$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/acbbae28-c6e0-34cb-892d-d1b045ba028e.roa File: acbbae28-c6e0-34cb-892d-d1b045ba028e.roa (raw, json) Hash identifier: 9AY3Vp4mMIG9tner4onkYmHTyy+7wL1gs9E56RXzvTc= Subject key identifier: F8:DF:4D:BB:36:D8:6E:C3:CA:20:CE:00:3A:CC:5F:5F:C5:E5:A3:45 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7CCE50DFD0EF5B693800 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/acbbae28-c6e0-34cb-892d-d1b045ba028e.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 140.82.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7c:ce:50:df:d0:ef:5b:69:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=cf3777d4-62e5-44bb-8291-906e7633ba88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2a:e3:fe:7f:d8:b9:43:df:4c:0a:dc:36:54: 01:f2:f3:ac:2a:a2:ef:8c:1e:11:52:7e:42:1c:01: 6b:70:87:cf:e9:a6:10:70:c9:81:c2:26:93:ac:7a: 1d:ca:a3:28:08:47:b5:b7:9c:ab:df:2e:17:c0:cc: e0:57:d4:da:99:3b:a5:b7:9d:4e:f3:87:23:38:e0: ea:c7:60:0d:50:55:2c:a6:15:ae:48:19:cc:f6:6a: 14:b0:6a:33:d9:d0:60:79:70:b6:a3:5e:d7:b3:39: 23:a0:8c:0a:94:2a:79:b0:10:22:00:76:b9:28:3c: 07:b8:10:b2:c2:a1:cb:6b:df:29:63:3c:5c:24:39: 07:e1:c5:5f:30:b7:40:c3:f3:a2:86:61:59:50:7c: 60:94:9e:50:e8:bf:a6:43:f4:c5:c3:f3:dc:22:fe: 8a:ec:64:7b:e7:af:fc:5e:bb:65:96:d1:5d:fb:38: b2:3f:ba:a2:0b:06:1f:ec:2a:02:4d:88:a3:c4:30: 4a:ef:1f:35:b9:98:1e:4c:ee:93:0c:34:60:0b:6b: a1:2b:23:cd:79:cd:6f:32:20:c2:7e:88:dc:29:8d: c3:f5:47:c0:47:78:0c:f9:e3:0c:21:48:1b:c7:7f: 39:7a:7f:ed:ac:61:d3:5d:a6:d9:c3:37:7b:b0:c9: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DF:4D:BB:36:D8:6E:C3:CA:20:CE:00:3A:CC:5F:5F:C5:E5:A3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/acbbae28-c6e0-34cb-892d-d1b045ba028e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:5b:1b:22:36:f8:de:68:6a:66:25:e4:49:b2:f5:d2:67:9a: e8:bf:1e:77:a9:54:2b:6b:9d:89:bf:64:6e:ec:ac:85:21:c8: e6:0c:ca:72:de:d9:2e:87:19:60:c3:38:4e:85:55:39:98:38: 4f:ee:35:d6:f9:89:19:64:3e:90:82:89:38:cc:dd:2e:05:72: da:df:b8:b7:d8:65:24:37:ac:ea:50:1f:ca:57:35:3e:b2:e6: 30:1c:25:a3:fe:42:4d:b1:55:fe:7c:6d:5f:df:11:ab:c9:0c: ba:57:0a:68:67:28:1d:88:77:6b:24:0b:12:1c:b3:ce:03:eb: 32:65:8a:c5:21:b4:4b:83:64:32:02:7f:cd:9c:d6:7b:41:30: c6:d7:f1:54:e8:83:fb:0b:66:ef:15:5f:02:e9:0b:9c:2e:16: 5f:fb:c7:79:a4:9a:da:cc:fb:bc:02:90:44:73:c4:a1:71:54: 7f:71:7d:5d:80:d8:db:9c:92:c0:8f:64:df:1e:25:ab:6b:16: e1:fc:e4:e5:f7:f7:e8:c5:38:3d:43:87:70:2c:98:a6:89:87: 74:c4:e5:5c:d0:6b:be:d6:cc:99:89:57:30:83:14:54:51:6b: 9d:da:db:29:ac:bb:61:b1:56:fc:8a:76:39:f8:84:9c:1b:ec: 17:7b:64:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HzOUN/Q71tpOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2YzNzc3ZDQtNjJlNS00NGJiLTgyOTEtOTA2ZTc2MzNiYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlirj/n/YuUPfTArcNlQB8vOsKqLvjB4RUn5C HAFrcIfP6aYQcMmBwiaTrHodyqMoCEe1t5yr3y4XwMzgV9TamTult51O84cjOODq x2ANUFUsphWuSBnM9moUsGoz2dBgeXC2o17XszkjoIwKlCp5sBAiAHa5KDwHuBCy wqHLa98pYzxcJDkH4cVfMLdAw/OihmFZUHxglJ5Q6L+mQ/TFw/PcIv6K7GR756/8 XrtlltFd+ziyP7qiCwYf7CoCTYijxDBK7x81uZgeTO6TDDRgC2uhKyPNec1vMiDC fojcKY3D9UfAR3gM+eMMIUgbx385en/trGHTXabZwzd7sMkoxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjfTbs22G7DyiDOADrMX1/F5aNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYWNiYmFlMjgtYzZlMC0z NGNiLTg5MmQtZDFiMDQ1YmEwMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItbGyI2+N5oamYl5Emy9dJnmui/HnepVCtrnYm/ZG7srIUhyOYMynLe 2S6HGWDDOE6FVTmYOE/uNdb5iRlkPpCCiTjM3S4FctrfuLfYZSQ3rOpQH8pXNT6y 5jAcJaP+Qk2xVf58bV/fEavJDLpXCmhnKB2Id2skCxIcs84D6zJlisUhtEuDZDIC f82c1ntBMMbX8VTog/sLZu8VXwLpC5wuFl/7x3mkmtrM+7wCkERzxKFxVH9xfV2A 2NucksCPZN8eJatrFuH85OX39+jFOD1Dh3AsmKaJh3TE5VzQa77WzJmJVzCDFFRR a53a2ymsu2GxVvyKdjn4hJwb7Bd7ZOs= -----END CERTIFICATE-----Generated at Thu Oct 9 11:09:36 2025 by rpki-client