$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa File: 1aea4482-4596-3858-b921-9cdd4d27ea47.roa (raw, json) Hash identifier: OYmycL0bom6jXMH3oGKcNajl0GYy5p1h5ey/IZcV/2U= Subject key identifier: F2:39:95:EB:D4:C9:4B:4A:48:D3:9A:00:A4:66:CD:AD:DB:83:17:26 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC8087D6AC9901312CF920 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 199.200.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:80:87:d6:ac:99:01:31:2c:f9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=f2627997-7b03-4e1c-9e6e-aa477d0564d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:2a:db:7b:b9:98:9f:27:67:fd:6c:df:97: 5e:f9:68:f6:41:21:ec:20:20:5a:e8:ab:07:28:16: 1a:2b:5b:92:9f:0f:f6:f5:0d:9e:63:05:23:14:64: e9:0f:1a:37:37:d8:28:2c:95:ba:55:cc:d7:fa:94: 0a:51:44:61:5e:9f:16:74:09:ed:f4:ee:64:96:21: f7:64:23:49:3e:af:79:d9:ab:da:60:ff:f8:50:69: f1:dc:b0:d3:0b:bd:18:e3:91:2b:6d:2e:7a:c7:c1: 21:d4:58:2f:6f:be:2c:4b:24:55:e5:cc:44:f0:27: 57:68:d9:02:d2:28:cb:19:2c:93:cb:c2:da:dc:9b: 33:3f:66:bd:4e:a1:70:7c:27:d7:a3:5b:ab:80:6d: b4:cc:9c:4b:cf:8d:f3:74:25:6a:da:d5:23:f5:35: 6c:66:98:12:1b:09:cf:e4:66:b1:ec:23:40:b8:c5: 04:9f:27:06:ba:59:0b:db:5a:96:6b:bb:98:e7:a9: 34:64:e6:8a:d9:f5:c8:3c:16:7b:91:c9:a1:a3:a4: 05:5e:29:df:b6:9a:56:d4:33:10:c2:23:34:d3:d2: a2:53:0c:3e:91:3c:e0:1e:63:aa:dd:88:cd:77:c4: 21:27:3e:de:06:28:c0:be:dd:74:d5:6d:b9:07:a3: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:39:95:EB:D4:C9:4B:4A:48:D3:9A:00:A4:66:CD:AD:DB:83:17:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:87:f6:91:e8:54:aa:77:52:7f:06:27:33:41:bb:d6:43:2a: 23:9c:bb:94:0c:6b:8b:5e:fe:44:40:e5:9b:bf:97:50:a1:7b: 68:36:cd:f2:53:70:1b:a8:30:d3:15:ee:97:8b:11:48:25:c9: 30:36:20:a3:fa:dd:d7:90:a6:a1:17:1d:11:11:3f:96:c7:b4: 6a:d0:e9:7e:9d:80:2a:be:be:3c:77:9f:ae:f2:99:c1:f7:32: 93:da:6c:d7:82:03:d9:6c:39:3d:1b:97:98:78:ea:61:b8:38: f1:54:1c:0a:c5:fc:ef:00:c0:02:9e:57:43:93:37:60:9f:3a: 8e:d1:9d:95:4b:d8:0e:b1:da:66:70:bf:6c:c7:17:11:a8:91: ee:8c:88:32:ff:fa:ab:b0:33:f3:cf:d5:81:fc:09:a4:da:69: ea:61:95:36:bc:26:ec:9c:8b:33:12:37:75:74:73:4c:b3:57: 89:00:e8:d6:56:87:03:ae:c0:6c:46:0b:0a:14:1d:a9:ef:2b: ce:13:cb:9f:07:3c:d0:32:62:38:b5:97:71:07:81:8b:9a:cf: ac:8e:40:2e:8c:f0:8c:b6:63:07:cb:a3:18:2f:44:e2:1b:8a: 5d:1f:5d:46:42:94:fa:71:2a:1e:0c:80:f8:cf:5f:1f:8d:09: 5d:94:41:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3ICH1qyZATEs+SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjI2Mjc5OTctN2IwMy00ZTFjLTllNmUtYWE0NzdkMDU2NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Yq23u5mJ8nZ/1s35de+Wj2QSHsICBa6KsH KBYaK1uSnw/29Q2eYwUjFGTpDxo3N9goLJW6VczX+pQKUURhXp8WdAnt9O5kliH3 ZCNJPq952avaYP/4UGnx3LDTC70Y45ErbS56x8Eh1Fgvb74sSyRV5cxE8CdXaNkC 0ijLGSyTy8La3JszP2a9TqFwfCfXo1urgG20zJxLz43zdCVq2tUj9TVsZpgSGwnP 5Gax7CNAuMUEnycGulkL21qWa7uY56k0ZOaK2fXIPBZ7kcmho6QFXinftppW1DMQ wiM009KiUww+kTzgHmOq3YjNd8QhJz7eBijAvt101W25B6O85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI5levUyUtKSNOaAKRmza3bgxcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMWFlYTQ0ODItNDU5Ni0z ODU4LWI5MjEtOWNkZDRkMjdlYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+H9pHoVKp3Un8GJzNBu9ZDKiOcu5QMa4te/kRA5Zu/l1Che2g2zfJT cBuoMNMV7peLEUglyTA2IKP63deQpqEXHRERP5bHtGrQ6X6dgCq+vjx3n67ymcH3 MpPabNeCA9lsOT0bl5h46mG4OPFUHArF/O8AwAKeV0OTN2CfOo7RnZVL2A6x2mZw v2zHFxGoke6MiDL/+quwM/PP1YH8CaTaaephlTa8JuycizMSN3V0c0yzV4kA6NZW hwOuwGxGCwoUHanvK84Ty58HPNAyYji1l3EHgYuaz6yOQC6M8Iy2YwfLoxgvROIb il0fXUZClPpxKh4MgPjPXx+NCV2UQRk= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:50 2025 by rpki-client