$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa File: b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa (raw, json) Hash identifier: DlRajjg6gRvKk3IL1gOwM+nRXstvsCoQ6G2MrDmM/HY= Subject key identifier: 6A:E5:F6:4D:DB:E5:2C:2D:78:AE:4C:66:71:EE:DD:47:77:1D:95:17 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584AFAB6818C667DCC707D7AEE80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 15164 IP address blocks: 209.71.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:81:8c:66:7d:cc:70:7d:7a:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=ee52f466-1548-47e1-af2e-c1e0002e2543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:04:a2:b4:4f:37:d3:89:4e:39:ec:10:46:e3: 19:d5:28:0e:5f:50:4f:a4:4e:3f:5f:4d:16:6b:8f: 29:33:bc:56:6e:4e:22:0e:53:56:ea:b0:40:cf:9b: c6:9c:20:a5:af:bc:9a:c9:fa:7c:e7:1c:75:17:62: 81:3d:45:8c:2d:4c:0e:7c:e4:5d:0c:76:ad:dd:23: 80:63:23:c5:0a:40:e0:af:3e:e2:6a:96:f6:2c:18: d7:49:b7:fe:00:ee:72:db:a8:9a:ab:2e:c6:a5:22: 92:84:70:43:43:a0:fe:aa:65:a3:77:bd:53:0c:eb: 4a:21:9a:fd:b5:c1:be:27:79:94:8e:e9:03:ad:85: c1:4c:c8:f1:73:d9:cd:0a:65:50:ec:d9:65:0f:52: 35:8b:59:21:7c:d3:c4:c6:4d:c1:dc:80:15:3b:38: 17:d6:5c:08:6a:39:2b:22:c4:f2:4f:6a:32:36:c6: bb:b5:25:b0:3e:c7:a0:5a:4f:06:4a:cf:e4:9c:11: c3:5b:81:ae:25:66:0e:0a:e2:bf:15:94:ee:cc:7a: 2e:54:86:88:ce:1f:b7:cc:9a:0c:5c:2c:0a:a6:11: 2b:eb:38:11:6f:02:ba:01:a7:a9:19:74:1e:a3:a1: a7:7a:2c:e7:4b:a8:9f:61:66:74:a7:72:a7:49:99: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E5:F6:4D:DB:E5:2C:2D:78:AE:4C:66:71:EE:DD:47:77:1D:95:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:69:63:b1:b2:bc:11:f3:5b:ea:aa:91:eb:89:04:98:53:3d: 6a:36:51:4b:74:dc:a0:be:c5:aa:5b:d8:2a:70:e1:ba:3f:58: ac:57:92:d4:d0:d4:d7:69:fc:00:45:87:06:e8:af:2f:cd:cd: 7c:63:d6:21:03:05:11:87:ad:06:7d:b6:94:01:25:fb:db:30: da:5c:88:34:b6:2c:ae:6a:20:06:d7:b0:41:52:da:0f:89:91: 88:40:c6:17:71:70:ec:18:9e:c1:30:49:3f:8e:c5:cf:c2:8b: dc:bd:e0:b0:ec:c9:30:2d:ef:04:e0:49:0a:54:08:0c:a0:c8: 33:f7:06:84:04:df:4c:f2:9f:57:4c:86:4a:f7:b6:25:60:36: 91:c0:3e:cd:45:f1:ff:d8:41:62:f0:e6:aa:0d:0c:8d:ef:2d: 5d:3f:4c:15:8a:25:ed:51:53:c7:14:55:98:17:71:90:d6:46: fd:b7:cf:fc:e1:2a:a6:b6:6f:98:32:53:67:67:38:b2:b4:aa: b5:73:d8:63:dc:6b:b7:4d:30:61:42:90:27:53:cc:e0:18:38: 4c:c0:1b:f4:b0:85:5f:f1:54:94:cc:28:02:8f:68:6c:b2:bb: e6:8d:b4:4b:1d:37:a0:fd:87:71:32:39:c6:20:a5:97:4f:09: 85:e1:8f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toGMZn3McH167oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk ZWU1MmY0NjYtMTU0OC00N2UxLWFmMmUtYzFlMDAwMmUyNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QSitE8304lOOewQRuMZ1SgOX1BPpE4/X00W a48pM7xWbk4iDlNW6rBAz5vGnCClr7yayfp85xx1F2KBPUWMLUwOfORdDHat3SOA YyPFCkDgrz7iapb2LBjXSbf+AO5y26iaqy7GpSKShHBDQ6D+qmWjd71TDOtKIZr9 tcG+J3mUjukDrYXBTMjxc9nNCmVQ7NllD1I1i1khfNPExk3B3IAVOzgX1lwIajkr IsTyT2oyNsa7tSWwPsegWk8GSs/knBHDW4GuJWYOCuK/FZTuzHouVIaIzh+3zJoM XCwKphEr6zgRbwK6AaepGXQeo6GneiznS6ifYWZ0p3KnSZnWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrl9k3b5SwteK5MZnHu3Ud3HZUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYjJkOTJjYTQtNTI0Yi0z ZmFmLTkwZTctZGNkNzAzMDhmODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBpY7GyvBHzW+qqkeuJBJhTPWo2UUt03KC+xapb2Cpw4bo/WKxXktTQ 1Ndp/ABFhwbory/NzXxj1iEDBRGHrQZ9tpQBJfvbMNpciDS2LK5qIAbXsEFS2g+J kYhAxhdxcOwYnsEwST+Oxc/Ci9y94LDsyTAt7wTgSQpUCAygyDP3BoQE30zyn1dM hkr3tiVgNpHAPs1F8f/YQWLw5qoNDI3vLV0/TBWKJe1RU8cUVZgXcZDWRv23z/zh Kqa2b5gyU2dnOLK0qrVz2GPca7dNMGFCkCdTzOAYOEzAG/SwhV/xVJTMKAKPaGyy u+aNtEsdN6D9h3EyOcYgpZdPCYXhj8Y= -----END CERTIFICATE-----Generated at Thu Oct 9 11:13:55 2025 by rpki-client