$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/73248f71-c635-367b-b753-0ed1b4318c41.roa File: 73248f71-c635-367b-b753-0ed1b4318c41.roa (raw, json) Hash identifier: g3uW8N7Ph+WBCdungyfWhWJMKPGA70+p34vjSZ+HA3c= Subject key identifier: 05:7D:71:53:AE:65:D2:E4:A9:BE:EB:D8:0A:2A:18:FB:45:8B:D3:24 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7BE64807242514B02D40 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/73248f71-c635-367b-b753-0ed1b4318c41.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 199.200.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7b:e6:48:07:24:25:14:b0:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=a62f5b46-83a1-43ab-9a36-718169f4bfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1a:37:04:00:a9:65:01:fe:3e:3e:51:14:80: 07:b6:42:03:16:d8:47:f6:21:d9:d5:2e:1d:47:ff: f7:28:aa:42:db:90:7c:17:4f:c5:3e:d4:f8:d8:69: 04:c7:1f:d8:7c:2d:e9:08:14:c0:d5:5b:54:af:3b: 56:22:36:1a:59:9a:6b:f1:12:c0:75:63:23:02:98: c4:5e:d9:ce:53:dc:88:e8:29:0e:50:53:d2:4f:af: 5d:43:a9:17:de:5d:f1:6b:f0:99:0a:73:46:fb:a5: 12:48:6a:f5:39:f1:4f:f1:e6:b9:f5:19:79:64:97: 01:4e:f7:67:f6:93:92:4b:59:51:58:db:a6:b2:fb: 23:31:ca:8b:ca:73:ed:14:d0:5b:d4:3e:b1:96:48: 68:fe:17:70:8a:d3:a0:93:84:78:e7:cf:5f:71:16: be:43:9c:55:d8:6f:ee:24:71:88:36:db:ed:e2:27: c9:63:38:61:54:a9:7c:5a:37:a5:ab:67:3b:7c:0d: ae:35:a5:d3:12:dd:95:ab:2b:fd:ef:0b:45:fb:64: d0:f9:5d:bc:8d:0c:9c:a0:49:8c:d6:55:d5:f9:69: 95:ff:a2:28:28:9f:a0:80:ac:35:40:14:30:4b:00: 3f:47:d2:bd:dd:88:f7:c3:83:41:08:62:f9:45:1b: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7D:71:53:AE:65:D2:E4:A9:BE:EB:D8:0A:2A:18:FB:45:8B:D3:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/73248f71-c635-367b-b753-0ed1b4318c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c9:c9:35:2c:bc:b7:0a:c3:85:10:52:d8:4e:4d:00:0d:18: 3c:bb:17:2d:59:50:c7:6e:cf:f1:20:14:22:49:71:d5:15:52: c9:c9:c8:47:42:28:38:37:0b:8a:6e:1e:e9:69:ba:e6:61:7c: ad:15:82:98:96:6f:99:6c:3b:9d:34:9b:97:f0:ab:d6:38:c4: 85:74:90:5d:3c:2a:3a:68:54:13:84:8f:8b:08:9a:dc:25:b4: 1e:67:c1:55:9f:ef:86:c6:bc:57:54:8e:85:82:41:13:03:1a: b1:e3:3a:36:cd:32:23:bb:df:32:17:3c:8b:78:5b:88:8f:86: 6a:27:ec:ef:6b:e1:6c:b9:33:7a:c7:00:89:8e:3e:ea:eb:75: dd:67:1d:6e:3d:73:ba:6d:39:7d:79:9a:5b:0d:8e:be:8f:cb: 36:87:e9:4b:ec:27:4a:f8:2f:f8:0b:e5:10:ac:d4:89:1d:41: 47:f4:d2:7a:7d:0e:14:67:19:a5:3d:a8:57:21:0d:42:de:96: a3:b1:f0:49:57:71:a9:ad:c1:dc:3b:bd:60:b2:d3:96:43:26: 85:c9:a3:f3:7a:02:ca:1b:76:ad:4a:8b:38:54:01:0e:ae:5d: 01:ed:3b:89:a9:b6:d3:78:9d:4a:7a:3d:8b:09:8b:c3:a1:1f: a8:ca:b9:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HvmSAckJRSwLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTYyZjViNDYtODNhMS00M2FiLTlhMzYtNzE4MTY5ZjRiZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRo3BACpZQH+Pj5RFIAHtkIDFthH9iHZ1S4d R//3KKpC25B8F0/FPtT42GkExx/YfC3pCBTA1VtUrztWIjYaWZpr8RLAdWMjApjE XtnOU9yI6CkOUFPST69dQ6kX3l3xa/CZCnNG+6USSGr1OfFP8ea59Rl5ZJcBTvdn 9pOSS1lRWNumsvsjMcqLynPtFNBb1D6xlkho/hdwitOgk4R4589fcRa+Q5xV2G/u JHGINtvt4ifJYzhhVKl8Wjelq2c7fA2uNaXTEt2Vqyv97wtF+2TQ+V28jQycoEmM 1lXV+WmV/6IoKJ+ggKw1QBQwSwA/R9K93Yj3w4NBCGL5RRvV9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV9cVOuZdLkqb7r2AoqGPtFi9MkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNzMyNDhmNzEtYzYzNS0z NjdiLWI3NTMtMGVkMWI0MzE4YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHJyTUsvLcKw4UQUthOTQANGDy7Fy1ZUMduz/EgFCJJcdUVUsnJyEdC KDg3C4puHulpuuZhfK0VgpiWb5lsO500m5fwq9Y4xIV0kF08KjpoVBOEj4sImtwl tB5nwVWf74bGvFdUjoWCQRMDGrHjOjbNMiO73zIXPIt4W4iPhmon7O9r4Wy5M3rH AImOPurrdd1nHW49c7ptOX15mlsNjr6PyzaH6UvsJ0r4L/gL5RCs1IkdQUf00np9 DhRnGaU9qFchDULelqOx8ElXcamtwdw7vWCy05ZDJoXJo/N6Asobdq1KizhUAQ6u XQHtO4mpttN4nUp6PYsJi8OhH6jKubM= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:29 2025 by rpki-client