$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa File: 7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa (raw, json) Hash identifier: oV/JbOJVESx+dS8ArcPpZbAwnxGE+HhZVfQll+TllLE= Subject key identifier: B2:AB:C6:44:07:E8:54:D9:42:5C:5A:6F:95:CA:AF:62:9D:DB:52:99 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B9CA233140890300F6A9111C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 15164 IP address blocks: 209.71.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:33:14:08:90:30:0f:6a:91:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=0b0b9504-d404-457f-b1af-eb8114ce35c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:11:24:da:d9:90:15:39:9c:ab:cb:57:4e:4c: 76:cb:03:4f:04:8a:26:77:37:38:13:71:cc:ec:a2: 11:59:ad:4e:65:6d:02:b5:09:42:2e:19:95:52:86: 4c:9b:04:06:a7:4a:84:fe:b5:f4:ec:35:3b:75:83: 77:d7:3c:7c:44:b9:67:ee:1f:25:4c:31:0f:a3:2f: 23:34:bb:13:a8:63:d7:96:4f:07:66:d4:a6:e2:58: 72:99:02:38:56:19:59:57:a1:e9:02:ca:28:c0:6b: 85:cc:85:ed:64:c5:15:ea:1f:c3:91:65:8f:7c:40: 8f:64:68:f9:69:7b:ea:9d:84:df:04:cd:b5:85:19: 38:09:da:60:42:7c:7d:1b:26:0e:9d:d8:f6:dc:27: 07:14:d7:3e:e2:2b:0e:03:7e:79:93:1f:66:e9:cf: ce:b0:7b:c3:de:80:63:08:d1:b9:5e:f3:8e:2d:28: a4:61:8c:1c:91:dd:ef:d2:48:53:c2:f2:b2:8f:ef: 51:e7:2e:20:3d:14:f0:3d:03:c7:5c:50:1d:1f:c6: 74:cd:9d:60:31:1c:d7:4e:a3:11:5b:b8:5d:ae:64: 15:03:14:5c:a1:7e:54:96:1b:98:c3:85:f7:9d:d5: 2c:a2:28:40:36:36:5f:61:7c:cc:73:61:05:30:06: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AB:C6:44:07:E8:54:D9:42:5C:5A:6F:95:CA:AF:62:9D:DB:52:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c6:cd:b2:75:0c:38:05:1c:1b:5d:d3:dc:f1:20:b6:1b:6b: 5a:3d:8e:db:6d:be:bf:28:4d:80:86:7e:e1:e3:e1:68:c9:4f: 80:e4:f9:3e:3e:5e:05:91:37:46:fa:0d:52:f7:da:e4:b5:ce: 2a:0e:32:40:ec:18:91:16:2e:d6:82:a9:77:96:a0:0f:22:3a: 73:59:ca:e0:39:2a:c6:ed:c9:3c:7e:b3:21:cf:63:e3:e7:7a: e9:e5:03:f4:ab:c3:ed:2d:6b:ad:29:c2:58:2b:07:ed:bc:ee: a4:a6:0d:ad:55:5c:93:d7:70:52:98:74:9e:c1:32:f2:81:84: cb:e1:65:37:84:7b:e7:be:79:c4:d2:59:36:b8:bd:3d:ab:73: ab:55:9c:1f:fc:46:1c:5e:03:72:fd:84:43:67:2d:4d:52:d9: be:f8:d5:00:af:be:9f:5f:8b:97:0f:98:bc:8e:e9:31:c1:64: e3:69:b8:cd:71:52:50:24:23:7c:15:04:54:5b:79:3e:43:df: 07:31:f7:60:01:41:75:c8:6e:c1:a0:09:58:ed:f0:84:db:f5: 1f:f9:93:7c:9c:c6:29:8a:77:94:f2:08:90:51:6c:6d:4a:d8: 5e:8a:96:71:dc:88:35:dc:3c:7c:18:d8:1d:1b:52:cc:ae:1a: c6:68:97:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojMUCJAwD2qREcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MGIwYjk1MDQtZDQwNC00NTdmLWIxYWYtZWI4MTE0Y2UzNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmREk2tmQFTmcq8tXTkx2ywNPBIomdzc4E3HM 7KIRWa1OZW0CtQlCLhmVUoZMmwQGp0qE/rX07DU7dYN31zx8RLln7h8lTDEPoy8j NLsTqGPXlk8HZtSm4lhymQI4VhlZV6HpAsoowGuFzIXtZMUV6h/DkWWPfECPZGj5 aXvqnYTfBM21hRk4CdpgQnx9GyYOndj23CcHFNc+4isOA355kx9m6c/OsHvD3oBj CNG5XvOOLSikYYwckd3v0khTwvKyj+9R5y4gPRTwPQPHXFAdH8Z0zZ1gMRzXTqMR W7hdrmQVAxRcoX5UlhuYw4X3ndUsoihANjZfYXzMc2EFMAYI0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKrxkQH6FTZQlxab5XKr2Kd21KZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvN2Y4Y2QyMDMtZGZlNS0z ZDY5LThlNWEtMWY0NDJmMzFmOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPGzbJ1DDgFHBtd09zxILYba1o9jtttvr8oTYCGfuHj4WjJT4Dk+T4+ XgWRN0b6DVL32uS1zioOMkDsGJEWLtaCqXeWoA8iOnNZyuA5KsbtyTx+syHPY+Pn eunlA/Srw+0ta60pwlgrB+287qSmDa1VXJPXcFKYdJ7BMvKBhMvhZTeEe+e+ecTS WTa4vT2rc6tVnB/8RhxeA3L9hENnLU1S2b741QCvvp9fi5cPmLyO6THBZONpuM1x UlAkI3wVBFRbeT5D3wcx92ABQXXIbsGgCVjt8ITb9R/5k3ycximKd5TyCJBRbG1K 2F6KlnHciDXcPHwY2B0bUsyuGsZolzs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:15 2025 by rpki-client