$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa File: c9b75257-3222-3571-8c3f-8375e5c50eb2.roa (raw, json) Hash identifier: gZxk+Ht0ZlWghO3NeRrHVW+uoxdGd2aPrwl0usGCSVI= Subject key identifier: E4:63:04:5C:9A:C4:20:92:78:9E:C3:47:E5:AB:40:12:FB:5C:D5:A1 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584A6F207FCBF689487080DE0300 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 15164 IP address blocks: 199.200.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:7f:cb:f6:89:48:70:80:de:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=2f0d6728-a13e-469c-b7cb-794e6e930bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:54:e7:84:a9:4a:cf:bc:68:27:d0:f6:ce: 1e:0d:fd:1f:a6:e2:d6:10:c8:99:c4:13:58:43:17: 3d:ea:c4:72:fb:a2:a5:9f:c1:a4:78:dd:7e:64:49: f2:12:21:3b:64:2e:e1:65:dd:63:3f:5d:e1:0c:c2: 8f:21:70:0a:08:ee:37:85:59:05:52:2d:d3:af:80: d1:01:cf:0d:9f:cc:42:e0:2e:a5:31:5c:5a:0d:4d: 44:94:76:b0:cb:3c:8a:92:49:4b:49:76:c6:cd:d0: 5f:45:34:fc:4b:89:1c:f8:be:e3:68:38:25:7e:f4: 6e:38:ce:ad:8f:9a:7a:39:83:40:c4:3b:21:a4:1c: 3b:62:6d:71:17:d6:14:38:a2:fb:0e:2b:bb:57:3a: d5:87:9e:a0:5c:ca:f9:f3:58:10:cf:6a:36:fd:db: e2:c0:4d:8d:0b:99:4f:ff:95:d8:2c:8f:4d:56:26: 8b:bb:c1:e6:a3:4f:76:81:0d:1b:08:41:49:77:80: 44:c4:a4:7f:10:dd:04:0b:0d:ec:53:83:86:2f:42: 80:9e:60:99:4b:f6:b3:3e:53:ae:3c:f5:85:87:87: f6:67:17:bf:ef:41:dc:b2:67:0c:fe:79:d7:cb:cc: 12:0c:d9:bb:2b:a5:29:70:e9:95:0b:b2:cb:e2:a3: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:63:04:5C:9A:C4:20:92:78:9E:C3:47:E5:AB:40:12:FB:5C:D5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:59:32:a0:1a:ef:4b:f4:08:d9:1b:c7:b2:0c:49:f3:29:85: a2:53:10:46:f8:ed:e9:11:77:c2:26:f3:c3:12:9f:4b:06:6c: 28:c6:2c:39:f9:13:7a:9a:08:58:60:06:2c:a0:56:26:36:c8: f7:3d:ea:52:ae:d9:0f:f9:fa:fe:b9:d5:df:ee:93:6c:44:06: 41:f9:cd:7a:f5:4f:ca:38:63:4a:25:fa:a7:5d:a7:22:fc:62: cc:fa:eb:b1:6c:4f:0c:9d:64:2c:60:2c:71:e6:ba:de:47:13: b7:cb:5b:20:76:8a:54:2c:7f:53:de:67:79:ca:07:45:b8:75: e9:3d:68:24:5c:8e:53:fc:e7:44:dd:1e:7f:5e:27:83:5c:73: da:bb:9e:22:5e:83:9b:87:d8:69:b2:cc:bc:34:fc:48:10:a4: 03:00:ea:43:fc:4d:3a:7a:52:30:33:84:8a:0c:48:df:5d:cb: 01:dc:ac:a7:5d:c3:f6:9b:43:1e:df:f6:7c:a1:c5:5b:70:90: 1e:b3:c7:98:30:93:19:ff:7d:c7:72:74:64:34:c8:41:74:82: ff:b5:a8:77:28:a7:40:2b:6b:87:cc:6f:4d:8e:54:bb:e4:be: 9f:a3:34:98:e1:27:4b:d8:25:14:38:15:0b:5d:b9:24:80:04: 64:15:68:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIH/L9olIcIDeAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk MmYwZDY3MjgtYTEzZS00NjljLWI3Y2ItNzk0ZTZlOTMwYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hxU54SpSs+8aCfQ9s4eDf0fpuLWEMiZxBNY Qxc96sRy+6Kln8GkeN1+ZEnyEiE7ZC7hZd1jP13hDMKPIXAKCO43hVkFUi3Tr4DR Ac8Nn8xC4C6lMVxaDU1ElHawyzyKkklLSXbGzdBfRTT8S4kc+L7jaDglfvRuOM6t j5p6OYNAxDshpBw7Ym1xF9YUOKL7Diu7VzrVh56gXMr581gQz2o2/dviwE2NC5lP /5XYLI9NViaLu8Hmo092gQ0bCEFJd4BExKR/EN0ECw3sU4OGL0KAnmCZS/azPlOu PPWFh4f2Zxe/70HcsmcM/nnXy8wSDNm7K6UpcOmVC7LL4qO/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORjBFyaxCCSeJ7DR+WrQBL7XNWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYzliNzUyNTctMzIyMi0z NTcxLThjM2YtODM3NWU1YzUwZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJZMqAa70v0CNkbx7IMSfMphaJTEEb47ekRd8Im88MSn0sGbCjGLDn5 E3qaCFhgBiygViY2yPc96lKu2Q/5+v651d/uk2xEBkH5zXr1T8o4Y0ol+qddpyL8 Ysz667FsTwydZCxgLHHmut5HE7fLWyB2ilQsf1PeZ3nKB0W4dek9aCRcjlP850Td Hn9eJ4Ncc9q7niJeg5uH2GmyzLw0/EgQpAMA6kP8TTp6UjAzhIoMSN9dywHcrKdd w/abQx7f9nyhxVtwkB6zx5gwkxn/fcdydGQ0yEF0gv+1qHcop0Ara4fMb02OVLvk vp+jNJjhJ0vYJRQ4FQtduSSABGQVaKk= -----END CERTIFICATE-----Generated at Sat Aug 9 10:37:28 2025 by rpki-client