$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa File: afbebce4-9985-368e-9ee2-c9d9882efa72.roa (raw, json) Hash identifier: R4pYsQbthTOL0zOlPHdKyApHYW12Deo4beArP/y2n6U= Subject key identifier: 40:DA:6D:5B:F0:D8:77:10:7D:26:A3:ED:4E:84:8C:F8:BC:3B:04:90 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7DB3A14B0A4F71FDA500 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 173.244.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7d:b3:a1:4b:0a:4f:71:fd:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=60f037a9-6a4e-4e78-9921-84620f02c76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:df:18:26:56:86:ec:95:38:79:75:3f:60: dd:57:65:50:fd:b4:5e:b5:cc:50:29:99:f8:f1:28: 8e:d8:b0:0a:f7:f3:bd:2c:e6:d5:fe:41:ba:25:ea: b6:a7:13:03:23:55:e5:92:39:d8:05:ab:b1:2b:29: 24:bd:b3:d4:62:8c:0b:4f:56:7d:7d:ed:42:f4:de: 8c:c4:33:03:d3:0e:65:2e:34:d2:64:91:f0:78:24: e2:c5:a9:70:59:ba:a1:4b:86:72:e7:28:e6:f2:db: 78:95:ee:1d:d1:4e:4e:61:72:f2:44:d4:fe:0e:f4: a6:8a:ce:a2:82:35:04:57:24:02:ad:e9:07:d9:b0: 3c:be:ed:81:4d:18:4f:db:d2:e6:44:09:78:bf:77: ad:09:68:c4:52:84:e8:e8:0c:d7:0d:aa:fd:6a:17: 6f:5a:0d:9f:60:0e:66:c5:6b:7f:d2:0c:c3:5a:72: 9a:92:40:97:6c:71:bd:26:be:f2:92:86:ab:f9:ac: 68:1b:c2:ac:fa:ac:64:83:d6:99:e4:c8:f4:97:a3: 04:75:98:a5:f2:32:b5:20:dc:56:13:be:2a:b4:ec: 71:a3:9d:04:cc:11:5c:9a:4c:d0:d5:2a:45:67:54: 4c:25:86:7c:ea:50:21:46:4e:7e:2c:38:98:d3:a5: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DA:6D:5B:F0:D8:77:10:7D:26:A3:ED:4E:84:8C:F8:BC:3B:04:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cc:90:59:c8:64:67:54:8a:56:76:8e:64:66:be:15:d5:3d: ce:a2:8b:73:25:5c:e5:c0:48:51:97:b6:b5:cb:18:7a:43:ca: 60:bf:a8:15:01:4b:14:4e:fa:fe:84:31:b3:7b:40:1c:f8:31: 1b:f3:8d:5e:00:c5:93:51:cb:be:e0:1b:a9:e3:c7:e0:c2:41: ab:30:55:49:59:80:72:8b:9c:37:b8:8e:3a:83:cf:95:9f:1f: 1a:8c:95:22:f4:ee:8d:0e:ea:fe:c8:42:1c:cc:19:d6:37:9a: f2:ab:74:96:eb:e1:22:5b:1a:39:87:22:91:df:80:26:1e:b3: c0:f6:e8:9d:74:d8:17:57:44:ab:76:fe:a7:ec:b7:33:0b:fb: ec:2d:a1:36:e8:30:10:67:88:32:da:18:dc:e1:91:94:96:63: 42:20:94:70:d5:b6:d4:fc:5f:a7:0f:50:f1:06:c7:dc:fa:67: da:9e:62:72:48:ed:1e:4a:84:11:cc:ab:2a:62:60:32:7a:1c: 74:5e:9e:1e:4c:32:23:a0:c8:7c:01:b8:5d:05:4e:23:ac:3b: 17:d7:d1:71:b9:3e:cd:a0:a9:c8:29:f3:91:13:98:20:82:9c: b2:b5:7e:0a:76:a8:94:e6:8e:29:55:7a:26:d0:62:54:0e:26: 82:d3:82:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3H2zoUsKT3H9pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NjBmMDM3YTktNmE0ZS00ZTc4LTk5MjEtODQ2MjBmMDJjNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobPfGCZWhuyVOHl1P2DdV2VQ/bRetcxQKZn4 8SiO2LAK9/O9LObV/kG6Jeq2pxMDI1XlkjnYBauxKykkvbPUYowLT1Z9fe1C9N6M xDMD0w5lLjTSZJHweCTixalwWbqhS4Zy5yjm8tt4le4d0U5OYXLyRNT+DvSmis6i gjUEVyQCrekH2bA8vu2BTRhP29LmRAl4v3etCWjEUoTo6AzXDar9ahdvWg2fYA5m xWt/0gzDWnKakkCXbHG9Jr7ykoar+axoG8Ks+qxkg9aZ5Mj0l6MEdZil8jK1INxW E74qtOxxo50EzBFcmkzQ1SpFZ1RMJYZ86lAhRk5+LDiY06X/vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDabVvw2HcQfSaj7U6EjPi8OwSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYWZiZWJjZTQtOTk4NS0z NjhlLTllZTItYzlkOTg4MmVmYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjMkFnIZGdUilZ2jmRmvhXVPc6ii3MlXOXASFGXtrXLGHpDymC/qBUB SxRO+v6EMbN7QBz4MRvzjV4AxZNRy77gG6njx+DCQaswVUlZgHKLnDe4jjqDz5Wf HxqMlSL07o0O6v7IQhzMGdY3mvKrdJbr4SJbGjmHIpHfgCYes8D26J102BdXRKt2 /qfstzML++wtoTboMBBniDLaGNzhkZSWY0IglHDVttT8X6cPUPEGx9z6Z9qeYnJI 7R5KhBHMqypiYDJ6HHRenh5MMiOgyHwBuF0FTiOsOxfX0XG5Ps2gqcgp85ETmCCC nLK1fgp2qJTmjilVeibQYlQOJoLTgoM= -----END CERTIFICATE-----Generated at Thu Oct 9 11:11:17 2025 by rpki-client