$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa File: 207c1b2b-d1db-300f-bc1a-372f077d979a.roa (raw, json) Hash identifier: Sf1Kh8nMUSQMyuGvDwqu1LR2zrT2lT9sW3kj2Jb6qwE= Subject key identifier: E7:A6:07:97:49:ED:D0:E1:F3:17:50:BF:84:D4:8B:8D:74:8B:5E:0E Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC73090D21C35FD52E77C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 199.200.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:73:09:0d:21:c3:5f:d5:2e:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=2c143e3f-316c-4d1d-ba8e-059dd73a7217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:db:1d:a7:f4:af:25:30:46:bf:84:14:42:6e: 3e:00:cd:d7:16:1f:b1:4b:91:a1:e1:2e:98:4a:93: 66:bd:a3:8a:88:8e:69:a6:a5:b4:d1:d5:4b:f2:05: a8:76:d9:29:9c:33:0a:e8:87:e4:19:a9:d7:ba:44: 17:39:86:e7:9c:2d:1e:c3:12:19:96:d4:dd:f1:f3: e8:59:c5:ae:de:88:8d:d2:69:ea:90:74:e3:7e:de: 0a:04:76:b3:01:81:ac:d3:f9:7f:0c:a3:5a:2d:25: 22:ea:a2:6d:b6:af:ed:00:2d:48:ca:18:20:02:0a: a2:4f:65:36:41:92:d4:60:6b:a0:8e:1e:7f:a9:a8: cc:cb:d2:0a:aa:5d:16:88:56:99:45:51:88:34:2f: 43:a5:9a:01:20:92:7d:99:e2:75:fe:ff:aa:72:2a: 8d:9d:a9:67:76:4d:28:83:2e:c4:c3:26:00:8b:ed: 64:3e:3a:8c:8c:99:c4:8c:29:90:93:69:23:1f:83: fd:0b:13:63:2c:ed:30:da:3c:db:3e:38:b3:1a:20: 41:b6:e0:06:5a:9a:b5:4d:fa:4e:1b:5f:9a:9a:71: 04:ea:ed:70:d3:c5:e6:71:7e:ed:34:ea:99:aa:42: 8f:f8:3e:a7:f1:68:a6:8b:66:8f:a1:a8:05:95:fb: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A6:07:97:49:ED:D0:E1:F3:17:50:BF:84:D4:8B:8D:74:8B:5E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:29:d8:e9:a5:08:ea:02:8b:a1:ae:d1:84:e6:05:d4:fb:72: b5:7d:7b:2d:84:11:91:71:0c:0f:a1:f5:af:c1:be:c4:07:d9: 94:29:65:1c:09:9d:f9:e3:4b:49:d8:7a:3f:9a:7f:2d:9d:1e: 75:90:9f:a3:39:31:20:54:f1:58:ee:8c:72:0c:f9:b4:70:bc: 81:fe:a5:78:c0:02:dc:81:b9:80:88:d0:e4:4b:e1:65:da:47: d3:aa:4b:e5:8f:bb:5b:b0:24:59:d5:bd:0a:89:a7:6e:a4:db: 4b:77:7d:c7:cf:61:58:a2:8e:24:fc:f0:35:29:dd:74:f1:00: f0:fd:a6:31:cc:65:f8:f3:2e:df:55:9a:3f:7d:35:ca:06:66: e2:77:e3:1a:fa:37:b5:15:d9:17:a6:60:c4:4e:a5:bd:14:ab: e3:e3:3a:0c:59:17:2c:52:5a:1c:d5:2f:86:47:3b:49:03:0d: 86:17:29:b5:60:88:91:fc:17:c7:db:fc:ee:2c:53:e6:a1:8a: 39:fc:b9:e9:6c:cc:00:4f:fe:e6:0c:fc:14:a7:15:2c:99:7d: 3c:95:b1:a1:53:82:a1:c6:fa:1f:b7:b4:51:a1:40:a5:b7:9c: 73:73:37:46:53:4b:ca:d0:69:a4:11:be:6d:2e:c4:f0:c9:fc: f4:48:a5:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HMJDSHDX9Uud8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MmMxNDNlM2YtMzE2Yy00ZDFkLWJhOGUtMDU5ZGQ3M2E3MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltsdp/SvJTBGv4QUQm4+AM3XFh+xS5Gh4S6Y SpNmvaOKiI5ppqW00dVL8gWodtkpnDMK6IfkGanXukQXOYbnnC0ewxIZltTd8fPo WcWu3oiN0mnqkHTjft4KBHazAYGs0/l/DKNaLSUi6qJttq/tAC1IyhggAgqiT2U2 QZLUYGugjh5/qajMy9IKql0WiFaZRVGINC9DpZoBIJJ9meJ1/v+qciqNnalndk0o gy7EwyYAi+1kPjqMjJnEjCmQk2kjH4P9CxNjLO0w2jzbPjizGiBBtuAGWpq1TfpO G1+amnEE6u1w08XmcX7tNOqZqkKP+D6n8Wimi2aPoagFlftQDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOemB5dJ7dDh8xdQv4TUi410i14OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjA3YzFiMmItZDFkYi0z MDBmLWJjMWEtMzcyZjA3N2Q5NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8haMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwp2OmlCOoCi6Gu0YTmBdT7crV9ey2EEZFxDA+h9a/BvsQH2ZQpZRwJ nfnjS0nYej+afy2dHnWQn6M5MSBU8VjujHIM+bRwvIH+pXjAAtyBuYCI0ORL4WXa R9OqS+WPu1uwJFnVvQqJp26k20t3fcfPYViijiT88DUp3XTxAPD9pjHMZfjzLt9V mj99NcoGZuJ34xr6N7UV2RemYMROpb0Uq+PjOgxZFyxSWhzVL4ZHO0kDDYYXKbVg iJH8F8fb/O4sU+ahijn8uelszABP/uYM/BSnFSyZfTyVsaFTgqHG+h+3tFGhQKW3 nHNzN0ZTS8rQaaQRvm0uxPDJ/PRIpUw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:23:52 2025 by rpki-client