$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa File: baf36f1f-7681-3019-9422-c187c0a3a355.roa (raw, json) Hash identifier: Wse/edqwVm1U0aN8hdcVuVQkxIO7n+fAc+yIAE5+O+0= Subject key identifier: 86:70:48:4C:D9:1E:00:A0:40:FB:05:BD:A6:51:28:95:18:AE:CB:FC Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC6EBC9B44159C5DD1CB00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 173.244.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:6e:bc:9b:44:15:9c:5d:d1:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=ae3e4457-e431-477b-8104-643e050f9b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d7:fc:07:a5:f1:c1:08:4e:65:b8:fd:0c:44: 87:68:a2:79:42:cf:09:08:88:f2:9c:c2:6b:36:e8: e5:cf:fc:ea:f9:9f:b3:fe:77:d1:35:7d:cf:8b:e3: 33:44:00:53:10:18:01:8c:f3:ba:b4:f0:db:2a:5e: 0d:9b:1d:ad:ce:1e:f2:5e:02:e3:1b:d2:4d:79:d8: 67:a5:e7:a3:29:b0:68:2a:20:cc:e5:91:3d:9d:68: 01:a6:47:08:ef:a0:52:f7:96:f2:a1:b6:4b:cc:66: 2b:ef:74:dc:12:71:a1:a8:21:10:e0:b7:27:6b:84: 10:8b:e0:44:9f:7d:e8:e7:03:8a:62:2c:d3:a0:3c: 67:c2:f8:c9:bf:d3:55:73:ae:a4:2e:c0:e6:1e:e0: 0d:b8:61:7d:01:46:15:61:ec:3f:a4:ce:e6:6b:d4: 0c:c4:89:38:e6:2d:32:78:f0:c0:cc:ae:e7:05:d6: b7:61:2a:3d:e7:a4:49:6e:a3:1c:34:38:3e:32:f1: 14:3c:26:51:0c:5b:94:eb:41:cc:73:40:c9:6e:01: 60:28:99:92:3b:a9:71:87:12:fd:a3:b8:f4:0f:2b: ea:e9:24:e8:ca:f4:4a:7d:f0:06:51:f9:a6:17:dc: 96:48:98:87:30:e1:70:c8:8d:3d:c6:41:e9:e6:c5: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:70:48:4C:D9:1E:00:A0:40:FB:05:BD:A6:51:28:95:18:AE:CB:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:0a:d5:0b:db:00:7e:0f:1e:d0:be:d0:ee:6b:b3:16:4d:c6: 13:d6:a8:71:1a:05:96:c9:ff:d9:41:77:64:5f:07:31:c1:6e: 2d:19:7a:bc:24:f6:a1:99:e1:19:09:7f:88:1a:c4:19:7b:80: 97:75:fe:45:f2:cb:19:b3:2e:01:1b:97:63:93:e4:6d:60:48: 2a:89:f6:fe:2a:47:b9:ad:ea:e4:82:2e:62:ef:47:91:ab:47: 6f:1c:ed:63:79:f0:de:23:0f:b1:8b:c2:b4:26:7b:18:c7:f3: ac:2f:d3:83:8b:d7:4f:d1:5a:7c:41:32:c8:ca:c4:4c:0b:ea: 2d:f4:6b:35:3e:fc:21:90:d9:86:b2:88:40:13:e6:d6:f0:86: de:c5:ee:9d:3d:25:6d:da:3d:4b:be:4c:1f:ba:a9:5b:54:1f: f9:cc:d3:b0:17:2e:ec:a2:08:c5:cb:1a:0c:61:4b:19:aa:fb: f5:88:72:6e:7c:1f:0c:2f:4d:cc:b4:64:7f:89:13:20:27:d7: cb:c9:61:ef:3a:23:9d:60:0c:1b:7c:30:3b:04:c0:6e:91:a5: c7:7a:9b:0a:ab:88:26:e8:88:3a:2f:f4:58:6b:28:4d:7d:50: bc:03:05:d6:2c:b6:38:3f:bf:2b:fb:dd:28:d8:d7:ae:b3:49: 9c:5e:8a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3G68m0QVnF3RywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YWUzZTQ0NTctZTQzMS00NzdiLTgxMDQtNjQzZTA1MGY5Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9f8B6XxwQhOZbj9DESHaKJ5Qs8JCIjynMJr Nujlz/zq+Z+z/nfRNX3Pi+MzRABTEBgBjPO6tPDbKl4Nmx2tzh7yXgLjG9JNedhn peejKbBoKiDM5ZE9nWgBpkcI76BS95byobZLzGYr73TcEnGhqCEQ4Lcna4QQi+BE n33o5wOKYizToDxnwvjJv9NVc66kLsDmHuANuGF9AUYVYew/pM7ma9QMxIk45i0y ePDAzK7nBda3YSo956RJbqMcNDg+MvEUPCZRDFuU60HMc0DJbgFgKJmSO6lxhxL9 o7j0Dyvq6SToyvRKffAGUfmmF9yWSJiHMOFwyI09xkHp5sWEhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZwSEzZHgCgQPsFvaZRKJUYrsv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYmFmMzZmMWYtNzY4MS0z MDE5LTk0MjItYzE4N2MwYTNhMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwK1QvbAH4PHtC+0O5rsxZNxhPWqHEaBZbJ/9lBd2RfBzHBbi0Zerwk 9qGZ4RkJf4gaxBl7gJd1/kXyyxmzLgEbl2OT5G1gSCqJ9v4qR7mt6uSCLmLvR5Gr R28c7WN58N4jD7GLwrQmexjH86wv04OL10/RWnxBMsjKxEwL6i30azU+/CGQ2Yay iEAT5tbwht7F7p09JW3aPUu+TB+6qVtUH/nM07AXLuyiCMXLGgxhSxmq+/WIcm58 HwwvTcy0ZH+JEyAn18vJYe86I51gDBt8MDsEwG6Rpcd6mwqriCboiDov9FhrKE19 ULwDBdYstjg/vyv73SjY166zSZxeirA= -----END CERTIFICATE-----Generated at Thu Oct 9 11:13:56 2025 by rpki-client