$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7542b30e-7b7d-3a28-baa9-198d0709111d.roa File: 7542b30e-7b7d-3a28-baa9-198d0709111d.roa (raw, json) Hash identifier: m3MNhBBRwQHbqn33bNj/6nwBGFRZQojuUflOUTbANak= Subject key identifier: 14:89:21:6C:B8:0D:10:66:0F:6C:CD:D7:6B:DB:54:A5:48:86:98:50 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B41E70762F9D44E2D20462D20 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7542b30e-7b7d-3a28-baa9-198d0709111d.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 64.251.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:07:62:f9:d4:4e:2d:20:46:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=33e75045-963d-46a3-9c53-4723990c2760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:d3:d3:74:17:4a:6e:df:1a:0c:99:2b:db: 2f:8e:12:d2:50:0e:fb:fb:47:62:67:0a:d4:5a:8c: 7b:ff:6e:1d:f7:30:f4:49:ae:eb:99:51:0d:25:d8: 58:d3:88:68:a2:51:9b:e6:d3:24:8f:75:8c:32:f2: b0:84:17:94:b8:bc:a8:c7:24:6d:9e:c0:e7:e3:aa: 0b:49:cb:bb:9a:2a:bd:0e:04:4f:e2:89:c4:8d:98: d3:b3:87:71:cf:9f:09:98:2c:86:6c:a4:c8:42:75: 6c:fe:09:aa:b0:17:63:9f:77:81:b5:72:56:ad:16: cc:fc:d8:80:d1:6d:05:d4:43:a4:26:2a:91:6a:57: e5:b2:70:fb:65:35:f2:5f:91:7a:36:d1:3c:68:b3: 17:f2:e2:7e:0e:24:19:bd:84:94:88:41:4d:f9:1a: a9:20:37:fb:4c:1b:a0:64:67:b4:58:10:b5:63:03: e9:7b:e5:e1:94:63:cb:4f:84:39:de:34:fd:57:e6: 6c:1e:3e:ae:27:08:2d:9f:90:c3:81:94:52:5a:4c: 92:06:b0:ef:f4:56:36:45:5f:1e:ab:4f:46:54:7c: 33:ee:a0:65:b4:34:5e:98:6c:34:93:18:7a:45:90: 3f:a2:d4:e4:35:f5:1f:7d:2b:c8:5a:eb:40:57:5a: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:89:21:6C:B8:0D:10:66:0F:6C:CD:D7:6B:DB:54:A5:48:86:98:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7542b30e-7b7d-3a28-baa9-198d0709111d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 64.251.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7a:ea:07:4d:b5:87:b3:99:4f:63:c2:ae:36:be:b5:a6:cb: e6:b6:4b:38:41:7f:ad:0f:16:0c:4b:4a:38:77:21:79:48:07: 70:cc:17:9a:95:ea:a1:6b:1d:16:67:a7:12:5a:d1:b3:af:b9: b7:d6:8c:93:2b:4d:bd:51:86:8a:38:27:07:18:15:98:4c:84: 31:cc:70:ca:70:7c:5d:ac:37:61:85:4b:0e:d0:4d:b1:62:75: a3:f2:b1:1c:a3:bd:72:00:69:99:ef:9d:de:36:67:0b:97:19: e2:4a:ee:28:fe:ac:eb:c7:2f:36:f4:dd:ce:c9:56:7c:27:3b: 41:bc:61:63:66:15:14:8f:c7:56:61:73:00:7d:bb:70:88:eb: 4e:eb:85:6f:ca:6b:df:cc:91:98:8c:fb:ae:d6:d9:4c:b3:22: d6:e1:22:30:a7:9d:a9:6c:28:b5:50:6b:26:52:96:e0:d2:de: 59:ed:9a:1f:a5:95:19:fd:d9:c8:ab:69:23:19:87:6e:fd:a6: 20:04:d2:fc:1b:7d:93:47:09:dd:3a:65:d9:4a:0a:2c:dd:02: dd:cb:08:6e:fc:cd:0c:2f:77:f5:04:55:ab:12:b9:e8:55:56: 6d:fb:a2:14:02:2f:60:05:17:cf:a0:2d:63:64:f2:ff:41:e2: bd:20:7d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wdi+dROLSBGLSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MzNlNzUwNDUtOTYzZC00NmEzLTljNTMtNDcyMzk5MGMyNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXvT03QXSm7fGgyZK9svjhLSUA77+0diZwrU Wox7/24d9zD0Sa7rmVENJdhY04hoolGb5tMkj3WMMvKwhBeUuLyoxyRtnsDn46oL Scu7miq9DgRP4onEjZjTs4dxz58JmCyGbKTIQnVs/gmqsBdjn3eBtXJWrRbM/NiA 0W0F1EOkJiqRalflsnD7ZTXyX5F6NtE8aLMX8uJ+DiQZvYSUiEFN+RqpIDf7TBug ZGe0WBC1YwPpe+XhlGPLT4Q53jT9V+ZsHj6uJwgtn5DDgZRSWkySBrDv9FY2RV8e q09GVHwz7qBltDRemGw0kxh6RZA/otTkNfUffSvIWutAV1rmQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSJIWy4DRBmD2zN12vbVKVIhphQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNzU0MmIzMGUtN2I3ZC0z YTI4LWJhYTktMTk4ZDA3MDkxMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQPvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ66gdNtYezmU9jwq42vrWmy+a2SzhBf60PFgxLSjh3IXlIB3DMF5qV 6qFrHRZnpxJa0bOvubfWjJMrTb1Rhoo4JwcYFZhMhDHMcMpwfF2sN2GFSw7QTbFi daPysRyjvXIAaZnvnd42ZwuXGeJK7ij+rOvHLzb03c7JVnwnO0G8YWNmFRSPx1Zh cwB9u3CI607rhW/Ka9/MkZiM+67W2UyzItbhIjCnnalsKLVQayZSluDS3lntmh+l lRn92ciraSMZh279piAE0vwbfZNHCd06ZdlKCizdAt3LCG78zQwvd/UEVasSuehV Vm37ohQCL2AFF8+gLWNk8v9B4r0gfTE= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:29 2025 by rpki-client