$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa File: 2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa (raw, json) Hash identifier: UCKGPGrY0grv+zhtVrKN9RHmTQnC4I8rddFlwjx0cIQ= Subject key identifier: 39:10:7A:6E:DC:EA:E9:77:E5:F0:15:7F:6E:E7:7D:9A:FB:8E:B0:51 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B3F1C543C6B4646231F71BCC0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 209.71.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:54:3c:6b:46:46:23:1f:71:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=02651f54-e2a6-46d4-8048-ae8702a459d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:8a:2c:cd:d0:ef:29:83:48:16:5b:5e:6c: 1b:f7:6d:46:4a:53:2c:27:39:fe:96:bc:1f:02:b5: ed:f9:9c:63:c1:41:af:8d:10:d0:eb:13:78:3e:e8: 20:c0:b3:9d:47:e3:ca:28:d1:b4:19:d8:78:d6:0f: 5b:74:76:de:e3:f2:4d:81:87:b4:50:9c:15:97:5d: cd:90:10:a4:14:67:d1:4a:45:89:c3:a4:e5:82:bf: 39:c0:a6:fc:8b:dc:23:a1:80:17:e4:dc:ce:fd:d8: 84:8a:6d:7f:0c:22:14:68:74:a0:21:a2:aa:41:d4: 10:72:8a:5e:c3:86:38:6c:ee:77:fc:62:a5:bf:a6: d3:4e:34:7d:08:7e:ac:21:a4:ed:8c:13:f2:a2:61: 38:b8:aa:ef:4e:1b:f5:ec:7d:97:8a:d4:f6:47:42: 1b:76:03:65:87:cc:16:d0:c0:5d:e4:1c:c4:37:2c: a3:1f:16:38:f8:62:d5:a5:0c:68:4a:f3:e6:a5:77: 71:16:95:aa:99:37:05:3a:e0:60:c2:dd:f0:41:06: 02:4b:56:02:9a:c7:d8:a7:79:2d:35:96:cd:eb:d4: 29:ac:dc:2e:c6:6a:ab:94:fb:3e:e1:4e:7a:1f:c0: 4b:5b:8c:9f:86:2d:fa:c9:76:21:39:ef:39:2f:51: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:7A:6E:DC:EA:E9:77:E5:F0:15:7F:6E:E7:7D:9A:FB:8E:B0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:47:08:67:66:d7:67:63:ba:38:e7:c7:20:30:41:79:f3:30: 30:7a:6e:c3:4a:4b:66:ad:9f:cf:f1:64:56:c2:60:b3:89:3b: 0e:e5:5a:01:5e:ba:1b:a4:7b:23:8c:ad:77:9c:35:6c:de:30: b8:fb:0d:9b:c0:71:73:09:34:45:d1:7b:04:e8:d4:20:dc:9b: 07:5c:7d:1d:48:fa:fd:00:d6:5e:69:6f:b4:9f:9f:63:df:4a: 86:d5:57:a9:62:fe:93:5a:c3:51:09:7a:e3:f9:f4:d8:14:a8: 7e:9a:e9:08:b9:cc:cb:f4:16:c2:88:fe:d3:ce:cc:b9:62:6f: 6e:d8:90:69:92:24:67:92:da:a1:7d:3d:71:2e:51:28:c5:bf: 1d:a5:d4:1d:29:cf:13:67:32:2f:41:46:94:e0:2c:ae:5d:56: 9a:29:ec:1e:4e:91:c3:73:20:d8:a2:93:28:4c:e1:35:87:83: ea:6d:4e:53:45:8c:26:fd:c7:5c:14:38:a8:9a:38:12:62:ff: 8a:d9:d2:b1:62:f1:22:7b:60:cf:08:f8:16:d0:28:30:61:41: 59:1e:54:5e:db:62:a2:82:ad:72:c2:24:22:d3:33:79:62:5d: 55:a8:6b:32:04:cc:ed:1e:07:2a:35:5a:9a:23:67:3e:30:64: 7c:a8:50:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFQ8a0ZGIx9xvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MDI2NTFmNTQtZTJhNi00NmQ0LTgwNDgtYWU4NzAyYTQ1OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOiKLM3Q7ymDSBZbXmwb921GSlMsJzn+lrwf ArXt+ZxjwUGvjRDQ6xN4PuggwLOdR+PKKNG0Gdh41g9bdHbe4/JNgYe0UJwVl13N kBCkFGfRSkWJw6Tlgr85wKb8i9wjoYAX5NzO/diEim1/DCIUaHSgIaKqQdQQcope w4Y4bO53/GKlv6bTTjR9CH6sIaTtjBPyomE4uKrvThv17H2XitT2R0IbdgNlh8wW 0MBd5BzENyyjHxY4+GLVpQxoSvPmpXdxFpWqmTcFOuBgwt3wQQYCS1YCmsfYp3kt NZbN69QprNwuxmqrlPs+4U56H8BLW4yfhi36yXYhOe85L1HKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkQem7c6ul35fAVf27nfZr7jrBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMmEzMmMwYTEtZWQxYi0z YTNlLWIzODAtOTE4Mzc0ZDc3Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdHCGdm12djujjnxyAwQXnzMDB6bsNKS2atn8/xZFbCYLOJOw7lWgFe uhukeyOMrXecNWzeMLj7DZvAcXMJNEXRewTo1CDcmwdcfR1I+v0A1l5pb7Sfn2Pf SobVV6li/pNaw1EJeuP59NgUqH6a6Qi5zMv0FsKI/tPOzLlib27YkGmSJGeS2qF9 PXEuUSjFvx2l1B0pzxNnMi9BRpTgLK5dVpop7B5OkcNzINiikyhM4TWHg+ptTlNF jCb9x1wUOKiaOBJi/4rZ0rFi8SJ7YM8I+BbQKDBhQVkeVF7bYqKCrXLCJCLTM3li XVWoazIEzO0eByo1WpojZz4wZHyoUPM= -----END CERTIFICATE-----Generated at Thu Oct 9 11:09:08 2025 by rpki-client