$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa File: 8238436f-d3b9-38c8-99b7-34251e69ac0a.roa (raw, json) Hash identifier: e4z5HYMSs/v0acBPvI3uzPGpOjjpohZF2LRm7wEeUu0= Subject key identifier: 19:FB:A9:17:E5:BF:C3:A7:A1:22:0D:9E:B6:B7:88:41:49:47:0D:14 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7B51B96C446757BB6548 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 199.200.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7b:51:b9:6c:44:67:57:bb:65:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=f6cf70fc-fa3a-44b5-9cd9-f3c57f771b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:47:cc:b3:6b:69:3f:33:8d:0d:c3:92:6b: 42:6e:8a:fc:74:0d:b3:53:cd:f8:13:bb:02:7e:66: 8b:b1:64:a4:ca:37:34:a6:80:22:26:12:3f:c3:54: b1:8f:b4:bd:9d:25:8a:28:af:00:8e:67:6f:d4:25: 84:95:a1:35:34:c9:2f:5b:de:e6:87:7c:e0:be:72: 50:2a:d7:e6:7d:04:30:f5:8a:af:2b:8e:5b:1f:47: 33:4c:13:e7:61:77:6c:b2:e3:04:d1:6f:78:b0:b1: 9b:9a:05:04:2a:f2:4a:0c:9d:d7:72:36:38:1e:d7: 27:e0:cd:75:2b:38:7d:b6:9a:37:18:78:22:21:3f: f1:53:ca:68:f3:03:ec:da:1a:06:3b:4d:d4:e9:aa: 42:1c:77:15:1b:0d:ea:9e:a8:23:9c:c1:06:31:01: 1c:b9:2e:e9:31:11:85:57:7c:7b:30:97:fe:88:70: 49:32:9c:94:07:0a:a9:f5:04:22:8f:30:af:00:70: 9b:f5:73:05:b6:04:26:2a:21:6f:17:22:42:7e:d7: 1b:c5:32:62:09:81:1f:3e:ae:f8:5d:eb:e2:1c:b8: 96:5b:fe:5f:2d:51:ff:6f:2c:82:01:a4:60:a8:b8: 2a:47:be:dd:bf:68:3c:92:45:16:2d:0c:0a:d2:aa: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FB:A9:17:E5:BF:C3:A7:A1:22:0D:9E:B6:B7:88:41:49:47:0D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/8238436f-d3b9-38c8-99b7-34251e69ac0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8a:f3:f0:d4:2b:38:eb:eb:7c:38:fd:79:6f:81:8b:f7:d7: a2:76:28:40:1a:43:4d:1a:21:96:4c:d6:d7:26:7f:37:df:d5: a1:b7:35:ee:c3:61:6b:36:ef:9a:f4:92:57:95:19:fa:05:2d: c5:c8:58:04:c9:ab:da:ed:80:ec:d4:bf:9c:f3:f0:61:5d:19: 30:82:d1:bf:65:1f:e0:65:75:fc:42:be:bd:e5:f1:40:25:01: 82:53:2d:aa:09:35:fb:df:37:86:8f:1e:41:e0:0b:00:1c:b5: d2:5a:2e:3c:62:b5:99:ca:23:e9:25:00:1d:37:de:68:ee:22: e5:9e:1a:c9:54:68:78:7e:22:e6:cb:12:27:53:92:fb:10:3d: c0:0a:64:90:1b:31:ce:ea:9c:ad:3d:b5:c1:ed:c4:7a:1b:04: e6:d3:6b:c0:d7:28:7f:52:f5:62:12:52:67:d4:62:f8:9d:11: 88:e3:6c:86:3c:0e:a2:2a:dc:6f:12:ba:ee:e1:23:85:64:06: 92:e6:40:56:82:17:75:b7:1c:42:7b:dc:2e:cd:80:0d:65:8a: 1b:0c:9e:68:26:bd:58:95:73:25:ba:8b:a6:95:12:32:ba:33: 69:46:a1:01:ae:1a:44:8f:b1:b0:55:e4:45:6e:82:15:e3:d8: 3d:9c:be:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HtRuWxEZ1e7ZUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjZjZjcwZmMtZmEzYS00NGI1LTljZDktZjNjNTdmNzcxYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjxHzLNraT8zjQ3DkmtCbor8dA2zU834E7sC fmaLsWSkyjc0poAiJhI/w1Sxj7S9nSWKKK8Ajmdv1CWElaE1NMkvW97mh3zgvnJQ KtfmfQQw9YqvK45bH0czTBPnYXdssuME0W94sLGbmgUEKvJKDJ3XcjY4Htcn4M11 Kzh9tpo3GHgiIT/xU8po8wPs2hoGO03U6apCHHcVGw3qnqgjnMEGMQEcuS7pMRGF V3x7MJf+iHBJMpyUBwqp9QQijzCvAHCb9XMFtgQmKiFvFyJCftcbxTJiCYEfPq74 XeviHLiWW/5fLVH/byyCAaRgqLgqR77dv2g8kkUWLQwK0qogjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn7qRflv8OnoSINnra3iEFJRw0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvODIzODQzNmYtZDNiOS0z OGM4LTk5YjctMzQyNTFlNjlhYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6K8/DUKzjr63w4/XlvgYv316J2KEAaQ00aIZZM1tcmfzff1aG3Ne7D YWs275r0kleVGfoFLcXIWATJq9rtgOzUv5zz8GFdGTCC0b9lH+BldfxCvr3l8UAl AYJTLaoJNfvfN4aPHkHgCwActdJaLjxitZnKI+klAB033mjuIuWeGslUaHh+IubL EidTkvsQPcAKZJAbMc7qnK09tcHtxHobBObTa8DXKH9S9WISUmfUYvidEYjjbIY8 DqIq3G8Suu7hI4VkBpLmQFaCF3W3HEJ73C7NgA1lihsMnmgmvViVcyW6i6aVEjK6 M2lGoQGuGkSPsbBV5EVughXj2D2cvg0= -----END CERTIFICATE-----Generated at Thu Oct 9 11:09:37 2025 by rpki-client