$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa File: a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa (raw, json) Hash identifier: psQNJCkQ996N22tlaauxZ9iMSj1AeWT+zjwIcsAh+KQ= Subject key identifier: F8:D0:9C:16:96:8A:79:37:57:22:CD:6A:AA:F0:F0:96:B5:67:F5:50 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584AB2217AEF164D4A48FCAB2740 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 15164 IP address blocks: 209.71.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:7a:ef:16:4d:4a:48:fc:ab:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=94efed8e-3515-4d27-a57e-a6b1e905a25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:ca:79:7d:27:2d:b9:0a:6a:9e:96:bf:c9: e9:45:53:70:ee:b6:35:01:55:81:ac:96:46:94:5a: dd:99:68:46:71:bc:95:fe:a7:5c:30:df:3b:8f:3a: 43:b4:39:99:8d:31:a6:80:49:54:45:ee:90:97:24: b7:d9:9c:dc:7a:1c:71:f1:48:9e:71:a6:d0:ac:10: 19:7b:43:16:1b:a7:da:ef:2d:f4:2c:7b:95:f4:64: b0:42:da:e2:1e:50:bf:61:ec:ff:08:15:ad:6b:e0: c6:c5:3d:f4:63:2d:ff:77:d6:5c:79:c1:a1:98:28: 94:25:d7:b7:c9:bb:7d:bb:f2:44:95:e7:4d:08:ff: b0:4b:58:ea:61:08:d9:c1:f3:13:ff:96:e4:89:20: ff:50:a5:42:2b:ab:c5:91:ee:08:eb:63:15:17:3b: 6e:06:64:fa:41:7f:bb:7a:8c:8b:9f:3f:a4:a1:d5: 71:5e:fa:61:0d:5c:f4:d3:10:ef:f6:24:a2:1d:2b: e7:09:a5:eb:68:00:5d:a4:a4:aa:1f:b2:5d:25:26: ad:ea:79:40:d6:ac:08:0a:d1:8f:9e:53:7d:dc:e9: cc:d4:bc:ec:b3:51:71:c5:7d:74:c2:31:bb:88:c2: 7a:f5:d0:14:fe:8a:56:2a:b5:35:3b:6a:45:57:d8: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D0:9C:16:96:8A:79:37:57:22:CD:6A:AA:F0:F0:96:B5:67:F5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:05:19:b8:19:31:5d:22:5d:98:97:e2:bc:24:90:8b:51:a5: c9:ff:46:c5:7f:2f:be:fd:f4:ad:a6:00:43:bb:ec:27:e9:97: dd:00:4e:5d:a5:20:95:be:d7:2f:53:c1:86:a7:8d:7d:8d:b6: 35:8d:b3:04:c6:6f:9a:76:64:ea:f6:e4:95:72:f6:cc:32:0f: 9a:99:d8:68:10:90:1c:f2:b8:52:46:63:75:9d:36:1e:d2:e4: ca:94:cd:0b:75:97:23:78:f8:a1:4e:6a:54:ef:04:41:f2:5a: 84:55:da:cd:6c:57:a5:77:24:9e:6d:52:f3:60:15:2c:2f:82: 71:29:57:e5:fe:40:8c:06:f8:af:ac:94:97:a3:33:6f:d1:9f: cd:b9:40:5e:3c:4c:83:67:ef:2d:10:29:8e:36:f6:a3:b7:77: f6:ec:40:24:b0:2a:67:97:08:8d:de:46:fa:fb:04:04:b5:47: 36:03:4c:5e:f0:44:71:12:b6:e9:ce:1a:0e:9e:25:14:46:08: 85:71:9b:d1:6f:88:ac:e0:ea:00:3d:6f:90:bd:e7:8c:f4:08: 2f:0b:4e:4d:43:9d:86:df:9a:90:39:71:76:4d:f9:7d:d1:67: 10:67:4b:56:ee:b8:41:90:74:93:e2:ef:b6:24:35:9f:94:bd: dc:9e:4d:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXrvFk1KSPyrJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTRlZmVkOGUtMzUxNS00ZDI3LWE1N2UtYTZiMWU5MDVhMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NXKeX0nLbkKap6Wv8npRVNw7rY1AVWBrJZG lFrdmWhGcbyV/qdcMN87jzpDtDmZjTGmgElURe6QlyS32Zzcehxx8UiecabQrBAZ e0MWG6fa7y30LHuV9GSwQtriHlC/Yez/CBWta+DGxT30Yy3/d9ZcecGhmCiUJde3 ybt9u/JEledNCP+wS1jqYQjZwfMT/5bkiSD/UKVCK6vFke4I62MVFztuBmT6QX+7 eoyLnz+kodVxXvphDVz00xDv9iSiHSvnCaXraABdpKSqH7JdJSat6nlA1qwICtGP nlN93OnM1Lzss1FxxX10wjG7iMJ69dAU/opWKrU1O2pFV9ixOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjQnBaWink3VyLNaqrw8Ja1Z/VQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTFlYjNlNzctYjk2YS0z YTQ0LTkyYzktOTQ3OWQwMmJhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEFGbgZMV0iXZiX4rwkkItRpcn/RsV/L7799K2mAEO77Cfpl90ATl2l IJW+1y9TwYanjX2NtjWNswTGb5p2ZOr25JVy9swyD5qZ2GgQkBzyuFJGY3WdNh7S 5MqUzQt1lyN4+KFOalTvBEHyWoRV2s1sV6V3JJ5tUvNgFSwvgnEpV+X+QIwG+K+s lJejM2/Rn825QF48TINn7y0QKY429qO3d/bsQCSwKmeXCI3eRvr7BAS1RzYDTF7w RHEStunOGg6eJRRGCIVxm9FviKzg6gA9b5C954z0CC8LTk1DnYbfmpA5cXZN+X3R ZxBnS1buuEGQdJPi77YkNZ+UvdyeTW4= -----END CERTIFICATE-----Generated at Wed Aug 6 14:22:05 2025 by rpki-client