$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e775eb4e-3934-39be-87d4-14ab90687fd1.roa File: e775eb4e-3934-39be-87d4-14ab90687fd1.roa (raw, json) Hash identifier: o42+7beqA3ak6o24IpqLP61z676aBRrIBbt6T8PGdp8= Subject key identifier: 16:78:0E:E1:CB:33:33:BC:3D:D5:24:61:1E:A8:4F:44:73:81:C0:5F Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B44B1C1304EAB016F647B1F00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e775eb4e-3934-39be-87d4-14ab90687fd1.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 15164 IP address blocks: 138.199.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c1:30:4e:ab:01:6f:64:7b:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=b8914dce-1302-46fc-a740-c86bb85d702c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b9:f2:b7:bb:40:ad:6d:34:7e:7c:3e:e4:9f: 04:a3:be:9e:b7:19:67:40:36:4f:de:a3:08:18:db: 4d:6f:1b:6f:97:4f:1d:68:b3:4a:13:72:50:57:1c: 8a:5a:5b:7f:bd:68:7b:f6:c3:1c:30:8e:49:fc:57: 62:ee:b9:cd:b5:3e:eb:1b:ea:e1:80:e9:45:c0:6a: 60:fa:d2:2c:29:33:33:12:5b:85:a5:c6:94:9e:ca: 9c:54:7a:36:79:15:04:5f:1e:ec:7d:25:ee:93:0e: 8a:0d:5e:03:c0:6b:18:e3:35:81:fa:79:7a:7b:34: 86:c6:91:35:a4:9e:c3:ce:24:e7:2d:e6:98:be:93: 97:84:94:d0:2a:3e:3a:3f:0b:8e:80:18:52:3a:02: 74:5a:81:3c:1d:05:c8:67:62:be:9e:71:84:87:a0: b9:40:e1:47:50:51:f9:a4:ba:fd:68:c7:aa:9b:81: b0:d2:71:80:ac:79:b8:0d:60:d6:13:a1:36:b0:20: 7c:f3:61:2b:00:89:6a:5f:95:a0:d7:2e:29:3c:31: b7:12:ec:08:23:9d:08:30:fd:e6:58:d3:89:0c:ca: 58:2a:7d:95:4d:82:53:2c:78:c9:c8:51:f6:10:20: 6f:ed:18:74:57:a8:24:7b:60:77:8f:eb:8e:3e:f7: ea:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:78:0E:E1:CB:33:33:BC:3D:D5:24:61:1E:A8:4F:44:73:81:C0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e775eb4e-3934-39be-87d4-14ab90687fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:67:8e:21:b3:3e:07:af:94:4c:57:11:8a:22:15:4b:36:3d: 95:50:dc:e4:cb:46:10:fc:7c:2d:18:02:62:f7:bf:eb:30:5d: 5b:5a:ee:bf:5e:37:65:c6:52:4d:f3:27:6a:43:9c:0f:b8:bc: 8d:01:67:70:74:1b:cb:a9:bb:e2:aa:bc:57:df:67:fb:3a:87: 2b:a3:75:bc:98:00:66:8b:92:1f:74:d6:2f:fe:d5:61:9c:89: b3:43:b7:51:a7:4c:75:70:b8:d6:c0:88:ce:3c:7c:8f:b1:29: 5d:e9:5c:cc:45:d0:04:e0:45:02:b9:63:6b:7d:3a:84:1f:35: d3:a8:44:dd:15:ba:5d:fd:f1:35:de:82:b4:eb:8c:e4:98:e7: 75:96:90:f9:52:68:45:f8:af:79:84:3d:79:ce:f4:79:45:4d: 5f:15:b5:52:1d:6d:cd:15:3d:37:bc:68:52:4b:5a:02:66:ad: ae:32:98:e2:9b:2b:62:b1:51:81:78:59:cf:9a:ca:76:ff:57: 19:a9:b0:28:64:e0:25:49:fe:6e:d8:df:ca:05:2b:cf:26:0d: 77:b0:71:83:90:19:50:41:42:fb:e4:ad:f6:7c:db:6c:c1:11: 29:b1:e4:a6:23:19:cc:1a:2f:bf:ee:dd:ac:ba:89:9c:4c:3c: e0:97:be:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscEwTqsBb2R7HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk Yjg5MTRkY2UtMTMwMi00NmZjLWE3NDAtYzg2YmI4NWQ3MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lnyt7tArW00fnw+5J8Eo76etxlnQDZP3qMI GNtNbxtvl08daLNKE3JQVxyKWlt/vWh79sMcMI5J/Fdi7rnNtT7rG+rhgOlFwGpg +tIsKTMzEluFpcaUnsqcVHo2eRUEXx7sfSXukw6KDV4DwGsY4zWB+nl6ezSGxpE1 pJ7DziTnLeaYvpOXhJTQKj46PwuOgBhSOgJ0WoE8HQXIZ2K+nnGEh6C5QOFHUFH5 pLr9aMeqm4Gw0nGArHm4DWDWE6E2sCB882ErAIlqX5Wg1y4pPDG3EuwII50IMP3m WNOJDMpYKn2VTYJTLHjJyFH2ECBv7Rh0V6gke2B3j+uOPvfq4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ4DuHLMzO8PdUkYR6oT0RzgcBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZTc3NWViNGUtMzkzNC0z OWJlLTg3ZDQtMTRhYjkwNjg3ZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9njiGzPgevlExXEYoiFUs2PZVQ3OTLRhD8fC0YAmL3v+swXVta7r9e N2XGUk3zJ2pDnA+4vI0BZ3B0G8upu+KqvFffZ/s6hyujdbyYAGaLkh901i/+1WGc ibNDt1GnTHVwuNbAiM48fI+xKV3pXMxF0ATgRQK5Y2t9OoQfNdOoRN0Vul398TXe grTrjOSY53WWkPlSaEX4r3mEPXnO9HlFTV8VtVIdbc0VPTe8aFJLWgJmra4ymOKb K2KxUYF4Wc+aynb/VxmpsChk4CVJ/m7Y38oFK88mDXewcYOQGVBBQvvkrfZ822zB ESmx5KYjGcwaL7/u3ay6iZxMPOCXvrk= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:29 2025 by rpki-client