f:04:0c:81: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:63:89:C1:4A:58:FA:CC:E4:30:62:15:07:B2:9B:0A:21:24:91:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e4:0b:ce:f5:49:19:46:0b:55:eb:31:e6:9a:9a:4d:40:fc: 17:59:41:61:c7:69:e3:3a:c7:45:40:e4:b0:96:80:8f:7d:db: 93:4b:31:d3:37:cf:86:b0:55:86:9b:d3:7b:4c:67:32:18:be: 35:89:83:f9:a4:a8:ed:c2:83:3e:12:2e:44:2f:7d:61:2c:5d: 2e:9c:76:cb:2d:76:f5:c9:5d:5b:dd:d8:f8:9b:92:e2:9e:9f: b0:75:ea:bc:54:61:dc:55:95:a3:f7:42:04:c5:dc:c7:dc:6f: 0b:9c:64:dc:06:0a:b3:cd:05:f7:a2:44:f3:b8:77:ab:33:35: d6:86:53:1c:be:49:54:ac:57:51:7a:21:02:fa:6e:91:8a:87: 0d:fd:67:03:e7:c6:c5:5c:83:45:0b:cc:4b:c4:f6:0e:00:f0: 4c:c4:7b:1e:d1:d3:83:9b:fd:66:6d:a2:2c:db:6e:b7:9d:43: 70:10:fa:a7:c6:72:62:e8:36:df:1f:ce:26:c8:f1:31:f4:38: 0c:84:f6:8d:c0:a2:a3:fd:77:51:f7:45:15:36:65:03:bc:af: 0b:89:6a:3f:22:ba:38:9d:5b:e4:5e:16:62:a9:d8:9c:24:3a: 55:51:ad:b2:1f:82:1c:9a:27:ad:65:a5:1f:14:55:8a:de:32: de:84:bd:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HLXtxTQ1uvj10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YmM0NTYzNTktMjQyYS00NTlkLWIxMmItOTU3OGRiMjc1ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P9kb445euTCKA6SWavo+rLBjJ402J4w8FXR 0ao9+Vsu3rq+ODtz1aL7/503E2H07EcJAXugyEIgFIR0D9qVn6r33kRGE1FL4vdc oqMUM2xnEZYGaspXTpUu1sM9EsWLhzPsvsJdVcjxyYgduvPVXemxHk3a77oe5F+R pJCcnl0ufKt3wTy+WH+2SSFL5b0rwmzpgA7fwPxXEqCnxBAezH5upIZW4WUVnEqK 1YZjv1b3mixu38PJaavxEhGPGJFVf4ltJp7c+ERIizn+9RxhkYzZTJ13Y1trBPz4 HeixlzAbgJjrKdr4K0DEB322EFnoIHI5jqmhb0ajJ08EDIH9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxjicFKWPrM5DBiFQeymwohJJG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTE4ZmZhZWUtMmUwZS0z ZjY3LTljNmYtNTJlNmY4OWJiZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTkC871SRlGC1XrMeaamk1A/BdZQWHHaeM6x0VA5LCWgI9925NLMdM3 z4awVYab03tMZzIYvjWJg/mkqO3Cgz4SLkQvfWEsXS6cdsstdvXJXVvd2PibkuKe n7B16rxUYdxVlaP3QgTF3MfcbwucZNwGCrPNBfeiRPO4d6szNdaGUxy+SVSsV1F6 IQL6bpGKhw39ZwPnxsVcg0ULzEvE9g4A8EzEex7R04Ob/WZtoizbbredQ3AQ+qfG cmLoNt8fzibI8TH0OAyE9o3AoqP9d1H3RRU2ZQO8rwuJaj8iujidW+ReFmKp2Jwk OlVRrbIfghyaJ61lpR8UVYreMt6EvUg= -----END CERTIFICATE-----Generated at Thu Oct 9 11:07:33 2025 by rpki-client