$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa File: ecc2f70e-67af-3a14-9035-096418ec8b92.roa (raw, json) Hash identifier: y8CyUfujrSOg39mkaHAKDr7GIvAfugl0+BS6Z1gMbV0= Subject key identifier: 19:7F:4A:F0:F8:12:FE:8A:EB:BA:41:C0:A4:AC:6C:B2:84:87:4F:4C Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B44B1B498F58C615B30A1F500 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 15164 IP address blocks: 138.199.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b4:98:f5:8c:61:5b:30:a1:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=3e0826a5-6333-4468-9da3-7ade03409c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:af:d1:0e:ef:cf:f0:35:8e:15:e2:bc:85:73: 1f:2a:4a:ce:ce:68:61:c2:0e:d6:e8:bb:8c:f1:6d: ae:65:f5:81:e0:a1:a5:a1:41:dc:45:73:cd:df:65: 00:b3:a4:89:75:8b:9f:0b:39:e8:13:9a:b2:09:f9: 66:c5:73:86:75:20:5a:54:62:e2:60:c0:64:eb:bb: ae:c3:47:c9:74:12:40:30:3d:db:af:3b:94:1a:52: 57:e8:e7:27:57:2a:ed:aa:72:c5:48:5d:ee:5a:36: b7:cd:dd:27:55:20:b3:a4:b8:19:b1:c0:d1:b6:e2: e9:af:35:02:f4:32:57:f5:92:93:75:bc:66:7d:d9: ac:8d:18:29:d3:4c:ba:47:e6:8a:f3:96:e0:cc:ca: a8:c9:61:48:4d:a1:c2:fd:ee:6a:87:7b:53:56:b3: b6:76:b8:18:fd:47:4f:20:f8:54:7b:06:c6:87:7d: 4a:f1:d2:02:7f:14:e2:a4:98:cb:e6:8e:51:c0:31: 68:fe:9f:09:50:28:77:8d:b1:ed:4b:db:e2:ea:64: 36:f6:5a:49:64:3e:1f:93:dd:a1:a5:5f:7b:84:7d: c5:fd:57:fa:85:50:fe:05:8a:c5:29:87:bf:49:c9: 80:aa:3a:fd:ed:82:b7:d8:ee:a6:a8:13:b8:ce:b4: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7F:4A:F0:F8:12:FE:8A:EB:BA:41:C0:A4:AC:6C:B2:84:87:4F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:aa:7d:63:c1:b0:4b:50:92:6b:3c:7f:47:81:92:c9:90:8e: 39:7c:e5:54:5b:b8:d1:2f:f4:65:02:65:fd:77:31:bd:7a:43: ad:c9:6d:fd:dd:eb:4f:95:84:f0:68:20:89:b6:e6:23:cd:94: 11:9c:6c:5f:44:8a:8b:f6:7e:cc:18:b8:22:2a:9a:c3:57:c2: 8c:74:36:c0:5a:69:ea:ac:a3:c7:73:e0:0d:3e:18:9f:15:d3: 9a:b0:61:78:54:20:24:0f:2b:31:93:20:0a:8d:cf:21:bb:6a: a2:7a:71:4d:ee:a1:09:e5:22:28:98:32:4e:f3:04:82:8a:57: 7a:b1:0b:3d:22:c1:d0:44:f1:8c:5f:22:69:6b:c7:d3:c9:81: 4c:45:81:7e:ea:a3:fc:e0:10:43:3f:a3:16:f5:85:5d:54:a6: 2e:23:4e:00:a4:6a:da:bb:c9:a0:c7:23:d3:25:54:0e:c6:39: 62:d0:cd:11:dd:75:1b:ce:08:65:3f:50:4d:86:81:67:07:89: 6e:8d:28:2f:01:4f:9c:c4:90:7c:f0:ad:b8:f5:97:5d:51:ed: 46:f2:68:a3:aa:f4:8b:a5:9f:3a:1f:58:39:1a:2b:e4:90:d0: 61:fd:c0:0b:f6:6c:9f:e1:f4:5c:68:88:88:ab:49:0f:bb:8e: f8:9d:7e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbSY9YxhWzCh9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk M2UwODI2YTUtNjMzMy00NDY4LTlkYTMtN2FkZTAzNDA5Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga/RDu/P8DWOFeK8hXMfKkrOzmhhwg7W6LuM 8W2uZfWB4KGloUHcRXPN32UAs6SJdYufCznoE5qyCflmxXOGdSBaVGLiYMBk67uu w0fJdBJAMD3brzuUGlJX6OcnVyrtqnLFSF3uWja3zd0nVSCzpLgZscDRtuLprzUC 9DJX9ZKTdbxmfdmsjRgp00y6R+aK85bgzMqoyWFITaHC/e5qh3tTVrO2drgY/UdP IPhUewbGh31K8dICfxTipJjL5o5RwDFo/p8JUCh3jbHtS9vi6mQ29lpJZD4fk92h pV97hH3F/Vf6hVD+BYrFKYe/ScmAqjr97YK32O6mqBO4zrT0swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl/SvD4Ev6K67pBwKSsbLKEh09MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZWNjMmY3MGUtNjdhZi0z YTE0LTkwMzUtMDk2NDE4ZWM4YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKqfWPBsEtQkms8f0eBksmQjjl85VRbuNEv9GUCZf13Mb16Q63Jbf3d 60+VhPBoIIm25iPNlBGcbF9Eiov2fswYuCIqmsNXwox0NsBaaeqso8dz4A0+GJ8V 05qwYXhUICQPKzGTIAqNzyG7aqJ6cU3uoQnlIiiYMk7zBIKKV3qxCz0iwdBE8Yxf Imlrx9PJgUxFgX7qo/zgEEM/oxb1hV1Upi4jTgCkatq7yaDHI9MlVA7GOWLQzRHd dRvOCGU/UE2GgWcHiW6NKC8BT5zEkHzwrbj1l11R7UbyaKOq9IulnzofWDkaK+SQ 0GH9wAv2bJ/h9FxoiIirSQ+7jvidfvE= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:50 2025 by rpki-client