$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa File: ecc2f70e-67af-3a14-9035-096418ec8b92.roa (raw, json) Hash identifier: Ym2UiL/C+D0dIORcfMLBfI7dwmnGsVxo1CDOLoQE+M4= Subject key identifier: D1:12:C8:B1:DE:44:BD:5E:6A:CF:73:DA:BB:B8:86:5C:54:69:FA:0F Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A63F5B33A6A3EA1D89A3BEF60 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 15164 IP address blocks: 138.199.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:b3:3a:6a:3e:a1:d8:9a:3b:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=11475f07-7360-4cc6-88ab-1c855386b22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cc:6a:61:f8:4c:b8:3c:92:a7:26:4a:94:83: b0:50:68:da:99:cd:25:7f:76:3c:91:c0:90:1e:bd: e8:33:8e:82:97:36:6f:6d:4e:21:32:32:f7:9e:0d: 6e:83:79:31:71:4f:43:34:6e:fc:89:f7:fb:42:17: 9c:c6:45:93:3d:eb:35:5e:80:72:54:67:5f:6a:01: 2f:24:7e:fe:ed:81:18:59:bc:8f:59:bd:46:58:9f: a2:03:14:6c:5d:c3:fb:77:75:fe:5a:a5:ef:5c:99: 6d:9d:f2:dc:c9:20:d3:9a:ab:d7:a3:ab:ad:b9:1d: d1:c7:82:62:51:0e:18:bf:5a:c3:ff:0f:2d:f7:9d: 14:5b:13:7a:a1:48:23:b3:b6:9d:16:fa:57:54:3a: 8b:cc:8e:8c:7d:eb:89:94:07:5d:0a:d6:83:42:4c: 2b:13:8a:ef:88:36:dd:75:a9:52:b0:28:12:6b:aa: ec:c1:66:d6:a8:13:e1:75:03:f2:c0:c1:29:e5:3b: 6f:29:b6:e8:6f:ef:d5:d7:73:17:e7:71:22:94:10: be:53:4c:ff:53:fa:dd:3a:53:c7:ef:26:f0:32:4a: f6:7b:6d:17:02:4d:e3:9f:d0:8a:39:72:2a:ae:ef: 54:99:65:b5:9a:1b:f9:a8:9d:9d:9a:1b:f8:60:59: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:C8:B1:DE:44:BD:5E:6A:CF:73:DA:BB:B8:86:5C:54:69:FA:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:38:29:6e:28:61:79:dc:5e:d0:32:66:d3:a6:16:e8:a4:2a: 48:d7:8c:fe:c1:9f:9d:50:b8:11:c5:ca:29:64:6a:bd:4f:b1: cc:28:04:64:ec:d7:3c:23:bd:6f:6a:5f:e1:2f:54:ca:39:56: 5b:4a:92:a8:24:35:b3:76:87:3b:3a:de:45:92:0c:67:11:d3: 09:98:80:34:ff:36:e8:f0:f0:21:e2:63:bd:09:37:ad:25:f7: 3a:a0:21:2a:f9:83:4b:3d:d7:0d:28:cc:3d:86:8f:c6:9e:4c: 2d:6a:dc:9c:26:b0:a0:64:38:0c:2a:6c:ff:a8:04:e6:09:1f: 39:35:43:f4:0f:4f:d6:4d:56:9f:18:0d:96:6f:80:a1:53:12: 37:8b:26:8d:be:eb:ee:2a:a8:d9:35:62:ad:6b:45:8f:3a:2f: 2c:a9:c0:ed:8d:27:0d:35:d2:91:6f:6f:eb:3e:d2:b5:9e:99: fc:b1:19:70:da:d5:93:c0:96:b1:3d:db:23:02:ea:ca:85:85: e2:dc:ad:ac:ba:0c:58:5a:0d:2d:7c:e2:1b:a2:31:71:77:e7: 85:a9:37:e4:ff:97:e6:dc:c3:2c:73:95:73:98:39:58:e0:ae: 42:39:cc:34:cc:7e:f5:ed:7a:13:fe:be:ae:79:2d:cc:ed:91: a6:bf:3f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9bM6aj6h2Jo772AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk MTE0NzVmMDctNzM2MC00Y2M2LTg4YWItMWM4NTUzODZiMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcxqYfhMuDySpyZKlIOwUGjamc0lf3Y8kcCQ Hr3oM46ClzZvbU4hMjL3ng1ug3kxcU9DNG78iff7QhecxkWTPes1XoByVGdfagEv JH7+7YEYWbyPWb1GWJ+iAxRsXcP7d3X+WqXvXJltnfLcySDTmqvXo6utuR3Rx4Ji UQ4Yv1rD/w8t950UWxN6oUgjs7adFvpXVDqLzI6MfeuJlAddCtaDQkwrE4rviDbd dalSsCgSa6rswWbWqBPhdQPywMEp5TtvKbbob+/V13MX53EilBC+U0z/U/rdOlPH 7ybwMkr2e20XAk3jn9CKOXIqru9UmWW1mhv5qJ2dmhv4YFloVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNESyLHeRL1eas9z2ru4hlxUafoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZWNjMmY3MGUtNjdhZi0z YTE0LTkwMzUtMDk2NDE4ZWM4YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKc4KW4oYXncXtAyZtOmFuikKkjXjP7Bn51QuBHFyilkar1PscwoBGTs 1zwjvW9qX+EvVMo5VltKkqgkNbN2hzs63kWSDGcR0wmYgDT/Nujw8CHiY70JN60l 9zqgISr5g0s91w0ozD2Gj8aeTC1q3JwmsKBkOAwqbP+oBOYJHzk1Q/QPT9ZNVp8Y DZZvgKFTEjeLJo2+6+4qqNk1Yq1rRY86LyypwO2NJw010pFvb+s+0rWemfyxGXDa 1ZPAlrE92yMC6sqFheLcray6DFhaDS184huiMXF354WpN+T/l+bcwyxzlXOYOVjg rkI5zDTMfvXtehP+vq55Lcztkaa/PyM= -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:12 2025 by rpki-client