$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c4e3cc3d-7a3d-3298-935b-655b02919503.roa File: c4e3cc3d-7a3d-3298-935b-655b02919503.roa (raw, json) Hash identifier: ncXI3L2UOEkhyfTl2CKHo9LZXr1/N7lwl/eC3Ds6IMQ= Subject key identifier: 58:36:75:C3:7C:B1:3A:53:F5:75:EE:AA:60:69:E6:DE:87:0B:D4:2E Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B8D8EDA44BB0E3A35342ECF00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c4e3cc3d-7a3d-3298-935b-655b02919503.roa Signing time: Fri 17 Oct 2025 15:24:30 +0000 ROA not before: Fri 17 Oct 2025 15:24:30 +0000 ROA not after: Thu 15 Jan 2026 16:24:30 +0000 asID: 15164 IP address blocks: 205.184.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:8e:da:44:bb:0e:3a:35:34:2e:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Oct 17 15:24:30 2025 GMT Not After : Jan 15 16:24:30 2026 GMT Subject: CN=ff691e0a-1682-40a0-8d5e-9ab1d5b78c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4f:0d:8d:b7:bb:30:32:3c:dd:85:fe:69:2a: ae:33:27:3d:63:25:fb:87:7d:4b:08:07:a0:1b:99: ae:ec:d1:46:fe:8a:45:36:e7:48:6c:ea:a9:32:ca: b9:88:47:3c:1b:06:94:9c:a6:9b:aa:8f:99:2c:c8: c2:43:46:53:45:40:d7:d7:29:98:78:0b:48:2d:af: 23:7c:95:65:01:82:0e:75:9b:f1:13:76:1b:7a:1f: 0e:93:88:19:9d:70:21:73:be:df:4d:01:4f:35:d2: 57:ca:40:71:28:a1:d8:76:57:d4:a9:e3:f4:d8:a8: 5d:43:33:78:23:e6:15:82:e0:a0:45:27:88:52:e2: 5a:a3:88:77:ea:20:9c:13:6a:8b:8f:0e:f8:28:e5: 23:5c:2c:25:f0:d0:d1:2b:59:94:a2:e3:c5:cc:f5: 17:fa:25:da:c6:66:13:83:c7:d9:81:ee:7e:1d:b0: 3e:10:8c:ef:0e:b8:db:14:5d:e7:03:e4:1f:53:e6: 13:9f:b0:ce:70:40:ee:45:01:e6:02:f1:cb:13:5e: de:1b:b6:c8:7c:63:35:5f:b0:4a:02:fb:fa:f0:1b: 73:74:87:43:ae:be:84:34:62:69:4d:d9:5b:13:0b: 1d:cd:c2:07:70:78:74:ae:da:40:25:96:b5:ba:fa: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:36:75:C3:7C:B1:3A:53:F5:75:EE:AA:60:69:E6:DE:87:0B:D4:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c4e3cc3d-7a3d-3298-935b-655b02919503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 205.184.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e6:15:f4:45:80:11:d5:5c:d9:ea:84:40:d4:3a:f3:83:8a: 3a:6b:3a:a9:a3:b3:4e:72:94:07:cf:48:d5:30:e3:11:23:0d: 97:44:11:85:67:25:b2:1f:fd:9c:02:d3:5a:61:5b:c1:bb:4e: 10:af:f7:64:92:dc:35:e2:f1:ee:f1:f2:b6:11:2a:24:3e:61: 77:74:aa:93:b4:cf:99:ff:ec:f6:02:40:2e:15:74:c2:b1:67: a9:41:ea:25:b2:9d:18:79:0c:a9:9c:17:a7:e8:d0:23:3f:ce: ef:ba:0f:04:8c:40:c2:c5:42:86:40:5c:fa:06:ae:39:b0:fc: 8a:0a:87:da:65:9e:88:10:d0:6f:83:80:dc:16:ed:4b:1a:6a: 3e:65:8d:05:44:fc:ea:9d:b9:bd:42:70:8e:71:8c:65:ef:48: 45:c5:d8:46:7e:bc:79:3b:c9:6b:13:1b:3c:9e:7c:63:a6:08: 86:5c:a7:cf:e8:74:e0:07:8b:cd:0a:f1:09:c3:1a:43:55:83: 95:76:a3:7c:c1:86:b5:4d:42:23:c7:bb:32:8c:e1:8d:48:e9: e8:bd:d1:39:d0:73:e8:cb:de:fc:59:9d:e9:67:2a:2b:36:98: fd:61:4e:63:62:72:24:84:75:4b:b9:67:43:52:a2:8b:53:ec: e8:af:bd:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNjtpEuw46NTQuzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MTAxNzE1MjQzMFoXDTI2MDExNTE2MjQzMFowLzEtMCsGA1UEAxMk ZmY2OTFlMGEtMTY4Mi00MGEwLThkNWUtOWFiMWQ1Yjc4Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU8Njbe7MDI83YX+aSquMyc9YyX7h31LCAeg G5mu7NFG/opFNudIbOqpMsq5iEc8GwaUnKabqo+ZLMjCQ0ZTRUDX1ymYeAtILa8j fJVlAYIOdZvxE3Ybeh8Ok4gZnXAhc77fTQFPNdJXykBxKKHYdlfUqeP02KhdQzN4 I+YVguCgRSeIUuJao4h36iCcE2qLjw74KOUjXCwl8NDRK1mUouPFzPUX+iXaxmYT g8fZge5+HbA+EIzvDrjbFF3nA+QfU+YTn7DOcEDuRQHmAvHLE17eG7bIfGM1X7BK Avv68BtzdIdDrr6ENGJpTdlbEwsdzcIHcHh0rtpAJZa1uvrqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg2dcN8sTpT9XXuqmBp5t6HC9QuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYzRlM2NjM2QtN2EzZC0z Mjk4LTkzNWItNjU1YjAyOTE5NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzbheMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLmFfRFgBHVXNnqhEDUOvODijprOqmjs05ylAfPSNUw4xEjDZdEEYVn JbIf/ZwC01phW8G7ThCv92SS3DXi8e7x8rYRKiQ+YXd0qpO0z5n/7PYCQC4VdMKx Z6lB6iWynRh5DKmcF6fo0CM/zu+6DwSMQMLFQoZAXPoGrjmw/IoKh9plnogQ0G+D gNwW7Usaaj5ljQVE/Oqdub1CcI5xjGXvSEXF2EZ+vHk7yWsTGzyefGOmCIZcp8/o dOAHi80K8QnDGkNVg5V2o3zBhrVNQiPHuzKM4Y1I6ei90TnQc+jL3vxZnelnKis2 mP1hTmNiciSEdUu5Z0NSootT7OivvQU= -----END CERTIFICATE-----Generated at Tue Oct 21 03:02:40 2025 by rpki-client