$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4d460c1c-f38a-310b-abcf-d435b18856a3.roa File: 4d460c1c-f38a-310b-abcf-d435b18856a3.roa (raw, json) Hash identifier: ZgqtPV2rXowWtQ6EJoJiUhP6am+f6vDKMLPZUGOdGhc= Subject key identifier: DA:61:9C:26:5B:97:95:27:23:45:82:0A:50:DE:02:49:3C:C2:87:39 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B44B1B62309C22BD6E91F9AA0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4d460c1c-f38a-310b-abcf-d435b18856a3.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 15164 IP address blocks: 138.199.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b6:23:09:c2:2b:d6:e9:1f:9a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=67ed30ed-f7cb-4fce-a3b3-d54879960d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d4:68:72:b6:f1:cd:1d:36:b7:91:57:ac:77: 50:84:12:06:2a:26:a1:80:a9:12:de:dc:f1:aa:06: f0:60:5f:69:52:49:2d:cc:75:a8:ae:ff:6e:43:c8: dc:2b:79:91:bf:b6:94:ea:b0:9c:a7:55:3e:54:13: 13:72:5c:71:e7:ce:dc:25:8e:9f:e1:e1:fc:64:5e: 3c:15:98:39:68:d4:ba:1b:de:ea:ca:e0:a1:dc:c7: 7a:aa:2c:9a:ae:47:a4:4f:8e:29:9f:27:cd:e3:35: eb:13:d7:78:14:51:7e:63:0f:0d:19:0f:f6:32:9f: 9c:5d:aa:09:fa:c4:0b:f0:bd:61:0a:67:d9:73:17: 16:1d:dd:8d:a4:69:45:46:d1:04:50:8d:7d:83:8c: 71:f7:ce:a0:4a:11:98:91:cc:c7:b9:29:f1:57:8e: b8:cc:9c:fc:f8:6c:ca:44:47:90:a9:42:ae:ce:61: 6f:f4:5f:11:85:9a:89:34:7e:9f:e4:7f:c8:90:b2: e8:85:13:30:f3:1c:e0:6b:72:52:36:56:a6:ad:4f: a3:78:e5:80:80:a3:0f:bb:38:18:9b:40:39:f8:e8: f5:c6:4d:8e:45:0b:58:56:72:20:e0:90:82:5c:df: 15:29:c4:84:b2:2f:c3:d7:bf:21:d7:64:75:8c:f6: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:61:9C:26:5B:97:95:27:23:45:82:0A:50:DE:02:49:3C:C2:87:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/4d460c1c-f38a-310b-abcf-d435b18856a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:45:8c:66:bc:1f:03:b0:27:f6:b6:23:ce:47:4f:7c:1a:18: 1a:32:10:d3:aa:ad:f3:26:bd:4f:b8:7f:ca:2d:8d:52:3f:3b: c3:30:88:30:e3:6c:73:23:93:c3:6f:26:03:db:ba:eb:3c:69: b2:3f:83:97:1c:c4:6c:5b:3c:48:b2:7a:14:5f:64:f5:2a:8a: dd:e5:35:bc:b9:c9:08:b6:05:93:2f:be:fb:c5:d7:71:5e:43: 6e:fe:d1:5f:a0:aa:a0:26:39:8f:b3:bc:82:4f:72:f8:8e:b4: ed:eb:8a:1d:d0:cf:80:f4:a5:3f:a5:06:d3:1f:28:b5:15:e5: a8:ad:be:0e:f8:b6:ec:75:8f:b8:91:83:ba:7a:28:01:94:54: d4:f8:fa:2e:11:6a:09:b1:5b:d6:4c:5d:5e:76:b5:dc:8c:64: 35:26:48:57:23:38:75:9b:3e:64:e6:73:22:5f:49:d5:7c:3b: 7e:fc:0f:88:27:f5:18:80:fb:f8:c9:b4:eb:5f:e0:99:8c:d6: dd:25:41:bf:0c:09:68:66:77:41:c7:e4:42:b8:2b:2f:d6:72: ce:72:40:c8:37:25:15:d4:c4:0b:9d:8d:cd:ec:5f:a3:66:d7: b7:95:07:96:f1:e6:02:c4:f5:0b:13:e9:bc:47:74:6b:7a:93: 20:48:a8:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbYjCcIr1ukfmqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk NjdlZDMwZWQtZjdjYi00ZmNlLWEzYjMtZDU0ODc5OTYwZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidRocrbxzR02t5FXrHdQhBIGKiahgKkS3tzx qgbwYF9pUkktzHWorv9uQ8jcK3mRv7aU6rCcp1U+VBMTclxx587cJY6f4eH8ZF48 FZg5aNS6G97qyuCh3Md6qiyarkekT44pnyfN4zXrE9d4FFF+Yw8NGQ/2Mp+cXaoJ +sQL8L1hCmfZcxcWHd2NpGlFRtEEUI19g4xx986gShGYkczHuSnxV464zJz8+GzK REeQqUKuzmFv9F8RhZqJNH6f5H/IkLLohRMw8xzga3JSNlamrU+jeOWAgKMPuzgY m0A5+Oj1xk2ORQtYVnIg4JCCXN8VKcSEsi/D178h12R1jPaMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNphnCZbl5UnI0WCClDeAkk8woc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNGQ0NjBjMWMtZjM4YS0z MTBiLWFiY2YtZDQzNWIxODg1NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANFjGa8HwOwJ/a2I85HT3waGBoyENOqrfMmvU+4f8otjVI/O8MwiDDj bHMjk8NvJgPbuus8abI/g5ccxGxbPEiyehRfZPUqit3lNby5yQi2BZMvvvvF13Fe Q27+0V+gqqAmOY+zvIJPcviOtO3rih3Qz4D0pT+lBtMfKLUV5aitvg74tux1j7iR g7p6KAGUVNT4+i4RagmxW9ZMXV52tdyMZDUmSFcjOHWbPmTmcyJfSdV8O378D4gn 9RiA+/jJtOtf4JmM1t0lQb8MCWhmd0HH5EK4Ky/Wcs5yQMg3JRXUxAudjc3sX6Nm 17eVB5bx5gLE9QsT6bxHdGt6kyBIqOY= -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:39 2025 by rpki-client