$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa File: 3b72b9a7-c4a6-319b-9831-aa287f623b34.roa (raw, json) Hash identifier: 2flbpUuNVpJRmZi/d7y+en2qeCH5voH+DZX/6e4K4IA= Subject key identifier: 94:2C:D5:04:D4:40:D8:68:9C:D8:05:EA:95:38:DC:AB:65:6C:DA:E5 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A6F207E778E1F5ECFF3DEAE80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 15164 IP address blocks: 199.200.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7e:77:8e:1f:5e:cf:f3:de:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=c5b19db5-b106-4f62-955f-c9528dfb2df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:a2:72:bc:79:da:30:1d:81:fb:ea:b1:d9: ff:da:0f:21:74:c6:f5:a3:0d:ab:c5:82:5d:1a:04: 17:9f:95:67:ea:41:64:af:de:3f:77:5c:80:8f:a0: 0c:f1:93:c2:7d:a4:dc:13:5c:d1:3e:05:3a:04:00: ac:27:c8:7f:9b:46:f7:ba:73:80:7c:e4:9d:30:9d: 87:99:27:aa:52:74:70:64:cf:c3:1e:b8:2d:fe:cf: 99:41:b6:31:24:53:7a:39:54:f8:d6:bf:d1:ad:5a: 7b:3f:8d:ed:87:2b:6a:be:19:43:5a:52:ca:10:bf: cf:78:5c:d0:39:c3:b2:40:c7:3a:df:0e:78:67:f4: 38:39:9e:4f:e8:e0:11:d9:1e:cc:90:06:2a:4c:12: ec:20:b0:71:11:f2:43:03:b2:fd:0e:fb:c5:ee:76: 55:30:a8:7c:d7:91:01:0e:e5:9f:55:b6:05:7f:52: 1f:2c:3b:d0:0e:bf:c9:59:58:93:59:00:b3:b3:c2: 45:0a:0e:f7:be:a2:75:ec:9d:72:c6:14:51:a5:59: 8e:8c:cd:82:95:e4:69:1d:7d:1e:45:1d:22:04:9e: a2:18:d6:ea:05:6c:41:35:ec:db:0c:1b:e9:ee:01: 3e:57:a3:53:ec:0e:94:46:2b:51:74:9e:34:82:e6: b0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2C:D5:04:D4:40:D8:68:9C:D8:05:EA:95:38:DC:AB:65:6C:DA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/3b72b9a7-c4a6-319b-9831-aa287f623b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e8:ad:a2:1e:41:d5:06:d2:80:65:df:25:c3:84:f0:1d:a6: fe:c9:ac:3b:d6:cc:70:aa:a5:64:d0:f3:2a:9c:85:bc:1d:0d: e3:57:a4:3d:25:49:60:95:1a:2e:8f:79:f5:1c:79:60:29:c0: e2:ce:0b:12:d6:82:48:ab:4d:be:84:04:36:c5:f6:17:cf:02: 5a:c6:5f:1a:79:27:1b:f7:b5:d2:97:47:60:95:fe:af:f9:1d: 00:e4:64:e5:b9:a8:05:ed:f5:b4:e7:69:5f:88:a3:e9:a8:05: 4d:0a:f0:e1:40:6c:e2:d5:09:52:85:71:ac:94:4e:ae:84:d5: 35:6e:2b:5f:e7:49:33:e8:a8:4f:de:5d:a9:20:2b:5e:97:b1: b8:af:65:61:75:ae:d7:36:c2:2a:70:8d:fb:29:63:f7:0c:b3: 3f:4f:db:44:13:82:16:63:88:34:c5:03:85:8e:1b:91:1e:8f: f5:d4:1a:ae:80:59:48:4a:c0:a2:3c:ff:ac:67:01:b4:e6:e4: 78:41:4c:ae:d9:c6:f8:d6:52:db:da:7c:06:c0:f8:1b:1f:47: 22:52:7c:c1:aa:ce:40:a2:6b:7c:b3:94:07:18:0b:3e:f7:e4: dc:9b:67:2b:6a:b2:d1:d8:c4:0f:f1:85:ed:fc:e5:09:be:10: 65:d9:16:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIH53jh9ez/PeroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk YzViMTlkYjUtYjEwNi00ZjYyLTk1NWYtYzk1MjhkZmIyZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPGicrx52jAdgfvqsdn/2g8hdMb1ow2rxYJd GgQXn5Vn6kFkr94/d1yAj6AM8ZPCfaTcE1zRPgU6BACsJ8h/m0b3unOAfOSdMJ2H mSeqUnRwZM/DHrgt/s+ZQbYxJFN6OVT41r/RrVp7P43thytqvhlDWlLKEL/PeFzQ OcOyQMc63w54Z/Q4OZ5P6OAR2R7MkAYqTBLsILBxEfJDA7L9DvvF7nZVMKh815EB DuWfVbYFf1IfLDvQDr/JWViTWQCzs8JFCg73vqJ17J1yxhRRpVmOjM2CleRpHX0e RR0iBJ6iGNbqBWxBNezbDBvp7gE+V6NT7A6URitRdJ40guawVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQs1QTUQNhonNgF6pU43KtlbNrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvM2I3MmI5YTctYzRhNi0z MTliLTk4MzEtYWEyODdmNjIzYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8hfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPoraIeQdUG0oBl3yXDhPAdpv7JrDvWzHCqpWTQ8yqchbwdDeNXpD0l SWCVGi6PefUceWApwOLOCxLWgkirTb6EBDbF9hfPAlrGXxp5Jxv3tdKXR2CV/q/5 HQDkZOW5qAXt9bTnaV+Io+moBU0K8OFAbOLVCVKFcayUTq6E1TVuK1/nSTPoqE/e XakgK16XsbivZWF1rtc2wipwjfspY/cMsz9P20QTghZjiDTFA4WOG5Eej/XUGq6A WUhKwKI8/6xnAbTm5HhBTK7ZxvjWUtvafAbA+BsfRyJSfMGqzkCia3yzlAcYCz73 5NybZytqstHYxA/xhe385Qm+EGXZFr8= -----END CERTIFICATE-----Generated at Fri Aug 8 12:56:05 2025 by rpki-client