$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa File: ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa (raw, json) Hash identifier: pUfLhN1JBiEEBAbZVIvhQEAejV9/iBKUNa4WHWdYa+I= Subject key identifier: D0:47:0D:53:20:5D:CE:CE:90:EA:9F:27:85:12:53:21:7C:8D:B6:0F Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B44B1B4DCB57944A16FCBE700 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 15164 IP address blocks: 138.199.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b4:dc:b5:79:44:a1:6f:cb:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=36d6c0cc-3843-4b8a-9a87-ebe2100d8aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3e:3a:3e:ae:47:8c:f1:62:58:3e:3c:c0:0c: 41:34:bb:9b:a8:12:39:c9:19:05:ab:4c:92:c8:84: e7:e3:e6:a2:f5:9c:43:ab:91:93:98:47:28:ca:9f: 3a:7f:8b:ff:f0:2d:f4:22:b6:31:fd:5f:0e:4f:0e: 1b:73:e8:4c:34:e4:a5:39:cc:62:77:af:d0:48:4c: 70:f3:2f:54:33:73:90:84:cf:a8:39:56:97:a7:01: 6e:d8:21:a2:bf:5e:aa:b9:df:8f:e2:6e:3c:ed:14: 79:6f:33:c4:98:d2:fe:99:68:3c:30:32:27:36:03: 4f:21:9f:a0:98:91:af:2a:ea:ae:44:1e:b9:b6:2e: 0c:6d:f1:a5:9d:8f:67:47:3e:7d:59:df:7d:63:4a: 69:0d:7a:6b:1d:6f:0f:51:04:81:c3:24:40:3e:c8: ed:98:fd:24:81:ee:57:55:00:45:7b:5a:e7:ec:18: ae:69:ba:bb:e9:5e:86:49:39:be:de:64:76:23:57: 56:48:4a:24:8c:51:17:ce:15:ff:35:c8:b5:b2:50: 01:57:e5:15:6e:8e:cf:b7:9b:af:b5:e5:cb:a8:c4: 4c:92:60:3a:9a:14:68:fc:a3:dd:06:1b:59:c5:45: 42:6f:c9:0c:67:a4:73:e5:2d:3e:da:f6:4f:b6:d6: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:47:0D:53:20:5D:CE:CE:90:EA:9F:27:85:12:53:21:7C:8D:B6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ae5d7b83-4b48-33b2-a0c2-ab030b3473f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bd:78:30:aa:99:27:69:df:bd:b2:4f:7b:12:d8:91:e3:39: a9:89:46:e2:90:b7:7b:c9:af:ca:1c:25:05:b7:49:3d:3f:46: 54:8b:21:74:3c:53:8d:e0:88:ac:06:73:43:47:bc:0f:cd:b6: 0e:85:dc:89:0c:55:54:31:3c:75:2a:8c:c0:44:5c:cb:01:92: bd:df:9f:36:36:e4:9b:81:79:fa:cb:36:a5:f2:f8:84:44:68: a7:3c:30:d5:7e:31:16:5c:d3:ad:5e:6a:3f:39:28:dc:f6:da: 08:05:45:ff:7a:ac:1c:f2:55:a5:4b:10:53:20:1a:e1:2d:bd: a7:d6:0f:c5:55:73:14:ab:33:84:5f:bb:9a:eb:5f:9f:02:07: 1a:dd:07:54:5f:c9:9c:7e:47:5d:d4:47:cc:5f:25:c6:4d:b9: 35:71:57:f5:09:98:f3:55:6b:47:bd:fe:13:da:b6:2f:ed:11: 0b:3a:8f:4c:d2:d4:8a:62:48:0d:a4:db:7a:84:84:c9:54:09: 41:67:00:ff:69:81:d2:9d:d8:cf:9f:93:de:29:8a:34:ce:40: 50:f0:4a:cd:7b:1d:4f:f5:50:88:4b:52:16:66:9a:bb:6d:5e: ab:de:86:86:78:cd:a1:61:ed:46:46:b0:3e:32:28:a2:3c:8d: 19:28:d7:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbTctXlEoW/L5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MzZkNmMwY2MtMzg0My00YjhhLTlhODctZWJlMjEwMGQ4YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+z46Pq5HjPFiWD48wAxBNLubqBI5yRkFq0yS yITn4+ai9ZxDq5GTmEcoyp86f4v/8C30IrYx/V8OTw4bc+hMNOSlOcxid6/QSExw 8y9UM3OQhM+oOVaXpwFu2CGiv16qud+P4m487RR5bzPEmNL+mWg8MDInNgNPIZ+g mJGvKuquRB65ti4MbfGlnY9nRz59Wd99Y0ppDXprHW8PUQSBwyRAPsjtmP0kge5X VQBFe1rn7Biuabq76V6GSTm+3mR2I1dWSEokjFEXzhX/Nci1slABV+UVbo7Pt5uv teXLqMRMkmA6mhRo/KPdBhtZxUVCb8kMZ6Rz5S0+2vZPtta1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBHDVMgXc7OkOqfJ4USUyF8jbYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYWU1ZDdiODMtNGI0OC0z M2IyLWEwYzItYWIwMzBiMzQ3M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG29eDCqmSdp372yT3sS2JHjOamJRuKQt3vJr8ocJQW3ST0/RlSLIXQ8 U43giKwGc0NHvA/Ntg6F3IkMVVQxPHUqjMBEXMsBkr3fnzY25JuBefrLNqXy+IRE aKc8MNV+MRZc061eaj85KNz22ggFRf96rBzyVaVLEFMgGuEtvafWD8VVcxSrM4Rf u5rrX58CBxrdB1RfyZx+R13UR8xfJcZNuTVxV/UJmPNVa0e9/hPati/tEQs6j0zS 1IpiSA2k23qEhMlUCUFnAP9pgdKd2M+fk94pijTOQFDwSs17HU/1UIhLUhZmmrtt XqvehoZ4zaFh7UZGsD4yKKI8jRko1y4= -----END CERTIFICATE-----Generated at Thu Oct 9 11:07:34 2025 by rpki-client