$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa File: 1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa (raw, json) Hash identifier: 9wna42sW/RZogsYloXp/EBJ+t74N3fDB0/99PkRbT7s= Subject key identifier: CF:6E:CA:68:4E:58:B3:57:7C:7D:AE:87:A3:17:AD:36:68:9D:AA:8C Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584BB2F7C18D1F368885FE3F3000 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 15164 IP address blocks: 209.71.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c1:8d:1f:36:88:85:fe:3f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=ca384505-7d72-4460-a9b4-dae93310025d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7d:0c:c2:a9:54:2f:d6:ff:ca:ab:09:15:53: 49:b0:5c:f7:f6:83:49:5c:c6:cf:60:1b:e8:21:04: e9:3f:a3:5f:6e:18:dc:6c:0d:4f:a6:60:86:ce:b8: 7c:11:73:6c:f8:b3:0e:7a:c1:39:60:b0:d8:c1:2b: 71:b2:29:37:c1:cb:1a:38:0d:bb:02:8c:63:11:ac: 82:99:5e:69:1e:8b:51:37:2b:be:4e:3a:f3:c5:37: 39:c6:d9:96:26:e2:05:d9:e7:ad:09:87:fc:56:d0: 8f:8d:ec:7d:40:e4:91:a4:89:6e:cf:d8:76:95:33: 60:85:3a:35:04:ac:a5:e9:86:f1:4f:a0:c5:9a:fa: ee:fc:2c:14:32:ab:7f:5c:1f:f1:a3:41:a5:0f:f4: 3b:2c:90:94:9a:d8:a2:d1:6e:8c:b0:00:e4:80:40: c9:fe:55:d1:78:8f:f2:62:43:55:51:75:c3:58:26: 9a:b4:b1:bb:db:24:77:cb:1c:af:c4:c1:b9:83:6d: a2:c2:b1:6a:74:a1:b3:b5:ba:1f:8f:e9:43:3c:eb: 75:f9:9f:68:b1:e9:b1:d7:d7:8a:6e:ab:9b:0f:5c: 3f:9a:b5:36:d8:be:05:fa:14:3a:89:1b:f6:d1:50: 55:4f:2d:65:34:42:88:b0:6b:91:0e:dc:ce:4e:40: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6E:CA:68:4E:58:B3:57:7C:7D:AE:87:A3:17:AD:36:68:9D:AA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a3:b5:6d:a1:bd:26:63:a1:da:51:25:a5:59:5d:da:a1:d0: f7:81:ec:1d:56:36:4f:2f:36:cb:93:a0:17:9e:49:f8:2b:c1: ea:ff:85:67:9b:74:09:72:81:b2:1e:eb:cc:fe:73:33:34:47: fd:43:2e:de:6a:b7:60:62:00:90:29:cc:d4:46:6e:f8:e0:d0: 70:e7:ef:1d:b5:26:aa:29:73:36:da:e4:8f:57:e7:c7:f7:65: b3:46:1f:48:b6:ec:d2:12:d1:41:53:b7:3f:9d:d8:2a:9d:44: 63:2b:cf:0c:cd:90:bf:aa:6d:b4:db:4a:c7:e3:00:e4:e5:f4: b4:99:37:8e:b1:3f:22:af:3c:12:47:ca:cc:e5:cb:35:4e:d3: 1e:b8:4b:76:20:d8:c5:66:9f:61:3f:b2:6c:6d:9d:4a:c5:4b: 39:98:8c:1c:a2:f3:62:8f:ef:e4:66:14:97:28:8f:32:15:41: b4:36:fe:5f:13:7a:f4:fc:91:40:c5:29:87:65:d6:c2:d5:8f: 00:8a:16:e1:3b:63:84:5f:13:12:97:4e:25:5f:f0:19:67:5f: c5:b3:84:72:af:48:70:37:aa:78:42:7a:cf:87:84:a1:f8:8d: 9c:74:24:26:06:bd:6e:d3:97:d1:ed:1a:0b:e9:90:6e:8c:9b: 9f:eb:f3:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98GNHzaIhf4/MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk Y2EzODQ1MDUtN2Q3Mi00NDYwLWE5YjQtZGFlOTMzMTAwMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX0MwqlUL9b/yqsJFVNJsFz39oNJXMbPYBvo IQTpP6NfbhjcbA1PpmCGzrh8EXNs+LMOesE5YLDYwStxsik3wcsaOA27AoxjEayC mV5pHotRNyu+TjrzxTc5xtmWJuIF2eetCYf8VtCPjex9QOSRpIluz9h2lTNghTo1 BKyl6YbxT6DFmvru/CwUMqt/XB/xo0GlD/Q7LJCUmtii0W6MsADkgEDJ/lXReI/y YkNVUXXDWCaatLG72yR3yxyvxMG5g22iwrFqdKGztbofj+lDPOt1+Z9osemx19eK bqubD1w/mrU22L4F+hQ6iRv20VBVTy1lNEKIsGuRDtzOTkCViQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9uymhOWLNXfH2uh6MXrTZonaqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMTA3NmExYzYtYWRiNy0z NmI4LTg4NzktNGNkZDA2MjFlZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyjtW2hvSZjodpRJaVZXdqh0PeB7B1WNk8vNsuToBeeSfgrwer/hWeb dAlygbIe68z+czM0R/1DLt5qt2BiAJApzNRGbvjg0HDn7x21Jqopczba5I9X58f3 ZbNGH0i27NIS0UFTtz+d2CqdRGMrzwzNkL+qbbTbSsfjAOTl9LSZN46xPyKvPBJH yszlyzVO0x64S3Yg2MVmn2E/smxtnUrFSzmYjByi82KP7+RmFJcojzIVQbQ2/l8T evT8kUDFKYdl1sLVjwCKFuE7Y4RfExKXTiVf8BlnX8WzhHKvSHA3qnhCes+HhKH4 jZx0JCYGvW7Tl9HtGgvpkG6Mm5/r85Y= -----END CERTIFICATE-----Generated at Wed Nov 5 18:37:22 2025 by rpki-client