$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa File: 9a0e1652-643d-3073-a20b-c2aa99019a4f.roa (raw, json) Hash identifier: HX1Z2DO5zAARS5SKQcIMZ944D5zCyoKSM3ieMVJ9ivY= Subject key identifier: C2:22:D8:6B:EB:95:2B:46:EA:F2:F2:6B:67:79:E8:76:07:05:29:DD Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B36BC4DDDA4077B36D8EB5240 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 209.71.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4d:dd:a4:07:7b:36:d8:eb:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=9db30603-d1d3-495f-a7c7-a56a95c5d373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:79:1c:2b:d2:87:71:21:1b:4b:3f:66:be: 68:cd:c2:9c:83:13:f7:49:e2:f0:83:7c:c9:24:81: e1:42:7e:c0:f4:80:db:17:da:0a:3a:f3:56:0b:29: c6:cd:2c:c7:37:1e:88:65:5d:82:cd:e3:d9:73:7b: 61:73:1f:c8:db:3a:2d:78:05:a6:01:c5:18:f7:ef: 3b:3d:e0:4f:8c:32:60:e2:53:6b:ec:aa:13:b6:eb: 73:e0:20:f4:d6:65:1d:30:42:c2:9f:04:31:2e:ef: 74:14:bb:29:c7:f0:1e:3b:e5:a6:2b:f6:a6:1d:f6: 60:26:94:4e:64:3d:3a:7d:74:1c:39:a8:d2:ee:5c: c1:cd:58:c7:bc:2c:73:46:70:fd:e3:88:f2:8b:6d: 45:6e:7d:44:8d:20:7a:26:94:08:fb:ca:20:e2:7e: 1a:cc:d1:ec:ac:da:db:13:a3:91:68:69:25:71:48: 08:8d:92:76:89:1a:65:8b:f6:57:7c:c0:60:ea:77: bf:23:05:9d:4a:32:de:19:39:aa:11:1c:92:20:e2: b8:19:b5:77:0a:7d:75:9b:8a:54:9c:76:5e:7d:55: 6d:b0:b7:9a:40:31:d1:21:9e:c4:c9:2b:ca:c6:43: 54:af:4a:a3:0c:55:1d:8e:40:6a:47:e3:a7:13:3c: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:22:D8:6B:EB:95:2B:46:EA:F2:F2:6B:67:79:E8:76:07:05:29:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5d:65:80:a1:bc:0f:c6:f2:d8:2d:db:ec:1e:42:c9:2f:1c: 3e:a4:ec:1f:26:6e:04:99:0b:6f:c1:38:05:18:e3:e4:64:62: 32:79:11:e6:f0:44:f9:82:02:4c:32:32:04:d5:6b:fd:7a:53: 5d:e4:4c:08:c2:f6:58:6c:ff:2b:18:86:68:59:b4:a5:0d:d9: 95:01:8c:6f:74:f4:f6:31:3b:d3:32:e7:28:e3:77:28:fb:11: 68:6f:e6:1d:c5:77:8e:38:f4:06:f2:4c:cf:a4:56:2e:d3:4f: 2b:4c:ff:7b:27:36:64:56:33:6e:ae:b7:ca:06:6f:f9:44:97: 9c:d7:f8:0c:42:0d:22:b4:ef:60:24:c6:c8:cb:e1:f4:48:c7: 64:43:e7:6c:8e:fd:16:04:12:15:0b:ff:64:aa:7d:41:23:b6: 4a:ad:59:1c:39:eb:cb:82:98:3d:f1:f5:cd:93:d9:71:60:c7: 86:4c:b7:8b:44:18:36:46:ef:20:9e:cc:0d:bb:a9:57:9f:39: d2:c6:64:6c:81:6f:73:c8:ab:f5:07:72:1a:fd:36:06:e8:82: 16:4a:d4:0c:c7:61:7a:70:c4:eb:f9:38:52:03:b7:6a:e9:a0: 40:8e:46:12:db:ab:68:0c:81:80:9f:28:02:7e:98:36:43:a5: ca:5d:48:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vE3dpAd7NtjrUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk OWRiMzA2MDMtZDFkMy00OTVmLWE3YzctYTU2YTk1YzVkMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudN5HCvSh3EhG0s/Zr5ozcKcgxP3SeLwg3zJ JIHhQn7A9IDbF9oKOvNWCynGzSzHNx6IZV2CzePZc3thcx/I2zoteAWmAcUY9+87 PeBPjDJg4lNr7KoTtutz4CD01mUdMELCnwQxLu90FLspx/AeO+WmK/amHfZgJpRO ZD06fXQcOajS7lzBzVjHvCxzRnD944jyi21Fbn1EjSB6JpQI+8og4n4azNHsrNrb E6ORaGklcUgIjZJ2iRpli/ZXfMBg6ne/IwWdSjLeGTmqERySIOK4GbV3Cn11m4pU nHZefVVtsLeaQDHRIZ7EySvKxkNUr0qjDFUdjkBqR+OnEzzM1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIi2GvrlStG6vLya2d56HYHBSndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOWEwZTE2NTItNjQzZC0z MDczLWEyMGItYzJhYTk5MDE5YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRdZYChvA/G8tgt2+weQskvHD6k7B8mbgSZC2/BOAUY4+RkYjJ5Eebw RPmCAkwyMgTVa/16U13kTAjC9lhs/ysYhmhZtKUN2ZUBjG909PYxO9My5yjjdyj7 EWhv5h3Fd4449AbyTM+kVi7TTytM/3snNmRWM26ut8oGb/lEl5zX+AxCDSK072Ak xsjL4fRIx2RD52yO/RYEEhUL/2SqfUEjtkqtWRw568uCmD3x9c2T2XFgx4ZMt4tE GDZG7yCezA27qVefOdLGZGyBb3PIq/UHchr9NgboghZK1AzHYXpwxOv5OFIDt2rp oECORhLbq2gMgYCfKAJ+mDZDpcpdSAc= -----END CERTIFICATE-----Generated at Wed Nov 5 20:05:46 2025 by rpki-client