$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa File: 31300e2b-97a7-3d58-a34f-406ef6444722.roa (raw, json) Hash identifier: +WfhjE1AYJ3LOj86RQmcQmEyDvl0KbAXF00GU2eg+s0= Subject key identifier: C3:10:12:1F:78:14:45:6D:FB:D4:88:D9:81:7F:E3:C7:1F:68:4D:50 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B5B07632C45A9622CC84AC700 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 209.71.146.0/23 maxlen: 23 209.71.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:63:2c:45:a9:62:2c:c8:4a:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=dcf8ab8a-61fd-4400-b628-4ef865cf4fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:a6:de:d6:32:5e:36:d8:cc:99:58:65:29: c9:e4:20:17:98:b2:db:c7:ff:a9:98:ab:26:fb:94: 7d:30:52:8f:2a:41:92:85:86:a5:95:b6:f7:fb:13: 04:c1:92:60:bb:d6:6c:2a:b2:86:90:5c:34:30:c4: 08:a0:57:60:fd:83:a2:f3:41:66:82:a5:ea:b9:c8: a7:64:e8:1d:65:2d:d0:14:10:41:5f:dc:ad:ed:22: 06:25:a6:78:dd:53:5a:16:66:dc:ac:f8:00:e6:dc: 05:20:b7:43:fb:cf:6d:48:88:c1:d1:7a:48:03:29: 83:da:87:f1:28:4e:58:60:4b:4c:15:02:68:45:76: a3:3f:fd:09:ee:54:bd:31:03:09:9d:04:64:e4:ef: cb:92:e3:35:01:28:98:bd:22:13:32:24:3c:db:cf: 58:6c:1d:66:03:93:f5:25:b9:25:0d:06:17:0d:5c: 1c:d6:19:5e:cb:5f:62:3c:5b:05:01:64:b7:51:a7: f0:e9:4e:12:36:42:c3:11:0e:2d:c0:ae:8f:f1:1c: 44:5b:eb:c8:9d:75:25:d7:ba:65:ae:ef:7e:d7:5a: 15:77:1c:8f:dc:82:dc:dc:31:a7:b9:87:2b:40:31: 89:0b:af:92:0c:53:41:94:e8:72:a0:d3:ab:cd:3c: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:10:12:1F:78:14:45:6D:FB:D4:88:D9:81:7F:E3:C7:1F:68:4D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.146.0-209.71.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2a:78:7c:74:e4:e5:42:46:d4:5b:de:79:51:21:40:fc:78: 1d:52:de:a2:b0:b2:01:89:22:2a:5b:e7:be:0e:88:99:f1:89: 6b:0c:ba:c0:55:a6:a6:4e:6f:95:74:5d:23:0f:44:ac:92:4c: 96:f6:fc:15:19:2b:e6:7a:fd:13:87:21:79:a6:16:07:ee:33: 82:5c:8a:9f:96:65:6d:2c:3a:a1:a2:8c:49:04:8c:5d:f5:8d: 4a:6d:bf:86:60:84:d3:83:86:1e:63:3b:7f:a5:b7:79:66:93: 0e:2c:23:d9:82:38:d9:30:74:82:b9:c0:ba:a6:da:46:6c:d9: 59:51:5d:e5:ed:06:87:99:fa:6a:37:f6:10:05:7e:f9:85:0d: b7:fc:f5:03:a3:92:95:fa:9a:f3:0a:e1:63:91:39:5c:ff:65: c6:2a:d3:5f:51:b9:79:a6:d5:80:85:8a:01:74:2c:b9:99:81: 96:75:d7:d1:e6:84:b6:20:0d:87:af:b5:5b:20:f3:6a:81:4f: ca:8b:9a:fd:5a:59:82:5e:01:eb:ef:99:3c:92:f4:27:c5:5e: ba:c6:03:62:f7:64:86:5d:d9:af:14:13:14:ce:08:fb:0d:11: 92:ff:af:bb:a1:a2:4e:1a:5e:e5:74:dd:2d:43:bc:37:65:c2: 68:0b:27:44 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtbB2MsRaliLMhKxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZGNmOGFiOGEtNjFmZC00NDAwLWI2MjgtNGVmODY1Y2Y0ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcCm3tYyXjbYzJlYZSnJ5CAXmLLbx/+pmKsm +5R9MFKPKkGShYallbb3+xMEwZJgu9ZsKrKGkFw0MMQIoFdg/YOi80FmgqXqucin ZOgdZS3QFBBBX9yt7SIGJaZ43VNaFmbcrPgA5twFILdD+89tSIjB0XpIAymD2ofx KE5YYEtMFQJoRXajP/0J7lS9MQMJnQRk5O/LkuM1ASiYvSITMiQ8289YbB1mA5P1 JbklDQYXDVwc1hley19iPFsFAWS3Uafw6U4SNkLDEQ4twK6P8RxEW+vInXUl17pl ru9+11oVdxyP3ILc3DGnuYcrQDGJC6+SDFNBlOhyoNOrzTwKgwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMMQEh94FEVt+9SI2YF/48cfaE1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMzEzMDBlMmItOTdhNy0z ZDU4LWEzNGYtNDA2ZWY2NDQ0NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHRR5ID BAHRR5QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXSp4fHTk5UJG1FveeVEhQPx4HVLeorCyAYkiKlvnvg6I mfGJawy6wFWmpk5vlXRdIw9ErJJMlvb8FRkr5nr9E4cheaYWB+4zglyKn5ZlbSw6 oaKMSQSMXfWNSm2/hmCE04OGHmM7f6W3eWaTDiwj2YI42TB0grnAuqbaRmzZWVFd 5e0Gh5n6ajf2EAV++YUNt/z1A6OSlfqa8wrhY5E5XP9lxirTX1G5eabVgIWKAXQs uZmBlnXX0eaEtiANh6+1WyDzaoFPyoua/VpZgl4B6++ZPJL0J8VeusYDYvdkhl3Z rxQTFM4I+w0Rkv+vu6GiThpe5XTdLUO8N2XCaAsnRA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:45 2025 by rpki-client