$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/084a4f2d-cc6e-3f48-8c15-1793a1dd78d8.roa File: 084a4f2d-cc6e-3f48-8c15-1793a1dd78d8.roa (raw, json) Hash identifier: M7wPhRC/1XL4+JAp3g1GUO4DP49+ndjGj/0st1XydBY= Subject key identifier: A0:A7:8D:67:1B:82:E5:7D:E8:35:CD:FF:2A:8C:60:41:E2:28:4F:E9 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B41E72242D10C14BAD1915980 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/084a4f2d-cc6e-3f48-8c15-1793a1dd78d8.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 74.51.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:22:42:d1:0c:14:ba:d1:91:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=fbee50a2-12ca-46fa-9001-46abf2a4f5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:07:1d:d9:2a:52:56:23:ef:c5:a2:bb:d1:aa: 3d:b1:e1:65:74:5b:60:63:0f:14:a8:68:bd:d0:f5: 55:13:97:a1:f2:a8:32:c4:14:0b:5d:59:81:3e:2a: a9:e5:54:3b:b5:10:95:7a:66:e2:ff:47:a0:c3:35: c2:bf:13:a9:bd:81:79:45:4b:7f:b2:04:63:47:a2: 7e:0a:bd:35:b0:8b:9f:06:8c:06:de:9e:94:f7:c1: d6:ca:be:20:55:57:56:4b:f5:95:7b:f4:12:bf:75: 9b:04:78:1c:e1:a9:27:17:5f:aa:6d:32:47:c4:ad: 34:74:c8:82:10:0b:7c:f2:cb:cb:63:1f:69:6f:a6: 07:70:a0:4c:f8:e7:35:d6:3e:1a:34:53:57:09:b3: 77:2b:d5:6c:1e:f3:37:73:8f:96:0d:18:e4:ab:ac: d2:a4:ef:f5:e6:22:bb:4d:42:bb:6c:2c:d9:fc:c5: 32:cc:a6:f8:d4:dc:d1:6b:84:a8:f2:1c:92:e0:df: 87:ce:22:46:87:36:f2:a3:ce:4e:53:40:37:7a:1c: 80:b9:5b:a8:fd:e3:79:92:8a:f5:3b:43:5c:f0:7c: 72:90:fb:53:40:64:fb:9f:02:28:ef:82:a1:41:97: b6:c0:59:a8:5c:f3:d5:f2:1b:84:fc:9e:07:ab:87: 68:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A7:8D:67:1B:82:E5:7D:E8:35:CD:FF:2A:8C:60:41:E2:28:4F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/084a4f2d-cc6e-3f48-8c15-1793a1dd78d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 74.51.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:71:c1:cf:6b:f3:25:1b:e8:8c:71:92:7b:e4:95:b1:46:6d: c6:44:3c:a1:d3:44:03:02:df:c5:26:9f:7f:7f:b2:a6:30:0a: fa:e6:d0:13:47:7b:03:e0:13:bb:4b:7f:64:3d:78:82:50:87: c4:66:0e:20:7b:b0:12:59:bc:f5:3a:5a:28:c9:4f:0a:84:cf: 05:28:4a:da:be:86:73:40:bd:9b:e5:ed:a3:70:b9:25:63:9c: b1:68:93:d2:ff:d0:f4:05:ea:f1:59:61:5a:68:16:3f:c5:4a: ea:e4:b4:f6:ea:4b:48:10:52:fa:f6:bd:bc:6e:37:e1:f6:a0: f3:eb:ea:55:97:2a:03:e3:72:2f:f6:7a:b6:46:21:96:84:65: d5:a9:32:8e:62:31:9a:f7:2b:1c:f4:af:f5:0e:5f:55:b3:db: ce:f8:0b:17:8b:bc:f8:2b:8d:e6:0b:44:5b:73:12:8a:8d:07: 0c:04:ff:ab:8f:7a:90:87:00:71:51:01:3f:15:3d:c4:0e:0f: c9:cc:d8:c3:68:39:f3:bf:b1:18:58:ce:b1:ca:6d:a7:3f:5a: e7:3f:4d:2f:66:44:e0:05:b9:a1:bf:13:06:9d:07:2d:69:37: 7a:37:8a:63:16:92:01:db:19:dd:c5:71:5f:26:39:dd:24:1b: cc:01:2d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yJC0QwUutGRWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmJlZTUwYTItMTJjYS00NmZhLTkwMDEtNDZhYmYyYTRmNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggcd2SpSViPvxaK70ao9seFldFtgYw8UqGi9 0PVVE5eh8qgyxBQLXVmBPiqp5VQ7tRCVembi/0egwzXCvxOpvYF5RUt/sgRjR6J+ Cr01sIufBowG3p6U98HWyr4gVVdWS/WVe/QSv3WbBHgc4aknF1+qbTJHxK00dMiC EAt88svLYx9pb6YHcKBM+Oc11j4aNFNXCbN3K9VsHvM3c4+WDRjkq6zSpO/15iK7 TUK7bCzZ/MUyzKb41NzRa4So8hyS4N+HziJGhzbyo85OU0A3ehyAuVuo/eN5kor1 O0Nc8HxykPtTQGT7nwIo74KhQZe2wFmoXPPV8huE/J4Hq4doEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCnjWcbguV96DXN/yqMYEHiKE/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMDg0YTRmMmQtY2M2ZS0z ZjQ4LThjMTUtMTc5M2ExZGQ3OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhxwc9r8yUb6IxxknvklbFGbcZEPKHTRAMC38Umn39/sqYwCvrm0BNH ewPgE7tLf2Q9eIJQh8RmDiB7sBJZvPU6WijJTwqEzwUoStq+hnNAvZvl7aNwuSVj nLFok9L/0PQF6vFZYVpoFj/FSurktPbqS0gQUvr2vbxuN+H2oPPr6lWXKgPjci/2 erZGIZaEZdWpMo5iMZr3Kxz0r/UOX1Wz2874CxeLvPgrjeYLRFtzEoqNBwwE/6uP epCHAHFRAT8VPcQOD8nM2MNoOfO/sRhYzrHKbac/Wuc/TS9mROAFuaG/EwadBy1p N3o3imMWkgHbGd3FcV8mOd0kG8wBLds= -----END CERTIFICATE-----Generated at Thu Oct 9 11:11:34 2025 by rpki-client