$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa File: 61f3e7bb-3cef-3819-a71f-ff3645a33210.roa (raw, json) Hash identifier: U9cFX9QHcsnyEl+CW0ptWK7whPr4pLR2hRCEfC4D05k= Subject key identifier: C3:F2:1E:2A:61:0D:29:2C:76:E8:47:60:20:23:81:3A:EE:93:CA:EE Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584B9E07B1063293A9D7DC869A80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 20303 IP address blocks: 69.91.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b1:06:32:93:a9:d7:dc:86:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=a1f2097f-f940-4085-90a2-49f800cdf12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ae:82:f2:87:17:b9:21:ea:f7:ae:fd:d7:8d: 38:0a:05:34:4f:d2:b9:03:8d:d5:17:80:7b:e6:d4: 61:2d:ea:c8:62:35:a0:c6:73:96:b0:04:00:db:2e: e8:24:32:fb:05:8e:e0:b3:d6:c1:d0:aa:4a:9f:c0: 21:f5:20:d6:62:1c:77:77:2a:fc:dd:43:35:12:4b: 7e:fc:5b:fc:ed:1e:41:69:5e:74:fa:f7:4c:fa:91: d5:a4:e9:39:ce:cc:5f:81:c5:08:8d:ac:43:73:5b: c7:7a:6c:ee:cc:1f:14:70:95:46:e8:04:c4:16:10: a2:7f:6c:42:62:28:a1:a7:00:ce:5a:52:fc:1e:97: 7e:7c:69:58:0b:da:0f:d6:02:86:34:6e:41:9a:dd: ee:9c:06:35:93:37:04:46:5b:74:72:5f:53:e3:72: 11:92:8e:d1:ba:43:79:8a:8d:21:8f:30:0f:87:0f: 53:23:56:3c:fd:8b:ce:47:44:cb:85:31:5e:03:fa: 75:76:41:8c:14:ee:0e:01:02:dc:92:2c:3d:2b:d7: 70:1a:f4:50:b6:fa:0f:42:b5:96:75:fc:2d:30:1c: 4a:a8:13:6e:40:90:5d:91:55:53:29:22:7b:14:c4: ae:1a:f8:50:a7:f9:21:d1:d6:4e:37:4b:3d:31:b5: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F2:1E:2A:61:0D:29:2C:76:E8:47:60:20:23:81:3A:EE:93:CA:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 69.91.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3d:ce:6b:08:8c:4f:9d:b7:31:dd:d2:95:8d:7f:45:5d:ff: 39:ab:e6:6e:c4:bc:d3:cc:44:f7:e2:fe:3a:ee:3f:4b:c8:d8: ed:b6:7a:de:3c:c0:2a:ef:9a:06:a1:88:54:e7:2c:10:c7:8f: 92:c8:5a:70:92:7d:1b:bb:15:2d:52:06:09:69:76:54:0e:f1: 85:2d:2f:aa:00:1f:55:de:02:bb:9d:67:18:42:3d:6e:52:21: f8:d4:ea:3d:3a:26:76:8f:17:c8:f5:3d:f2:d3:04:0c:71:66: 3d:9d:9d:3c:a2:6c:50:35:9c:43:2a:68:e5:54:75:12:8e:85: cd:0b:6e:c8:3d:42:52:56:0c:c3:48:fd:d5:11:6b:47:39:51: f8:fe:31:c9:43:05:7f:94:06:c1:4c:79:b7:62:a4:d4:83:9e: df:51:c9:e1:67:d0:90:dd:f7:b7:1e:f4:c4:60:b6:a3:de:41: 33:e3:ee:be:a3:d4:6e:74:86:8b:cb:32:8e:f4:79:49:fa:21: 58:ad:44:f0:fd:b5:0c:cc:98:89:46:f7:b3:4c:52:a0:40:93: 61:71:db:eb:34:69:6b:d0:34:52:c4:da:ac:3c:5a:7a:7d:b9: 8a:7d:5a:43:a6:4a:4c:eb:28:f9:0e:40:0f:c8:ae:bf:40:e6: 6e:6c:93:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7EGMpOp19yGmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTFmMjA5N2YtZjk0MC00MDg1LTkwYTItNDlmODAwY2RmMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK6C8ocXuSHq96791404CgU0T9K5A43VF4B7 5tRhLerIYjWgxnOWsAQA2y7oJDL7BY7gs9bB0KpKn8Ah9SDWYhx3dyr83UM1Ekt+ /Fv87R5BaV50+vdM+pHVpOk5zsxfgcUIjaxDc1vHemzuzB8UcJVG6ATEFhCif2xC YiihpwDOWlL8Hpd+fGlYC9oP1gKGNG5Bmt3unAY1kzcERlt0cl9T43IRko7RukN5 io0hjzAPhw9TI1Y8/YvOR0TLhTFeA/p1dkGMFO4OAQLckiw9K9dwGvRQtvoPQrWW dfwtMBxKqBNuQJBdkVVTKSJ7FMSuGvhQp/kh0dZON0s9MbWdZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPyHiphDSksduhHYCAjgTruk8ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjFmM2U3YmItM2NlZi0z ODE5LWE3MWYtZmYzNjQ1YTMzMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRVuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU9zmsIjE+dtzHd0pWNf0Vd/zmr5m7EvNPMRPfi/jruP0vI2O22et48 wCrvmgahiFTnLBDHj5LIWnCSfRu7FS1SBglpdlQO8YUtL6oAH1XeArudZxhCPW5S IfjU6j06JnaPF8j1PfLTBAxxZj2dnTyibFA1nEMqaOVUdRKOhc0Lbsg9QlJWDMNI /dURa0c5Ufj+MclDBX+UBsFMebdipNSDnt9RyeFn0JDd97ce9MRgtqPeQTPj7r6j 1G50hovLMo70eUn6IVitRPD9tQzMmIlG97NMUqBAk2Fx2+s0aWvQNFLE2qw8Wnp9 uYp9WkOmSkzrKPkOQA/Irr9A5m5sk7c= -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:46 2025 by rpki-client