$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/625496d5-12d9-371d-a507-f48468438087.roa File: 625496d5-12d9-371d-a507-f48468438087.roa (raw, json) Hash identifier: L7G7JwdQxQeGLZvxOQWg+YgXsKfy1YSe6MKMMH/eYbQ= Subject key identifier: 42:6C:30:1C:31:18:B4:5A:D0:42:54:0B:7F:7A:48:0D:9C:6C:3B:F6 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D04E24330774805BE7FAA2180 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/625496d5-12d9-371d-a507-f48468438087.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 15164 IP address blocks: 138.199.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:43:30:77:48:05:be:7f:aa:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=193584da-e819-4791-80d2-5e7ebf92b81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8e:79:b6:06:3d:60:9e:48:4c:d3:71:bb:98: 01:e3:86:46:7c:ce:cb:10:cf:da:32:59:da:71:6b: a5:7a:79:a5:5c:75:73:7a:d6:bb:6d:bb:1d:17:5f: 9a:28:7b:79:f1:01:4d:d8:49:98:df:c1:68:2e:ab: c0:85:94:ff:cb:e1:10:39:b8:90:f7:80:ef:c2:46: 1b:6e:23:3b:cd:12:0c:1b:2d:00:6b:7b:a4:8d:83: c5:06:85:77:4d:17:9e:67:cf:c1:62:30:45:dc:57: 9b:d8:e8:33:d4:99:ae:e0:df:93:61:d5:b7:18:95: a6:53:80:72:5e:b6:01:37:de:86:3c:fa:c5:b0:6d: ac:d6:2f:29:c7:2b:69:60:77:02:c8:c6:42:68:39: fd:41:44:d4:fd:e5:e9:6c:f5:a1:9c:4e:eb:a9:36: 4c:81:0f:43:d0:1f:76:06:45:a0:f4:90:88:b0:92: 38:80:79:d9:3c:50:c7:c0:4b:d4:42:08:1e:c2:85: 50:d7:36:90:7e:e1:19:7e:dc:fc:2f:35:b1:1c:2a: 84:1e:ab:26:ec:8f:28:5a:ab:d4:62:ec:cd:cf:46: f5:a1:e1:05:60:e4:1f:ad:ea:39:5f:8e:ca:69:dd: 21:2f:85:ba:ef:15:cf:95:2b:4d:3a:56:bb:94:b5: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6C:30:1C:31:18:B4:5A:D0:42:54:0B:7F:7A:48:0D:9C:6C:3B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/625496d5-12d9-371d-a507-f48468438087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d5:05:00:d1:18:2d:8c:aa:55:4f:87:13:6a:22:61:4e:66: 1a:34:c3:de:84:f1:bb:f0:ed:02:02:97:a9:20:f2:2b:13:6d: 7c:dc:88:0f:90:24:33:a9:5a:e4:5e:b5:55:d0:2b:6d:ac:1c: 7f:3a:98:21:80:af:09:c2:f7:2d:c0:da:58:ce:5a:dc:c5:7f: 01:a0:9b:6b:95:ea:2b:75:11:b5:6e:0a:f2:39:96:7a:ed:77: 80:51:04:2e:52:8b:6e:51:2c:be:4b:95:c8:0a:64:65:a8:e3: 56:26:e9:ac:85:5c:d3:25:d6:fc:da:2b:96:7d:1f:0b:b5:27: 30:94:cd:c7:7a:9f:7e:c6:99:76:ae:1f:b7:f0:02:4c:54:16: 54:f7:22:0e:93:f2:7f:77:a0:b5:a1:30:a2:c6:70:c6:0f:2c: 0a:00:3b:7e:5f:8e:80:c2:14:6a:8e:f3:92:f0:b6:b3:56:f1: 8a:ef:ce:c7:81:96:68:11:05:aa:5b:57:b4:af:1a:51:f2:f9: c2:7c:00:1e:a3:cd:d7:97:b0:b9:f7:2a:74:eb:fb:48:2e:a8: 3a:40:38:08:46:0a:8d:6b:44:95:be:75:17:4f:53:c9:91:07: 9c:07:12:b4:1f:ee:4f:1b:91:0f:31:9c:a6:2a:33:4f:a5:40: 77:a2:2c:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4kMwd0gFvn+qIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk MTkzNTg0ZGEtZTgxOS00NzkxLTgwZDItNWU3ZWJmOTJiODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y55tgY9YJ5ITNNxu5gB44ZGfM7LEM/aMlna cWulenmlXHVzeta7bbsdF1+aKHt58QFN2EmY38FoLqvAhZT/y+EQObiQ94DvwkYb biM7zRIMGy0Aa3ukjYPFBoV3TReeZ8/BYjBF3Feb2Ogz1Jmu4N+TYdW3GJWmU4By XrYBN96GPPrFsG2s1i8pxytpYHcCyMZCaDn9QUTU/eXpbPWhnE7rqTZMgQ9D0B92 BkWg9JCIsJI4gHnZPFDHwEvUQggewoVQ1zaQfuEZftz8LzWxHCqEHqsm7I8oWqvU YuzNz0b1oeEFYOQfreo5X47Kad0hL4W67xXPlStNOla7lLVG2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJsMBwxGLRa0EJUC396SA2cbDv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNjI1NDk2ZDUtMTJkOS0z NzFkLWE1MDctZjQ4NDY4NDM4MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLVBQDRGC2MqlVPhxNqImFOZho0w96E8bvw7QICl6kg8isTbXzciA+Q JDOpWuRetVXQK22sHH86mCGArwnC9y3A2ljOWtzFfwGgm2uV6it1EbVuCvI5lnrt d4BRBC5Si25RLL5LlcgKZGWo41Ym6ayFXNMl1vzaK5Z9Hwu1JzCUzcd6n37GmXau H7fwAkxUFlT3Ig6T8n93oLWhMKLGcMYPLAoAO35fjoDCFGqO85LwtrNW8YrvzseB lmgRBapbV7SvGlHy+cJ8AB6jzdeXsLn3KnTr+0guqDpAOAhGCo1rRJW+dRdPU8mR B5wHErQf7k8bkQ8xnKYqM0+lQHeiLB8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:57:14 2026 by rpki-client