$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa File: de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa (raw, json) Hash identifier: qoLF6g6hJyxhHJphLj/BBc6z0mb7TruI37mdxB55BVc= Subject key identifier: 9F:A5:54:F4:FD:50:D0:3F:2F:59:65:B5:C4:8A:09:68:C4:37:C8:68 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC71D5B3F0B73075C31B80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 138.199.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:71:d5:b3:f0:b7:30:75:c3:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=7f9d5fd0-ebab-4692-8cb2-6b9cc4407c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4d:1e:de:90:6e:94:b5:39:74:7e:fd:ee:42: 62:d3:34:c7:f4:84:18:af:bf:4f:b8:5a:1e:00:1b: a6:f3:96:2f:2b:ab:81:e7:64:fe:eb:90:fd:0f:a7: 4f:93:ed:b0:1e:57:be:80:20:c7:72:e3:e2:14:8f: 82:f8:c2:14:72:34:a2:37:19:03:c3:9e:d3:17:bb: d3:c7:f4:a2:1d:ed:ef:d8:2f:ce:6e:5a:2c:52:33: b7:1d:b5:18:17:86:b1:f8:e6:29:47:30:48:74:eb: ae:a6:ee:21:91:2e:28:78:7c:f3:98:75:16:20:27: 87:a2:ef:52:4e:6d:5b:e3:d5:a4:75:fe:ae:74:2a: 9a:51:22:50:f4:fc:60:24:30:92:3c:4e:82:fe:f2: b7:b6:1f:51:3d:d8:2e:89:46:81:d4:03:fc:69:b8: 89:b9:b7:40:81:75:df:6c:98:01:46:5d:39:b1:07: c0:7b:e1:14:c8:39:5c:b1:56:9e:6f:88:34:23:66: 6e:6b:f3:07:13:da:2e:ac:d0:b7:03:14:07:6d:91: fe:e4:ea:16:0f:77:db:07:b0:8b:59:06:55:81:ed: a2:78:bd:08:44:d4:a9:78:32:b5:86:3c:c0:56:20: 57:14:01:7b:ec:1b:79:0b:59:fe:4a:b0:a8:ed:63: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A5:54:F4:FD:50:D0:3F:2F:59:65:B5:C4:8A:09:68:C4:37:C8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:87:f9:b3:bf:d4:0d:e2:1d:01:12:6a:57:07:a1:1b:6b:45: 91:bd:11:19:cf:1c:47:1b:b4:08:1c:a2:94:e3:cc:f1:a4:16: 19:43:1d:71:c8:d0:40:3a:e7:89:2d:9f:80:63:ae:d3:1e:d8: 8a:a9:fe:08:19:c7:75:ac:32:ef:f1:3f:c4:ec:f4:4e:14:61: 5b:0a:67:79:ba:d9:cb:9b:5e:bf:08:ae:ef:05:c5:b7:bd:f9: ff:09:c8:07:e4:1c:82:bb:d0:81:db:61:78:2a:8e:8e:d1:b7: 48:4c:67:4d:96:2e:65:3b:0f:83:8b:23:e7:5e:60:fa:3b:dc: b7:ef:68:0b:53:a2:2a:8d:ae:29:b1:1b:16:89:c3:84:75:b3: a6:89:7d:3c:b0:d0:f8:08:c9:8e:16:71:8f:06:02:51:1a:d7: 54:4c:7c:7e:fa:64:c9:35:9b:a2:48:25:58:83:92:fc:04:3a: a7:42:90:b6:c1:a4:56:10:6d:5d:3a:84:66:fb:f7:03:8f:95: a8:e5:c0:7e:8a:e4:c1:9a:df:d3:6a:fb:21:0b:44:2a:f0:2e: 24:6f:67:b7:37:95:f7:da:c5:7b:8b:1a:78:3d:f5:90:3d:dc: 2d:33:68:b4:2a:7b:6a:96:15:8a:40:47:fa:5d:af:6b:05:59: a8:cc:44:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HHVs/C3MHXDG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk N2Y5ZDVmZDAtZWJhYi00NjkyLThjYjItNmI5Y2M0NDA3Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk0e3pBulLU5dH797kJi0zTH9IQYr79PuFoe ABum85YvK6uB52T+65D9D6dPk+2wHle+gCDHcuPiFI+C+MIUcjSiNxkDw57TF7vT x/SiHe3v2C/OblosUjO3HbUYF4ax+OYpRzBIdOuupu4hkS4oeHzzmHUWICeHou9S Tm1b49Wkdf6udCqaUSJQ9PxgJDCSPE6C/vK3th9RPdguiUaB1AP8abiJubdAgXXf bJgBRl05sQfAe+EUyDlcsVaeb4g0I2Zua/MHE9ourNC3AxQHbZH+5OoWD3fbB7CL WQZVge2ieL0IRNSpeDK1hjzAViBXFAF77Bt5C1n+SrCo7WMS9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+lVPT9UNA/L1lltcSKCWjEN8hoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGU3ZmNiZjctZDVmMy0z NzRlLWExNDktMTQzOWNlNmMzZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiH+bO/1A3iHQESalcHoRtrRZG9ERnPHEcbtAgcopTjzPGkFhlDHXHI 0EA654ktn4BjrtMe2Iqp/ggZx3WsMu/xP8Ts9E4UYVsKZ3m62cubXr8Iru8Fxbe9 +f8JyAfkHIK70IHbYXgqjo7Rt0hMZ02WLmU7D4OLI+deYPo73LfvaAtToiqNrimx GxaJw4R1s6aJfTyw0PgIyY4WcY8GAlEa11RMfH76ZMk1m6JIJViDkvwEOqdCkLbB pFYQbV06hGb79wOPlajlwH6K5MGa39Nq+yELRCrwLiRvZ7c3lffaxXuLGng99ZA9 3C0zaLQqe2qWFYpAR/pdr2sFWajMRHs= -----END CERTIFICATE-----Generated at Thu Oct 9 11:09:35 2025 by rpki-client