$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/32358343-42ca-3c67-b158-df3db2ab5db2.roa File: 32358343-42ca-3c67-b158-df3db2ab5db2.roa (raw, json) Hash identifier: iFulLIZaHgBYGJ7Afq07bLsgsATZBY5aciAVXDw6xIk= Subject key identifier: 07:87:DD:22:E6:68:85:BF:A5:1F:FA:CB:56:0D:75:34:CB:44:89:06 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A6F2076014E65B4E2555B6780 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/32358343-42ca-3c67-b158-df3db2ab5db2.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 15164 IP address blocks: 160.223.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:76:01:4e:65:b4:e2:55:5b:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=1617d1d6-09d6-4e3f-988d-c9790d5a7b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c7:f8:20:1c:e4:34:9f:0c:44:9a:27:ba:57: 5c:33:0b:ec:28:d2:0b:30:13:e1:2b:dd:39:7c:71: a5:e1:fb:38:2c:e1:ab:d0:0b:e1:03:c1:73:dd:60: 31:0f:0e:ff:f1:e9:09:22:02:5e:39:ad:f9:39:ac: 6b:9e:c8:5a:29:87:4e:55:ee:07:fb:bb:95:4a:15: d5:b2:07:ed:dd:75:1e:47:3b:56:a8:c4:91:8f:6b: ed:36:95:26:69:c8:fa:8f:78:c2:1c:d1:0d:f0:a2: 0b:5c:7c:c1:d1:ae:1b:69:f5:cc:75:5b:b6:17:19: b6:a5:9f:d9:49:b2:0f:ae:c2:8a:12:24:fb:16:b1: ed:86:6a:e9:0c:50:e6:7f:e4:9b:31:14:97:be:9e: 80:dd:31:bd:c5:62:ce:69:dd:e3:36:00:bc:72:85: c3:53:61:cc:36:7c:e1:a4:cc:86:28:67:3c:f1:d9: 57:18:3e:29:b0:af:40:02:26:70:37:cf:2e:96:14: af:18:b2:1e:a0:aa:5d:86:07:26:13:ce:ee:48:7e: f6:3c:91:34:e6:54:7e:fb:34:75:7e:66:99:47:01: 9d:c7:70:f9:49:c3:19:3c:60:c9:3d:fe:0c:f4:34: da:4a:0b:15:4d:89:5d:4e:dc:99:af:5e:81:72:a1: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:DD:22:E6:68:85:BF:A5:1F:FA:CB:56:0D:75:34:CB:44:89:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/32358343-42ca-3c67-b158-df3db2ab5db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 160.223.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:1f:0d:63:cd:91:b7:98:0c:3b:4e:2c:7b:02:89:3b:40:3d: 83:b1:a1:2d:48:0e:35:94:26:31:b9:5c:25:18:74:a5:b4:26: 21:0b:37:bd:07:f8:d4:67:d0:cf:f8:0c:8c:c4:23:5e:9b:57: 9d:66:1e:44:f9:a2:de:c9:a2:91:0c:5f:23:f9:82:e7:3c:c1: f2:42:ba:cc:de:74:0f:1b:f9:64:fe:50:30:98:7f:10:d0:3c: cb:a2:d0:a8:dc:71:42:60:d5:65:27:75:c6:1d:ae:31:d0:73: 3e:b9:1a:ca:e3:cc:91:b4:9f:ea:f9:e1:f8:9c:09:fd:9d:78: cd:56:05:63:c4:0d:0c:00:52:4f:6f:0c:85:d5:84:0f:bb:a4: 21:9c:11:47:20:7c:b4:78:50:44:ca:f0:59:80:8f:17:21:5d: 50:9b:c4:14:1c:b0:35:22:11:d3:c1:bd:4e:f8:4e:1d:e5:95: dc:04:b6:68:0f:65:69:85:2f:c4:fb:ed:87:63:76:40:73:41: 09:04:9a:e8:a7:3f:db:28:9b:36:fd:b9:88:1e:6a:32:1e:50: 61:6f:e8:94:20:f1:96:f7:08:ca:58:fb:d2:19:f7:0c:27:62: 7c:a8:79:67:a5:52:2b:39:a9:ae:5c:2c:ee:77:3e:91:8a:2d: 8f:36:10:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHYBTmW04lVbZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk MTYxN2QxZDYtMDlkNi00ZTNmLTk4OGQtYzk3OTBkNWE3YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8f4IBzkNJ8MRJonuldcMwvsKNILMBPhK905 fHGl4fs4LOGr0AvhA8Fz3WAxDw7/8ekJIgJeOa35OaxrnshaKYdOVe4H+7uVShXV sgft3XUeRztWqMSRj2vtNpUmacj6j3jCHNEN8KILXHzB0a4bafXMdVu2Fxm2pZ/Z SbIPrsKKEiT7FrHthmrpDFDmf+SbMRSXvp6A3TG9xWLOad3jNgC8coXDU2HMNnzh pMyGKGc88dlXGD4psK9AAiZwN88ulhSvGLIeoKpdhgcmE87uSH72PJE05lR++zR1 fmaZRwGdx3D5ScMZPGDJPf4M9DTaSgsVTYldTtyZr16BcqGKbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeH3SLmaIW/pR/6y1YNdTTLRIkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMzIzNTgzNDMtNDJjYS0z YzY3LWIxNTgtZGYzZGIyYWI1ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoN+2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEfDWPNkbeYDDtOLHsCiTtAPYOxoS1IDjWUJjG5XCUYdKW0JiELN70H +NRn0M/4DIzEI16bV51mHkT5ot7JopEMXyP5guc8wfJCuszedA8b+WT+UDCYfxDQ PMui0KjccUJg1WUndcYdrjHQcz65GsrjzJG0n+r54ficCf2deM1WBWPEDQwAUk9v DIXVhA+7pCGcEUcgfLR4UETK8FmAjxchXVCbxBQcsDUiEdPBvU74Th3lldwEtmgP ZWmFL8T77YdjdkBzQQkEmuinP9somzb9uYgeajIeUGFv6JQg8Zb3CMpY+9IZ9wwn YnyoeWelUis5qa5cLO53PpGKLY82ECE= -----END CERTIFICATE-----Generated at Fri Aug 8 20:58:08 2025 by rpki-client