$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0b3d18c7-9608-3751-85bf-950d43b980dc.roa File: 0b3d18c7-9608-3751-85bf-950d43b980dc.roa (raw, json) Hash identifier: pH6/CgZShzncaokOwPuErpqzFkAWY+w3XsW31+eOPvA= Subject key identifier: 17:09:7C:4B:92:FB:3B:03:01:AB:B5:63:73:1D:FD:C3:13:7F:8F:E5 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B41E727996D04E21256885100 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0b3d18c7-9608-3751-85bf-950d43b980dc.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 104.218.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:27:99:6d:04:e2:12:56:88:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=050d9416-c11d-47da-b11a-e29fb89e6d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:2c:24:07:ab:e8:c8:78:ad:0f:7f:32:45: 4e:bc:e3:d6:61:02:37:0b:c6:1a:93:d3:43:aa:60: ac:f8:48:35:9e:d9:f5:f4:2e:f1:1b:d6:44:90:00: 39:e5:fe:b7:c1:21:84:ae:92:82:a2:a8:c0:bf:e2: fa:5f:62:98:64:70:dd:80:cb:83:8c:01:7d:d8:b5: 74:05:f2:23:87:47:55:a4:a2:e5:08:43:d0:ab:c7: 0c:9b:b8:d5:bc:24:aa:9c:87:f6:17:f1:c0:53:cd: 9e:0c:2d:89:c8:55:b2:09:eb:2d:e4:33:39:25:38: 2c:0d:15:e2:f8:d7:eb:49:f8:83:19:14:84:cf:0f: 46:b3:91:d2:5e:eb:72:1d:77:4e:30:7c:00:69:c3: c9:09:6b:7f:c4:9c:62:53:e4:f5:18:5b:6c:5d:51: 57:6e:9b:61:50:b5:53:d8:19:b9:3b:97:82:29:82: b5:c5:4d:13:01:c9:96:45:93:5a:04:3f:53:15:ff: 57:f7:b4:d9:4e:f5:fa:c0:8e:59:e1:7d:0e:43:bd: 19:96:31:92:09:5c:21:85:e5:2f:a4:72:0d:35:30: 4f:8f:b7:e9:5f:49:ee:e7:3a:56:42:91:f0:7f:d0: e5:2d:ad:b0:f3:d2:44:a7:23:a5:ae:e6:ff:28:37: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:09:7C:4B:92:FB:3B:03:01:AB:B5:63:73:1D:FD:C3:13:7F:8F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0b3d18c7-9608-3751-85bf-950d43b980dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 104.218.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4c:f5:8e:db:72:73:f9:f5:cd:82:77:5a:e0:bf:a7:94:1d: fa:e1:a2:c5:4d:23:1e:d8:7a:bc:a3:ac:25:e2:5d:bb:54:9f: 17:a4:76:5a:80:16:c5:76:32:cc:f4:8a:a6:5e:c3:70:40:14: 09:9e:fe:d4:57:b4:b8:c5:a0:71:21:40:1d:9a:2a:ae:49:4f: 14:15:6d:65:e4:c3:49:14:0b:e3:6b:e1:bb:a1:79:48:22:34: 76:3e:a7:b0:dc:c8:6a:96:88:ae:ef:f1:9e:c6:05:45:26:45: ec:e1:ea:44:dc:39:8e:c0:3f:b5:7e:a6:03:9a:fb:41:67:98: e2:40:28:e6:60:b9:ff:27:80:bb:60:6c:c9:f9:9b:cd:d1:f4: 38:d8:11:c2:b1:0d:68:d2:2d:64:db:e1:ab:42:ab:f3:49:ef: d9:db:9f:90:74:f3:d5:33:be:2e:0f:10:f2:c1:01:25:e1:ac: 06:68:0e:88:b3:26:5f:a4:f6:73:9f:8f:87:9e:bb:44:a4:fe: 60:24:df:45:61:e5:93:b4:3c:c9:5b:36:a6:95:6f:8d:4e:90: 17:ad:a0:21:e7:35:22:b6:34:d8:e3:bf:dc:c9:be:90:66:c5: e6:14:93:71:3c:8d:8b:c5:2a:88:fe:8e:6d:f0:e1:0e:99:bc: 1d:92:4c:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yeZbQTiElaIUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MDUwZDk0MTYtYzExZC00N2RhLWIxMWEtZTI5ZmI4OWU2ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUMsJAer6Mh4rQ9/MkVOvOPWYQI3C8Yak9ND qmCs+Eg1ntn19C7xG9ZEkAA55f63wSGErpKCoqjAv+L6X2KYZHDdgMuDjAF92LV0 BfIjh0dVpKLlCEPQq8cMm7jVvCSqnIf2F/HAU82eDC2JyFWyCest5DM5JTgsDRXi +NfrSfiDGRSEzw9Gs5HSXutyHXdOMHwAacPJCWt/xJxiU+T1GFtsXVFXbpthULVT 2Bm5O5eCKYK1xU0TAcmWRZNaBD9TFf9X97TZTvX6wI5Z4X0OQ70ZljGSCVwhheUv pHINNTBPj7fpX0nu5zpWQpHwf9DlLa2w89JEpyOlrub/KDd/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcJfEuS+zsDAau1Y3Md/cMTf4/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMGIzZDE4YzctOTYwOC0z NzUxLTg1YmYtOTUwZDQzYjk4MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNM9Y7bcnP59c2Cd1rgv6eUHfrhosVNIx7YeryjrCXiXbtUnxekdlqA FsV2Msz0iqZew3BAFAme/tRXtLjFoHEhQB2aKq5JTxQVbWXkw0kUC+Nr4buheUgi NHY+p7DcyGqWiK7v8Z7GBUUmRezh6kTcOY7AP7V+pgOa+0FnmOJAKOZguf8ngLtg bMn5m83R9DjYEcKxDWjSLWTb4atCq/NJ79nbn5B089Uzvi4PEPLBASXhrAZoDoiz Jl+k9nOfj4eeu0Sk/mAk30Vh5ZO0PMlbNqaVb41OkBetoCHnNSK2NNjjv9zJvpBm xeYUk3E8jYvFKoj+jm3w4Q6ZvB2STBI= -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:57 2025 by rpki-client