$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa File: 1aea4482-4596-3858-b921-9cdd4d27ea47.roa (raw, json) Hash identifier: DnWMlr8qsQoqE6kTRZ+wrsvHF4i6stKH8zG7AcfWEiI= Subject key identifier: 2C:E6:7C:51:77:84:7A:C9:A6:3B:A8:B4:66:B1:FF:DC:6F:40:C6:F7 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A6F2081C1F28ED08F18BB5D40 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 15164 IP address blocks: 199.200.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:81:c1:f2:8e:d0:8f:18:bb:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=45be0a40-8d1a-4614-829d-6af0b575ec37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:19:f4:46:53:ec:0a:ef:76:97:ea:24:2b: a3:2c:79:72:b7:42:5d:24:1f:d5:65:0e:a0:b8:37: af:77:e8:c3:cd:c2:df:6a:82:e5:5d:4f:f6:d0:98: 8d:0f:74:77:1b:bb:af:69:1b:5e:47:a8:89:15:5d: 9c:29:00:c2:f4:96:d2:15:23:a6:0e:a8:e5:5b:1b: 86:33:66:46:bb:c2:d0:c1:aa:96:0d:f8:1c:26:bc: 49:14:e8:e5:36:b1:e2:c1:6d:ed:5f:13:2c:bf:71: 94:a4:4d:a8:7a:e7:b6:37:11:4a:9d:66:72:4a:c1: 01:55:30:90:02:bc:53:8a:52:69:46:05:34:a7:97: 2e:b1:93:d9:9b:84:76:a7:3f:c5:fa:ee:45:83:3f: 6d:5b:f2:bf:d3:14:c3:fd:ac:04:e8:0f:c8:f8:a2: bb:55:68:90:0b:98:26:5c:ff:74:33:ea:c9:94:b3: 96:71:72:07:83:25:08:e4:0c:05:ad:fa:e9:e3:9c: cd:64:13:bd:f7:69:53:33:79:77:80:87:34:1d:4a: 42:92:fd:ae:c7:ef:81:7f:36:2b:d4:e3:8a:a4:4a: 90:b4:13:5a:cc:23:dc:90:4b:9c:c3:7e:30:ae:70: a9:7f:d6:28:6c:98:19:ae:f6:f0:71:6a:f6:8f:e3: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E6:7C:51:77:84:7A:C9:A6:3B:A8:B4:66:B1:FF:DC:6F:40:C6:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a1:51:3c:18:e4:de:2a:de:8d:f4:a8:9d:a6:a5:60:63:84: 29:39:ec:3c:1f:d6:62:57:9d:2e:48:79:a6:bc:80:c0:89:33: 23:7a:2a:88:ec:9f:07:b0:73:67:b1:7c:4a:26:9a:21:57:dc: 25:0b:83:36:71:42:98:9e:63:70:a0:04:5d:1b:b4:1b:7b:8a: 7b:5d:0c:b6:03:17:57:63:fc:d4:4f:af:2c:6c:5d:84:72:c0: df:c7:53:19:2a:59:9f:d4:93:f2:49:08:49:ba:e5:9b:5d:6a: dc:d3:16:00:c5:46:8b:e1:08:f7:b2:b9:73:a1:6b:91:43:52: c7:12:84:7a:36:88:ff:c4:29:47:0d:d7:42:08:26:ba:27:e7: aa:08:f0:0f:06:4d:7d:03:6f:c7:59:c6:75:f7:e4:f4:f8:9d: d0:f4:6c:6e:46:af:a9:0b:b8:42:0b:70:4e:68:34:95:b2:ff: 85:e7:fd:fa:4e:f6:24:d8:13:77:25:c0:bd:85:bc:83:d6:cb: 0e:cb:b0:57:e5:fa:7f:d3:eb:b1:ec:71:66:27:8c:89:b9:15: 37:09:3a:6f:0a:23:cf:cb:10:24:cb:dc:04:02:7b:e7:2c:26: 2d:13:44:3f:3a:1f:bb:3f:b1:47:ba:ce:8a:92:cb:7f:50:52: bb:d5:21:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIIHB8o7Qjxi7XUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk NDViZTBhNDAtOGQxYS00NjE0LTgyOWQtNmFmMGI1NzVlYzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+kZ9EZT7ArvdpfqJCujLHlyt0JdJB/VZQ6g uDevd+jDzcLfaoLlXU/20JiND3R3G7uvaRteR6iJFV2cKQDC9JbSFSOmDqjlWxuG M2ZGu8LQwaqWDfgcJrxJFOjlNrHiwW3tXxMsv3GUpE2oeue2NxFKnWZySsEBVTCQ ArxTilJpRgU0p5cusZPZm4R2pz/F+u5Fgz9tW/K/0xTD/awE6A/I+KK7VWiQC5gm XP90M+rJlLOWcXIHgyUI5AwFrfrp45zNZBO992lTM3l3gIc0HUpCkv2ux++BfzYr 1OOKpEqQtBNazCPckEucw34wrnCpf9YobJgZrvbwcWr2j+P7MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzmfFF3hHrJpjuotGax/9xvQMb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMWFlYTQ0ODItNDU5Ni0z ODU4LWI5MjEtOWNkZDRkMjdlYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOhUTwY5N4q3o30qJ2mpWBjhCk57Dwf1mJXnS5Ieaa8gMCJMyN6Kojs nwewc2exfEommiFX3CULgzZxQpieY3CgBF0btBt7intdDLYDF1dj/NRPryxsXYRy wN/HUxkqWZ/Uk/JJCEm65ZtdatzTFgDFRovhCPeyuXOha5FDUscShHo2iP/EKUcN 10IIJron56oI8A8GTX0Db8dZxnX35PT4ndD0bG5Gr6kLuEILcE5oNJWy/4Xn/fpO 9iTYE3clwL2FvIPWyw7LsFfl+n/T67HscWYnjIm5FTcJOm8KI8/LECTL3AQCe+cs Ji0TRD86H7s/sUe6zoqSy39QUrvVIbA= -----END CERTIFICATE-----Generated at Sat Aug 9 23:13:44 2025 by rpki-client