$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d63b836d-2289-3e59-8174-9c627d860fb5.roa File: d63b836d-2289-3e59-8174-9c627d860fb5.roa (raw, json) Hash identifier: XfV+2pNMJ+2KM3Ylto1lTEuwo/IihWnh+I85ITvJpoQ= Subject key identifier: AA:61:DE:8E:7A:8A:59:D1:F4:19:65:BB:81:6E:88:57:1E:D4:75:55 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC6E41874E66E2E8DECB80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d63b836d-2289-3e59-8174-9c627d860fb5.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 140.82.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:6e:41:87:4e:66:e2:e8:de:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=ddb2a12f-54e7-434a-aac3-35c5f9f7fbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:4b:ac:c2:b3:c2:d9:67:fa:43:1b:5b:7e: 60:d7:dd:d6:98:2b:55:bc:6b:ef:93:de:fc:47:f0: 45:7b:41:6f:f4:81:4e:d8:ba:d0:60:07:20:a3:3d: a0:ed:8b:64:f4:47:49:04:08:55:ee:2f:da:1b:7b: 2b:87:f1:c1:fc:6d:56:75:a6:d6:3e:24:3e:d1:4f: ab:70:ca:ec:ad:38:5b:8e:1e:96:c8:17:b3:1a:05: 1f:22:bb:cf:4f:2f:de:7d:1c:7b:3a:1e:cc:55:43: af:ea:f6:99:4e:ec:d5:55:77:1b:60:e8:46:bb:45: 5f:9d:e6:a5:96:8e:31:cf:88:d9:94:68:72:ad:18: 7d:48:e5:ef:8e:c7:42:84:4f:cb:e4:4a:63:1e:ea: e7:32:e1:f5:ab:d8:6d:52:0c:0a:fa:09:67:f9:7d: 79:a8:30:3b:fe:58:5f:db:fc:ac:6c:03:c2:cc:8f: 8f:4a:e0:f7:b9:fe:7c:b8:59:ce:70:2f:79:39:b8: e4:24:8a:49:07:6b:20:e4:30:5e:ea:4d:61:8c:d1: 6c:71:34:8a:0e:4a:40:e0:09:82:ec:5b:f8:dc:cc: a3:a0:74:f7:c8:11:6d:27:ec:a1:8c:2c:08:1a:c1: 38:b3:f4:61:df:2a:eb:0e:88:14:5c:73:89:19:d3: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:DE:8E:7A:8A:59:D1:F4:19:65:BB:81:6E:88:57:1E:D4:75:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d63b836d-2289-3e59-8174-9c627d860fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:45:69:35:46:f7:e0:de:87:a9:0b:e7:25:ff:f2:2d:0f:3a: 2f:15:d0:23:4d:a0:2a:00:5f:4d:39:35:fd:c9:46:51:89:cc: 81:d2:a4:3d:fb:f3:5b:11:6d:eb:48:18:85:99:0d:95:f8:d0: c7:cf:04:69:08:37:31:a4:f6:07:70:4a:4f:90:97:38:60:0d: 14:50:85:be:e9:73:a4:41:cd:49:06:63:90:16:ac:45:2c:73: ad:03:8a:64:74:1f:46:07:43:48:e5:ac:27:76:0e:12:33:5d: c1:66:5e:14:03:39:2e:c1:b1:4a:f3:49:fe:30:0d:c7:0c:6e: 87:20:f5:be:70:5c:54:90:4f:81:8b:d6:e9:23:18:50:10:ce: a3:3b:99:00:da:46:69:fa:92:62:25:41:05:e5:9b:c1:94:0e: 3c:be:1c:ea:8c:b5:3b:c1:69:99:22:54:5e:c6:65:1b:84:72: d3:71:44:3d:3f:7f:57:4f:ea:ba:ca:86:e3:90:85:82:83:a6: 9d:57:84:3e:b6:5c:02:0c:0e:c1:80:5d:90:82:65:6c:85:3d: 29:52:56:ef:69:1d:0b:29:5d:4e:c5:f0:b8:f0:f5:88:e9:cd: 15:ce:a1:2f:85:10:2f:c9:66:94:b8:c3:10:b4:c0:e1:8f:4a: fb:7d:48:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3G5Bh05m4ujey4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGRiMmExMmYtNTRlNy00MzRhLWFhYzMtMzVjNWY5ZjdmYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCZLrMKzwtln+kMbW35g193WmCtVvGvvk978 R/BFe0Fv9IFO2LrQYAcgoz2g7Ytk9EdJBAhV7i/aG3srh/HB/G1WdabWPiQ+0U+r cMrsrThbjh6WyBezGgUfIrvPTy/efRx7Oh7MVUOv6vaZTuzVVXcbYOhGu0Vfneal lo4xz4jZlGhyrRh9SOXvjsdChE/L5EpjHurnMuH1q9htUgwK+gln+X15qDA7/lhf 2/ysbAPCzI+PSuD3uf58uFnOcC95ObjkJIpJB2sg5DBe6k1hjNFscTSKDkpA4AmC 7Fv43MyjoHT3yBFtJ+yhjCwIGsE4s/Rh3yrrDogUXHOJGdNydQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKph3o56ilnR9Bllu4FuiFce1HVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZDYzYjgzNmQtMjI4OS0z ZTU5LTgxNzQtOWM2MjdkODYwZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9FaTVG9+Deh6kL5yX/8i0POi8V0CNNoCoAX005Nf3JRlGJzIHSpD37 81sRbetIGIWZDZX40MfPBGkINzGk9gdwSk+QlzhgDRRQhb7pc6RBzUkGY5AWrEUs c60DimR0H0YHQ0jlrCd2DhIzXcFmXhQDOS7BsUrzSf4wDccMbocg9b5wXFSQT4GL 1ukjGFAQzqM7mQDaRmn6kmIlQQXlm8GUDjy+HOqMtTvBaZkiVF7GZRuEctNxRD0/ f1dP6rrKhuOQhYKDpp1XhD62XAIMDsGAXZCCZWyFPSlSVu9pHQspXU7F8Ljw9Yjp zRXOoS+FEC/JZpS4wxC0wOGPSvt9SCg= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:29 2025 by rpki-client