$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa File: e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa (raw, json) Hash identifier: 3zaBq+NehEy5CsmVK05NuvZrMf2zcYesRWt9BHvpGiU= Subject key identifier: FA:52:E1:3F:F5:65:EB:2E:6C:A2:24:B5:18:90:06:CC:B3:AC:6B:F2 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7C4D43913D1B21E51670 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 173.244.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7c:4d:43:91:3d:1b:21:e5:16:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=bda1a2b5-d672-4e0c-a7f5-24ca41eb3654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9d:0d:5c:6b:52:07:67:a1:1e:cc:a5:ee:a0: ef:2a:8b:3d:59:7b:5d:fd:c1:1a:36:85:df:6a:94: ab:b2:99:b2:df:7c:3c:2f:d9:53:13:68:ee:cf:bd: 69:37:47:73:77:27:63:66:59:7c:bf:9a:9e:83:04: 31:d0:11:30:00:ae:66:c8:e2:1e:7e:c2:2a:1a:08: 79:36:92:35:bf:b8:33:91:18:e1:ef:cd:d2:23:c7: 34:b3:62:c0:5d:dd:d2:31:c4:4d:c3:6f:0a:60:b9: 3d:a9:8a:1e:8d:06:a9:0a:f3:c8:ef:3c:af:f6:85: 1e:b6:6e:cf:63:92:00:64:17:a6:75:8f:8b:c5:25: d5:72:a7:2e:24:dc:88:86:34:91:3b:20:75:8c:31: 2d:9b:a0:26:a3:3c:86:a2:b5:0d:59:5f:27:86:ad: 57:98:7f:d8:2a:b6:e8:99:3c:98:9e:4f:ef:ff:bb: 9b:00:34:d3:fd:db:6a:16:f0:7e:56:ad:1f:af:ff: 15:e4:01:5e:df:bc:ad:e0:0c:a7:d7:3b:8c:b4:b5: 3d:90:fb:6f:fc:e8:81:7a:f1:cc:9d:5b:97:42:96: 35:a9:13:2b:42:e3:12:06:6b:9d:d3:23:44:07:d3: 41:ef:4d:43:e1:2c:34:1a:a9:35:b6:65:0b:46:9b: d9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:52:E1:3F:F5:65:EB:2E:6C:A2:24:B5:18:90:06:CC:B3:AC:6B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cd:73:8e:1b:56:95:ff:ad:71:d7:d3:fb:30:18:fe:28:2b: 1a:59:a7:89:f2:a5:32:a1:bf:f2:ff:93:91:40:e5:e4:14:41: 70:6d:33:86:0b:c6:0c:6b:c7:69:d8:a8:62:80:95:bb:d4:18: 04:bc:22:4e:96:ca:d1:54:b8:16:ed:d1:46:b8:d3:21:22:78: 92:5b:0c:ad:5d:5d:e8:0a:6f:1d:61:15:e5:99:94:8f:0e:c0: e8:d7:24:06:dd:e4:71:19:60:6f:ca:66:7e:16:84:d0:90:b9: fa:71:82:3a:d4:34:fa:d0:06:1d:64:41:01:dd:da:e2:f7:91: e8:1d:28:41:76:7a:16:b5:40:b9:65:6f:36:e0:1b:39:c5:24: 46:d1:66:30:3c:b6:42:cc:e2:51:07:c6:39:67:26:fb:5e:55: 97:dc:ec:42:93:4d:7b:aa:e2:ec:51:03:23:fa:5e:83:43:42: a3:33:fd:0b:2f:91:66:24:eb:49:82:ce:01:57:21:48:98:98: fb:6a:f8:25:77:0d:7f:af:35:a7:13:3c:c0:b3:3e:3e:f7:8b: 9d:fd:e3:2f:58:18:d2:90:04:32:79:2c:73:fe:c6:99:95:76: 65:ab:04:a7:fe:c2:be:ae:22:95:96:46:52:f3:ce:12:4e:60: 30:75:fa:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HxNQ5E9GyHlFnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YmRhMWEyYjUtZDY3Mi00ZTBjLWE3ZjUtMjRjYTQxZWIzNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp0NXGtSB2ehHsyl7qDvKos9WXtd/cEaNoXf apSrspmy33w8L9lTE2juz71pN0dzdydjZll8v5qegwQx0BEwAK5myOIefsIqGgh5 NpI1v7gzkRjh783SI8c0s2LAXd3SMcRNw28KYLk9qYoejQapCvPI7zyv9oUetm7P Y5IAZBemdY+LxSXVcqcuJNyIhjSROyB1jDEtm6AmozyGorUNWV8nhq1XmH/YKrbo mTyYnk/v/7ubADTT/dtqFvB+Vq0fr/8V5AFe37yt4Ayn1zuMtLU9kPtv/OiBevHM nVuXQpY1qRMrQuMSBmud0yNEB9NB701D4Sw0Gqk1tmULRpvZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpS4T/1ZesubKIktRiQBsyzrGvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZTdmMGFhZjAtMWNhMC0z OWM3LWFiMDEtMGNiNTIxMzg5ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfNc44bVpX/rXHX0/swGP4oKxpZp4nypTKhv/L/k5FA5eQUQXBtM4YL xgxrx2nYqGKAlbvUGAS8Ik6WytFUuBbt0Ua40yEieJJbDK1dXegKbx1hFeWZlI8O wOjXJAbd5HEZYG/KZn4WhNCQufpxgjrUNPrQBh1kQQHd2uL3kegdKEF2eha1QLll bzbgGznFJEbRZjA8tkLM4lEHxjlnJvteVZfc7EKTTXuq4uxRAyP6XoNDQqMz/Qsv kWYk60mCzgFXIUiYmPtq+CV3DX+vNacTPMCzPj73i5394y9YGNKQBDJ5LHP+xpmV dmWrBKf+wr6uIpWWRlLzzhJOYDB1+tI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:34 2025 by rpki-client