$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/13774f20-e386-3984-990b-faa814a86a0c.roa File: 13774f20-e386-3984-990b-faa814a86a0c.roa (raw, json) Hash identifier: pENOa7VizD3EBaU1DiSPB1lb/+bxe4ECYRqn6Rl34SA= Subject key identifier: A8:B2:05:AB:C2:63:EB:70:DB:45:5D:96:11:0C:1B:FD:41:5C:AB:69 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A63F5BEEE9BC1B8D521B42880 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/13774f20-e386-3984-990b-faa814a86a0c.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 15164 IP address blocks: 138.199.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:be:ee:9b:c1:b8:d5:21:b4:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=6cf4731e-8923-4fe3-9286-89a10526ec6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:8e:3d:a1:40:1e:20:79:e6:a8:69:93:ef: 33:34:fc:fd:28:ab:ea:6e:2a:f4:f5:55:9f:20:b7: 66:62:d0:07:51:38:bd:47:cb:f3:42:ae:2d:f1:ba: 68:47:43:c9:96:6a:d8:4b:0a:81:a4:3c:86:d8:e7: 1c:ed:9e:ce:82:dd:87:bb:e9:34:6c:c4:47:2d:79: ea:2a:bd:a6:d3:8b:02:3f:a9:4d:fc:e1:52:79:4b: 3e:28:ae:e7:9d:04:51:49:c8:f7:12:28:7d:6a:69: 99:dc:a6:f9:3f:c5:c8:05:33:4a:02:4c:e1:53:b2: 26:d1:e6:c3:05:a0:3f:46:6d:ec:f5:5c:01:44:24: 2a:30:3e:bc:a9:09:5d:55:31:b7:d5:bb:d2:f6:42: 25:d8:ca:0d:66:ec:bc:d1:95:31:38:af:cb:8d:b0: 83:ad:53:00:e1:00:c5:03:0c:73:3f:2f:91:f0:57: 95:6d:61:41:9a:a8:b8:31:39:da:98:1f:65:a5:5c: f5:01:d2:44:70:61:86:6f:12:74:b9:90:25:5c:e3: 91:0f:61:1d:5f:13:f0:7a:9a:54:cb:6d:75:d0:ee: 44:fc:50:82:4d:3b:5d:a5:09:1f:cf:2a:b8:f1:9c: 7f:42:8c:ff:f2:59:c4:a0:9b:59:73:2e:e0:aa:b3: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B2:05:AB:C2:63:EB:70:DB:45:5D:96:11:0C:1B:FD:41:5C:AB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/13774f20-e386-3984-990b-faa814a86a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:bb:b3:0e:f1:c3:e3:84:3d:9f:ba:84:af:a1:36:ee:9e:8c: a1:1b:a2:32:4d:f1:34:a1:b2:34:29:c5:32:da:0e:b1:5b:fe: e9:b0:85:b4:07:95:78:d0:7f:96:1f:32:22:42:ba:df:cc:4b: 0b:cc:46:ac:ff:11:51:0b:72:a0:50:98:70:59:3d:a0:c4:66: bd:bc:1c:9e:86:a6:89:c8:75:18:b5:15:25:1b:d0:a4:82:56: 49:b2:45:10:d4:fc:71:49:d4:40:f1:9d:47:5f:8f:9d:44:d0: 6a:eb:af:6e:4f:5a:09:2b:6e:16:e9:d1:51:1e:33:c6:f5:45: c2:65:c3:b1:d7:9d:58:50:bd:a3:7a:44:4f:76:13:df:91:62: f6:ea:7b:55:f0:46:c3:ea:9b:98:ca:f6:9a:ba:1c:fb:e8:ba: 92:e6:1a:59:85:98:61:51:bd:81:f0:9a:29:79:d1:6c:d7:e7: 2b:98:12:ed:ae:54:0c:02:a0:6c:4f:38:3f:6d:b0:91:12:0e: 9f:e0:4e:2a:95:06:d1:a8:45:bd:25:03:9e:98:14:df:97:f3: a3:a5:f0:a0:01:e5:e3:39:d6:da:97:54:d2:66:cf:f2:63:af: f7:aa:0b:81:fa:d3:d0:d7:ce:46:35:8c:10:8f:fc:f2:68:00: 30:da:55:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9b7um8G41SG0KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk NmNmNDczMWUtODkyMy00ZmUzLTkyODYtODlhMTA1MjZlYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyiOPaFAHiB55qhpk+8zNPz9KKvqbir09VWf ILdmYtAHUTi9R8vzQq4t8bpoR0PJlmrYSwqBpDyG2Occ7Z7Ogt2Hu+k0bMRHLXnq Kr2m04sCP6lN/OFSeUs+KK7nnQRRScj3Eih9ammZ3Kb5P8XIBTNKAkzhU7Im0ebD BaA/Rm3s9VwBRCQqMD68qQldVTG31bvS9kIl2MoNZuy80ZUxOK/LjbCDrVMA4QDF AwxzPy+R8FeVbWFBmqi4MTnamB9lpVz1AdJEcGGGbxJ0uZAlXOORD2EdXxPweppU y2110O5E/FCCTTtdpQkfzyq48Zx/Qoz/8lnEoJtZcy7gqrP91QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiyBavCY+tw20VdlhEMG/1BXKtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMTM3NzRmMjAtZTM4Ni0z OTg0LTk5MGItZmFhODE0YTg2YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+7sw7xw+OEPZ+6hK+hNu6ejKEbojJN8TShsjQpxTLaDrFb/umwhbQH lXjQf5YfMiJCut/MSwvMRqz/EVELcqBQmHBZPaDEZr28HJ6GponIdRi1FSUb0KSC VkmyRRDU/HFJ1EDxnUdfj51E0Grrr25PWgkrbhbp0VEeM8b1RcJlw7HXnVhQvaN6 RE92E9+RYvbqe1XwRsPqm5jK9pq6HPvoupLmGlmFmGFRvYHwmil50WzX5yuYEu2u VAwCoGxPOD9tsJESDp/gTiqVBtGoRb0lA56YFN+X86Ol8KAB5eM51tqXVNJmz/Jj r/eqC4H609DXzkY1jBCP/PJoADDaVTg= -----END CERTIFICATE-----Generated at Fri Aug 8 19:31:41 2025 by rpki-client