$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e5398f90-04ba-33bf-9208-c834cb86b932.roa File: e5398f90-04ba-33bf-9208-c834cb86b932.roa (raw, json) Hash identifier: zSfbQ7veNEGqBCL8dOXvDo4RG0effnoeVcKvJkCCDB8= Subject key identifier: DA:CC:34:3D:BC:CC:CA:82:76:EA:94:5B:3F:E8:47:5B:B4:B4:89:84 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC702B96FE1BF23CD54E80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e5398f90-04ba-33bf-9208-c834cb86b932.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 140.82.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:70:2b:96:fe:1b:f2:3c:d5:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=a2c357bf-eba5-47a4-b856-e8ea589148bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:70:43:07:cb:44:0c:89:51:77:e9:af:f8:bb: 50:98:ce:ed:50:de:5d:26:b8:f1:e3:e5:db:4f:e0: a8:e5:55:17:ad:b8:bd:16:69:36:7b:45:11:48:15: 70:28:df:b7:70:a3:fa:62:0f:ba:81:4c:62:a2:2a: 07:cd:4d:ad:0b:cd:1d:07:01:ea:19:af:cb:93:6b: 1f:12:7b:b7:6e:1c:54:ab:8a:70:64:c3:ae:49:fe: 6b:bd:f3:26:6e:16:be:05:6b:a0:09:0c:b7:91:09: f4:cf:c0:f9:7c:9d:f0:b2:1f:de:f4:dd:a6:49:53: 0d:c8:ae:72:a8:16:6a:ba:23:66:8f:72:6f:37:e6: 1b:84:a8:f3:a3:8d:72:f2:1a:96:89:e8:9c:b1:40: 81:8c:b4:cc:17:fc:cd:4e:3c:f7:84:dc:79:4d:9f: 82:1d:29:bd:18:c7:8c:ac:e9:9d:f3:aa:28:f5:04: 5f:13:e7:48:7f:5b:43:cb:ac:7a:66:6e:56:19:58: 1e:6b:a5:e9:5d:a6:7a:5e:f1:a5:46:c1:a2:84:81: a2:01:4d:ec:ee:f4:6e:44:af:de:7f:b3:fc:7e:ea: c1:21:23:6f:62:2f:98:26:7d:13:f3:38:e8:eb:5d: 43:dd:4c:be:69:a9:01:84:c5:5b:be:04:f4:93:6d: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CC:34:3D:BC:CC:CA:82:76:EA:94:5B:3F:E8:47:5B:B4:B4:89:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e5398f90-04ba-33bf-9208-c834cb86b932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 140.82.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:f1:d2:6e:5f:c9:eb:ee:b1:d9:d4:c1:9a:8d:a9:f7:31:51: 66:b6:57:31:30:5e:b1:2c:b7:76:0c:06:38:73:a6:17:ce:26: a3:07:74:fc:eb:8b:45:12:15:01:68:af:a8:d7:d8:6f:9e:73: 35:d3:bf:65:22:0d:de:42:3c:ff:ed:2e:ef:58:db:42:d3:07: 45:68:73:f1:e1:22:39:54:ca:0b:09:33:02:7b:d7:f5:d7:f8: 46:5e:51:c1:7f:34:79:2f:0b:3e:e0:34:5e:d7:ea:c0:b9:58: cc:f2:75:04:4d:4f:5d:b9:20:e7:2a:eb:02:0d:e5:0d:5f:5f: 5c:ba:8f:1d:ec:ff:fd:39:78:9d:12:ba:f1:a2:a0:a4:59:35: fc:73:88:92:28:74:ad:01:62:21:3c:8a:6d:d3:ba:d1:25:73: b3:aa:24:2e:25:de:a6:19:1d:b0:5f:7e:da:52:e7:9c:4a:91: 4c:45:ad:b1:38:81:63:a4:81:45:9a:b6:19:8e:03:6b:92:5b: 70:48:c1:b4:a5:2c:8c:b1:c6:59:97:77:55:3a:1d:49:99:5d: 16:23:5a:6e:78:f1:54:ab:28:65:a2:61:79:a0:c8:5c:67:83: 25:73:73:7e:03:5c:40:70:cb:6b:46:36:9e:46:74:fa:8b:9a: a7:69:6c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HArlv4b8jzVToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTJjMzU3YmYtZWJhNS00N2E0LWI4NTYtZThlYTU4OTE0OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3BDB8tEDIlRd+mv+LtQmM7tUN5dJrjx4+Xb T+Co5VUXrbi9Fmk2e0URSBVwKN+3cKP6Yg+6gUxioioHzU2tC80dBwHqGa/Lk2sf Enu3bhxUq4pwZMOuSf5rvfMmbha+BWugCQy3kQn0z8D5fJ3wsh/e9N2mSVMNyK5y qBZquiNmj3JvN+YbhKjzo41y8hqWieicsUCBjLTMF/zNTjz3hNx5TZ+CHSm9GMeM rOmd86oo9QRfE+dIf1tDy6x6Zm5WGVgea6XpXaZ6XvGlRsGihIGiAU3s7vRuRK/e f7P8furBISNvYi+YJn0T8zjo611D3Uy+aakBhMVbvgT0k211jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrMND28zMqCduqUWz/oR1u0tImEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZTUzOThmOTAtMDRiYS0z M2JmLTkyMDgtYzgzNGNiODZiOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjFK/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfx0m5fyevusdnUwZqNqfcxUWa2VzEwXrEst3YMBjhzphfOJqMHdPzr i0USFQFor6jX2G+eczXTv2UiDd5CPP/tLu9Y20LTB0Voc/HhIjlUygsJMwJ71/XX +EZeUcF/NHkvCz7gNF7X6sC5WMzydQRNT125IOcq6wIN5Q1fX1y6jx3s//05eJ0S uvGioKRZNfxziJIodK0BYiE8im3TutElc7OqJC4l3qYZHbBfftpS55xKkUxFrbE4 gWOkgUWathmOA2uSW3BIwbSlLIyxxlmXd1U6HUmZXRYjWm548VSrKGWiYXmgyFxn gyVzc34DXEBwy2tGNp5GdPqLmqdpbJQ= -----END CERTIFICATE-----Generated at Thu Oct 9 11:13:30 2025 by rpki-client