$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/daa142cf-1083-30ba-9ff1-e9033562e2b7.roa File: daa142cf-1083-30ba-9ff1-e9033562e2b7.roa (raw, json) Hash identifier: pHaCBwYgXmBJTrUXVyJIXXjJrWMl4hKFiQarWX+s9f4= Subject key identifier: E0:5D:82:F1:E8:92:EE:50:67:39:6F:39:8E:05:06:6C:27:5B:56:18 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7DC9472FF9626BDF96C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/daa142cf-1083-30ba-9ff1-e9033562e2b7.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 140.82.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7d:c9:47:2f:f9:62:6b:df:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=cad26a91-ae03-45f4-85f7-ece2fc9cf432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:e3:83:17:2c:1a:45:c7:63:a5:03:14:47: 58:97:ef:58:c4:f6:ed:79:e2:46:82:16:7a:f1:8c: f2:97:b9:63:37:42:42:16:fa:da:b8:16:4c:47:d8: 20:6d:65:84:5c:6a:8f:f3:af:f8:a1:e9:85:07:3f: 77:c8:0b:5c:17:9a:3b:28:6d:15:0f:a5:f9:9d:c1: 57:7e:f4:1e:fb:17:7a:d3:0c:f6:7f:9f:19:41:64: e4:96:03:6e:54:ff:de:00:14:35:92:3a:9e:6c:d5: 1f:4f:56:6d:46:69:4b:eb:fc:3e:0b:e9:52:1c:e9: fe:1b:3c:28:e3:16:68:e8:dd:9a:27:86:b0:15:4e: f1:fa:14:40:b2:65:ac:fd:d6:a0:da:17:7d:70:c0: 8c:77:da:d7:b4:5c:26:0b:0e:d5:75:1c:c8:60:7a: 81:c5:07:5a:bd:a9:4b:10:c6:32:78:72:a6:da:a2: f4:3d:ae:72:a3:99:73:7d:ac:b3:01:82:c9:32:71: 7d:24:44:32:51:cc:df:b5:7c:97:e9:92:29:eb:0f: d7:67:dd:06:86:35:b8:5b:c6:d9:68:30:64:45:29: f1:3f:2f:d2:34:61:3c:14:4e:ab:5e:cd:f4:7c:3f: ec:8e:7f:91:3b:65:a5:f5:65:85:80:b2:48:8a:b9: 6f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5D:82:F1:E8:92:EE:50:67:39:6F:39:8E:05:06:6C:27:5B:56:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/daa142cf-1083-30ba-9ff1-e9033562e2b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:20:16:d3:41:74:a4:c1:b3:9d:36:d5:db:64:66:c5:4f:98: 9c:5a:03:86:6f:d6:f9:11:cd:3b:bf:db:eb:a4:6b:4a:b6:f6: 8a:9d:fd:47:7c:1c:66:db:cf:80:c6:38:a3:f4:94:11:d9:93: bf:9b:4a:b9:e1:6f:1d:0a:bf:b7:be:32:c0:94:96:6b:2e:a4: 9c:d2:81:40:6e:2c:0b:48:af:31:18:cd:d6:bb:7e:1d:74:c4: 01:ba:8a:5e:ca:a0:7b:e1:96:d2:47:db:2e:cc:79:d9:ba:b9: 58:b3:5c:82:d6:43:64:ee:ac:40:cf:73:58:69:a0:20:1b:5f: 4c:af:95:0a:b1:ee:e2:3a:d8:d1:c2:7b:80:fb:2a:5d:26:dc: 0d:8d:69:c0:00:de:7b:2e:ea:17:c2:5d:cd:d8:bc:fa:03:80: 81:44:a0:ca:b8:e4:59:9d:18:5a:c5:31:f0:5a:c7:95:c2:a7: a3:33:e3:19:04:5b:bd:7a:4d:a5:a4:7d:7f:79:bb:27:38:cc: a8:01:d6:4a:23:2c:6a:5e:c1:87:c6:98:a6:44:0c:92:ef:f3: 0a:0e:90:91:f3:d2:55:6b:0e:e6:7d:3d:6f:3f:29:a5:92:d6: 7b:14:db:e4:89:fd:3a:af:b8:4b:bb:53:70:9e:b1:9d:7a:d6: fc:11:cc:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3H3JRy/5YmvflsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2FkMjZhOTEtYWUwMy00NWY0LTg1ZjctZWNlMmZjOWNmNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10/jgxcsGkXHY6UDFEdYl+9YxPbteeJGghZ6 8Yzyl7ljN0JCFvrauBZMR9ggbWWEXGqP86/4oemFBz93yAtcF5o7KG0VD6X5ncFX fvQe+xd60wz2f58ZQWTklgNuVP/eABQ1kjqebNUfT1ZtRmlL6/w+C+lSHOn+Gzwo 4xZo6N2aJ4awFU7x+hRAsmWs/dag2hd9cMCMd9rXtFwmCw7VdRzIYHqBxQdavalL EMYyeHKm2qL0Pa5yo5lzfayzAYLJMnF9JEQyUczftXyX6ZIp6w/XZ90GhjW4W8bZ aDBkRSnxPy/SNGE8FE6rXs30fD/sjn+RO2Wl9WWFgLJIirlveQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBdgvHoku5QZzlvOY4FBmwnW1YYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGFhMTQyY2YtMTA4My0z MGJhLTlmZjEtZTkwMzM1NjJlMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4gFtNBdKTBs5021dtkZsVPmJxaA4Zv1vkRzTu/2+uka0q29oqd/Ud8 HGbbz4DGOKP0lBHZk7+bSrnhbx0Kv7e+MsCUlmsupJzSgUBuLAtIrzEYzda7fh10 xAG6il7KoHvhltJH2y7Medm6uVizXILWQ2TurEDPc1hpoCAbX0yvlQqx7uI62NHC e4D7Kl0m3A2NacAA3nsu6hfCXc3YvPoDgIFEoMq45FmdGFrFMfBax5XCp6Mz4xkE W716TaWkfX95uyc4zKgB1kojLGpewYfGmKZEDJLv8woOkJHz0lVrDuZ9PW8/KaWS 1nsU2+SJ/TqvuEu7U3CesZ161vwRzMY= -----END CERTIFICATE-----Generated at Thu Oct 9 11:13:32 2025 by rpki-client