$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa File: d89dc6bf-f760-34a0-9822-7f13629e97e6.roa (raw, json) Hash identifier: UtOFlquE3+ff3GpuQQN7sENwSsZy4Ex9B8SbYj113lI= Subject key identifier: A4:01:B6:96:A2:89:A6:A5:7E:93:F1:B9:2F:CF:42:D2:27:1B:8D:96 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC716460CEC3F6B50E0640 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 173.244.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:71:64:60:ce:c3:f6:b5:0e:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=91491a70-d1c2-4e45-a599-d7a487a345e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d9:39:58:df:11:62:fd:8c:94:35:52:51:fd: 37:fb:03:e7:67:a6:5e:39:91:58:4f:5f:d9:2f:ef: 6b:29:df:cc:31:5d:ad:dc:12:71:24:8c:27:06:8e: c9:a0:58:18:21:3f:57:f5:ee:54:7f:91:e7:3a:b4: 86:1c:6f:ff:27:d8:7f:45:90:3e:01:0f:5f:28:bf: 31:06:25:24:06:e0:d2:83:14:42:3c:e8:e8:68:bd: e3:35:f8:d9:74:8e:5c:5d:53:fa:70:33:2c:0b:c4: a3:16:28:f6:89:c1:fc:68:44:c4:95:ee:1b:bc:fe: 2b:f8:ee:02:f5:0f:63:ab:d6:e8:bc:fd:c3:18:ef: a7:58:c6:f2:d9:45:70:05:1e:4c:e0:27:32:72:8f: 27:43:18:7d:d2:1f:cd:b2:71:73:25:26:da:6f:1d: e4:9d:5c:d5:ae:2c:fa:4a:f0:46:4d:21:a2:3d:f1: 35:54:c2:ce:52:70:d5:f8:43:a2:88:dc:47:c1:ed: fe:58:5b:3f:c6:a6:71:e0:e6:81:e6:fa:49:d8:47: f6:30:3d:27:83:07:04:b1:c7:73:e9:c4:69:55:5c: 3f:51:b2:83:9f:33:64:9b:d2:4a:0c:73:c8:ef:0b: 27:34:74:eb:13:c0:ca:5c:0f:2c:33:12:dc:a7:2f: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:01:B6:96:A2:89:A6:A5:7E:93:F1:B9:2F:CF:42:D2:27:1B:8D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:38:1b:32:50:67:14:bc:a4:66:d6:8f:47:61:58:f2:9e:1e: cf:fb:36:7c:e8:2f:8d:ba:40:e7:b1:df:3a:8f:80:c7:d3:72: 20:e1:ee:be:35:fa:e8:14:71:3d:2e:ce:30:80:49:4e:d2:54: ec:7a:33:55:7d:6a:f9:1a:41:76:9f:c9:2f:97:5f:c3:98:e8: 72:eb:95:99:bb:28:74:c9:e0:e6:df:5f:5f:b6:55:13:86:0e: 85:4e:00:fa:c8:1c:a7:6a:d3:b8:cf:e2:11:2c:19:4b:7e:6d: a2:c3:a5:39:bc:67:56:5a:e4:7c:cc:ac:ad:8c:2d:1f:23:66: b6:b2:2a:b4:b0:a4:a6:60:46:f0:71:43:e1:a9:f6:2e:57:c0: 9b:da:a0:6a:58:4d:8e:4f:b9:85:4b:e1:c8:60:fe:59:d9:38: 86:ca:45:87:cc:91:d4:0c:8e:fc:0c:a0:e3:bc:62:1c:d3:79: 77:02:b8:41:d5:b6:31:8b:e5:4e:f1:74:99:71:bf:de:18:c6: b6:b7:ca:e4:2c:94:c0:fc:a6:c5:2a:4d:fb:8e:06:fc:0f:2e: 3c:eb:0e:b7:73:85:80:a2:67:5d:24:52:5e:24:68:78:15:f4: b5:99:75:b6:91:51:d8:b9:a8:52:d6:bd:6e:e3:39:a6:1e:9c: ff:bc:1f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HFkYM7D9rUOBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTE0OTFhNzAtZDFjMi00ZTQ1LWE1OTktZDdhNDg3YTM0NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNk5WN8RYv2MlDVSUf03+wPnZ6ZeOZFYT1/Z L+9rKd/MMV2t3BJxJIwnBo7JoFgYIT9X9e5Uf5HnOrSGHG//J9h/RZA+AQ9fKL8x BiUkBuDSgxRCPOjoaL3jNfjZdI5cXVP6cDMsC8SjFij2icH8aETEle4bvP4r+O4C 9Q9jq9bovP3DGO+nWMby2UVwBR5M4Ccyco8nQxh90h/NsnFzJSbabx3knVzVriz6 SvBGTSGiPfE1VMLOUnDV+EOiiNxHwe3+WFs/xqZx4OaB5vpJ2Ef2MD0ngwcEscdz 6cRpVVw/UbKDnzNkm9JKDHPI7wsnNHTrE8DKXA8sMxLcpy+fawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQBtpaiiaalfpPxuS/PQtInG42WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZDg5ZGM2YmYtZjc2MC0z NGEwLTk4MjItN2YxMzYyOWU5N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALs4GzJQZxS8pGbWj0dhWPKeHs/7NnzoL426QOex3zqPgMfTciDh7r41 +ugUcT0uzjCASU7SVOx6M1V9avkaQXafyS+XX8OY6HLrlZm7KHTJ4ObfX1+2VROG DoVOAPrIHKdq07jP4hEsGUt+baLDpTm8Z1Za5HzMrK2MLR8jZrayKrSwpKZgRvBx Q+Gp9i5XwJvaoGpYTY5PuYVL4chg/lnZOIbKRYfMkdQMjvwMoOO8YhzTeXcCuEHV tjGL5U7xdJlxv94Yxra3yuQslMD8psUqTfuOBvwPLjzrDrdzhYCiZ10kUl4kaHgV 9LWZdbaRUdi5qFLWvW7jOaYenP+8Hyc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:11 2025 by rpki-client