$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa File: 91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa (raw, json) Hash identifier: xDXoV53AyDWEJrgmf6G4+/6HHJckg79YaZV1eTeACcQ= Subject key identifier: CC:83:FD:5C:BA:71:05:70:B8:C4:6D:4F:67:BF:AF:67:9F:80:D4:2A Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584B0B76AAA39C13D9C2C35D8F40 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 69.170.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:aa:a3:9c:13:d9:c2:c3:5d:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=5afd5d28-196d-4306-906c-9e9620985d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:69:ca:57:28:df:3d:15:9a:c9:d7:d1:41: a1:fd:cf:4e:ba:0a:a6:9a:9d:81:ef:0b:76:c7:0c: b1:53:94:80:ea:c7:b2:6d:57:84:0c:9d:2c:cd:0f: 3d:23:72:ad:66:11:90:7c:24:e2:e0:5a:2d:27:68: 5a:82:3d:dd:cc:10:82:d6:26:5f:43:96:52:3c:e9: 62:f3:6e:9b:0f:a1:17:a2:1b:e0:fb:eb:1e:d4:6d: b8:0b:e4:40:13:d1:bf:81:a7:dd:46:42:8d:68:e7: 9e:e0:9b:1b:fe:30:05:6d:0c:88:9f:b7:6f:96:6e: 76:5d:dd:8b:8d:73:83:26:48:5d:e0:37:e0:6c:3a: 58:b4:cf:23:8b:1c:74:e6:1a:39:ce:79:69:a4:28: 24:f8:1d:65:ad:8f:dd:4c:e6:c5:f7:e2:e7:04:9b: ae:3f:fe:4a:80:42:50:7e:52:9c:bd:8d:5a:ff:6f: 53:7f:6f:00:e0:a6:ac:fc:75:43:a1:f6:5e:a5:b8: df:10:bc:39:78:c8:85:02:18:6e:6e:c6:44:0b:16: 89:2e:4f:6a:ef:64:57:09:23:40:32:70:8b:20:5b: 77:d2:38:b7:ba:80:6f:a3:37:b4:b2:30:9e:f3:a0: eb:a7:52:23:37:8a:ed:5d:b4:cf:c2:ad:8a:53:aa: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:83:FD:5C:BA:71:05:70:B8:C4:6D:4F:67:BF:AF:67:9F:80:D4:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/91fbacc7-41a4-3b5b-839b-44a0c5e033ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 69.170.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:05:4f:dc:73:0a:0c:fc:b5:5d:dc:bb:4b:23:79:37:0f:69: 08:91:b5:75:f0:57:54:f9:ea:21:3d:e7:96:83:ad:94:90:12: c4:72:d7:c4:93:7d:0b:6c:81:30:cc:12:b6:23:33:f9:31:04: 68:2a:17:cc:7f:ad:28:db:30:5a:3f:49:0f:c6:f2:50:39:22: 6a:bf:24:1f:3f:29:da:c3:94:59:70:cc:bc:53:78:d2:d2:d1: 92:f2:a5:9a:63:38:f2:a0:8b:bd:00:4b:11:5e:c2:f5:89:66: bb:31:7c:cb:f2:d6:63:89:0c:36:2e:3c:f1:d6:5d:db:c5:6e: 3e:20:78:d7:55:1e:a7:2a:92:f5:c8:a3:85:82:7b:8e:dd:a1: 06:13:d4:a2:b4:39:f7:e7:58:5e:52:cb:36:82:60:4e:96:d2: 03:e1:c0:7b:c1:35:27:3e:67:f6:ee:13:c1:a6:38:43:7c:fa: 7d:ac:61:e2:3a:ce:db:d4:73:89:dd:89:a8:ee:44:12:f7:9f: f0:05:27:a8:02:bc:9e:49:4b:4d:b4:7e:7a:24:a1:9e:1a:74: 27:ba:78:53:94:3b:18:d0:5a:69:d1:da:bf:dd:b6:94:eb:d8: c0:d4:e8:3b:a8:48:2b:71:aa:50:b3:f7:73:bc:c4:fc:ae:59: e1:c7:ae:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqqjnBPZwsNdj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NWFmZDVkMjgtMTk2ZC00MzA2LTkwNmMtOWU5NjIwOTg1ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFRpylco3z0VmsnX0UGh/c9Ougqmmp2B7wt2 xwyxU5SA6seybVeEDJ0szQ89I3KtZhGQfCTi4FotJ2hagj3dzBCC1iZfQ5ZSPOli 826bD6EXohvg++se1G24C+RAE9G/gafdRkKNaOee4Jsb/jAFbQyIn7dvlm52Xd2L jXODJkhd4DfgbDpYtM8jixx05ho5znlppCgk+B1lrY/dTObF9+LnBJuuP/5KgEJQ flKcvY1a/29Tf28A4Kas/HVDofZepbjfELw5eMiFAhhubsZECxaJLk9q72RXCSNA MnCLIFt30ji3uoBvoze0sjCe86Drp1IjN4rtXbTPwq2KU6ozMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyD/Vy6cQVwuMRtT2e/r2efgNQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTFmYmFjYzctNDFhNC0z YjViLTgzOWItNDRhMGM1ZTAzM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARaq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4FT9xzCgz8tV3cu0sjeTcPaQiRtXXwV1T56iE955aDrZSQEsRy18ST fQtsgTDMErYjM/kxBGgqF8x/rSjbMFo/SQ/G8lA5Imq/JB8/KdrDlFlwzLxTeNLS 0ZLypZpjOPKgi70ASxFewvWJZrsxfMvy1mOJDDYuPPHWXdvFbj4geNdVHqcqkvXI o4WCe47doQYT1KK0OffnWF5SyzaCYE6W0gPhwHvBNSc+Z/buE8GmOEN8+n2sYeI6 ztvUc4ndiajuRBL3n/AFJ6gCvJ5JS020fnokoZ4adCe6eFOUOxjQWmnR2r/dtpTr 2MDU6DuoSCtxqlCz93O8xPyuWeHHrr4= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:33 2025 by rpki-client