$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa File: b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa (raw, json) Hash identifier: fZNgmG36BdB63P/lAz73g19mU29boNCNyi4IRBE10hM= Subject key identifier: F5:16:A9:E1:2C:D2:AF:69:BA:A0:1B:C4:5A:00:CE:51:34:FA:A4:88 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC809E9E796851C961C8C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 140.82.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:80:9e:9e:79:68:51:c9:61:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=45e6e1bd-5b92-4cc4-8d48-1e4c5a7f31a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c1:de:0c:60:cf:7a:e7:87:30:c9:a1:be:0e: 24:aa:b9:89:fe:35:ee:4a:e7:0b:60:e9:10:b0:f6: f9:73:d8:4b:ae:b2:8e:3a:2d:46:52:40:ed:a8:3f: 85:a7:3b:63:f3:d1:13:a5:96:21:3f:42:03:f3:92: 22:be:37:4f:e1:6f:b2:96:01:80:11:ad:70:f0:10: 46:3d:4d:6c:06:49:38:63:7d:d2:ec:73:d8:d6:3a: 3d:b9:b7:a9:a3:53:15:f5:b8:6b:77:4d:56:ff:7c: 6e:f3:07:76:aa:12:91:a2:0b:87:b4:f5:a7:7d:a2: c6:fb:dc:7b:be:58:e0:b0:a5:54:75:68:9a:b5:b3: fd:93:9e:26:c9:8c:62:64:56:73:88:99:05:3c:cb: 97:3d:1f:49:e7:90:19:6f:e2:36:57:72:da:35:c4: 98:d0:70:ec:ea:1b:d4:e8:f4:44:2d:65:4f:5a:de: eb:4e:77:d2:68:ef:c5:8a:e7:29:1f:a8:f4:2d:6b: fe:34:32:c4:3f:fc:55:fd:52:21:64:53:94:64:c9: a3:3e:ff:d2:dc:be:9e:7d:22:4c:ac:a3:54:65:a7: a5:a7:b8:a4:17:f1:2a:2c:fb:9c:a9:96:5d:f2:d6: 7a:69:59:84:50:1f:e8:af:8e:01:63:bc:3d:95:a6: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:16:A9:E1:2C:D2:AF:69:BA:A0:1B:C4:5A:00:CE:51:34:FA:A4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b12aa20d-1a98-34f7-b631-4836cd6d4b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:37:0a:81:5b:36:1b:4a:22:34:98:22:6f:96:3d:05:f0:e7: 29:d4:1e:4e:8d:ae:38:d7:cc:49:0b:8c:9d:d4:9d:ad:d6:fe: e3:5d:87:e7:3e:7c:81:b7:56:53:d6:71:34:a3:df:19:f7:78: 66:f9:c0:3e:06:33:d0:ea:35:75:2a:d9:a1:4d:3c:27:93:34: ed:94:23:9a:ef:15:fe:ce:17:66:08:89:f5:e0:84:94:18:d9: 84:61:37:de:4c:aa:ed:23:e2:27:88:c9:b4:82:7b:34:36:2a: 6a:1d:d9:d9:b9:be:95:64:66:02:a5:92:a0:5a:68:a0:f8:bb: e2:d1:90:fb:35:ca:8c:90:32:06:f3:b0:2c:04:eb:ab:03:d8: 2f:b6:d1:c8:c3:6a:30:76:c1:47:3a:32:8e:5e:32:3c:e6:ec: 02:81:50:65:3e:5b:09:72:b1:d7:16:a2:19:84:33:6c:92:27: 36:33:c8:c8:ae:ec:a6:dc:f6:55:3e:cb:a6:83:fc:47:f8:ad: 3d:2c:ce:76:00:cb:b2:c1:33:80:28:cd:a8:6b:64:39:c9:0b: 15:4c:bb:6a:7d:f0:6d:fd:df:2d:22:47:18:8d:08:34:76:5a: a4:d8:9b:01:90:23:17:d0:31:58:80:22:aa:bf:c7:95:a8:76: 70:b7:a1:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3ICennloUclhyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NDVlNmUxYmQtNWI5Mi00Y2M0LThkNDgtMWU0YzVhN2YzMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcHeDGDPeueHMMmhvg4kqrmJ/jXuSucLYOkQ sPb5c9hLrrKOOi1GUkDtqD+Fpztj89ETpZYhP0ID85IivjdP4W+ylgGAEa1w8BBG PU1sBkk4Y33S7HPY1jo9ubepo1MV9bhrd01W/3xu8wd2qhKRoguHtPWnfaLG+9x7 vljgsKVUdWiatbP9k54myYxiZFZziJkFPMuXPR9J55AZb+I2V3LaNcSY0HDs6hvU 6PRELWVPWt7rTnfSaO/FiucpH6j0LWv+NDLEP/xV/VIhZFOUZMmjPv/S3L6efSJM rKNUZaelp7ikF/EqLPucqZZd8tZ6aVmEUB/or44BY7w9laZQWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUWqeEs0q9puqAbxFoAzlE0+qSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYjEyYWEyMGQtMWE5OC0z NGY3LWI2MzEtNDgzNmNkNmQ0YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjFK+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk3CoFbNhtKIjSYIm+WPQXw5ynUHk6NrjjXzEkLjJ3Una3W/uNdh+c+ fIG3VlPWcTSj3xn3eGb5wD4GM9DqNXUq2aFNPCeTNO2UI5rvFf7OF2YIifXghJQY 2YRhN95Mqu0j4ieIybSCezQ2Kmod2dm5vpVkZgKlkqBaaKD4u+LRkPs1yoyQMgbz sCwE66sD2C+20cjDajB2wUc6Mo5eMjzm7AKBUGU+WwlysdcWohmEM2ySJzYzyMiu 7Kbc9lU+y6aD/Ef4rT0sznYAy7LBM4AozahrZDnJCxVMu2p98G393y0iRxiNCDR2 WqTYmwGQIxfQMViAIqq/x5WodnC3ofA= -----END CERTIFICATE-----Generated at Thu Oct 9 11:11:16 2025 by rpki-client