$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b6ed2d7b-c2a3-3a4a-8f91-6b8e85382e4d.roa File: b6ed2d7b-c2a3-3a4a-8f91-6b8e85382e4d.roa (raw, json) Hash identifier: Rp0f1BjaiLmB8zw096FQ8Pzt+yHDe+gWdupi3kQClyY= Subject key identifier: B4:48:63:0C:C4:E8:E3:DA:FE:38:7E:4C:09:15:47:42:2A:1D:90:B8 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584AFAB681762D4A3325D05C5300 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b6ed2d7b-c2a3-3a4a-8f91-6b8e85382e4d.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 15164 IP address blocks: 209.71.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:81:76:2d:4a:33:25:d0:5c:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=13224514-5a78-4b9e-a49f-666a17b101f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4f:6c:4e:63:a4:fc:ff:66:ca:62:20:c3:f4: b0:f0:c3:ad:9c:a3:61:96:c1:2f:34:e7:eb:5c:b2: 9e:aa:d8:09:06:61:6e:33:75:8e:6e:0d:3a:31:d9: 8b:76:89:42:99:9b:80:c0:ad:3a:69:b6:4e:49:06: 5d:be:5d:62:34:98:48:13:5c:a2:a1:e5:35:63:36: 38:34:21:f0:5d:d1:07:ee:63:91:3c:aa:94:04:8d: 44:11:4e:35:ef:ae:d0:4b:02:4a:6e:09:31:4b:73: b5:f1:55:1c:95:f9:97:55:2d:bb:84:08:c5:5d:5c: 03:1e:37:28:3d:52:ec:ef:5b:d6:48:d0:12:d6:36: f8:40:0c:ec:c1:4e:c1:30:4d:63:b1:a4:3b:24:a4: b5:38:89:df:11:80:2d:89:5c:b2:33:79:79:32:25: 8d:99:d5:a3:b8:f2:bc:bb:df:f9:05:2b:14:39:2f: 13:bd:7b:37:fe:c2:d1:6e:a1:28:0d:d3:9a:63:ab: 10:ef:0f:50:a8:0a:f1:f6:b4:c5:42:e5:58:42:02: 10:d1:da:94:4b:cf:5b:8f:e7:56:96:9a:e6:c0:2b: 3e:85:5b:b3:37:7c:90:ac:b0:e2:7a:96:79:47:4f: a3:f3:c8:56:a4:0e:bc:43:d3:53:a6:e8:45:1c:5d: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:63:0C:C4:E8:E3:DA:FE:38:7E:4C:09:15:47:42:2A:1D:90:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b6ed2d7b-c2a3-3a4a-8f91-6b8e85382e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:10:3c:15:49:5f:31:fe:49:39:80:f3:70:33:e1:ff:f9:32: 3c:d1:41:4c:4d:b8:e5:17:de:3c:d5:52:f8:4c:b4:53:2f:96: 44:36:7c:08:17:bd:c9:c8:b3:37:99:78:96:8d:58:4f:56:89: 0a:82:3f:fe:7a:ba:d5:81:1c:30:03:b1:a6:23:f0:4d:3b:23: 76:63:21:47:82:e6:10:ad:29:4d:6a:ab:5b:e3:c5:fd:fc:03: fd:68:b1:19:7f:0c:1c:a9:ee:61:7f:60:6e:1a:31:af:9e:96: ad:33:94:e3:1d:6d:f7:4e:22:ac:bb:22:e9:e9:1c:9e:dd:e5: e3:4a:8e:6c:a0:ca:15:59:51:ab:9f:a5:49:7f:e7:10:f8:67: 24:91:73:d6:f0:42:1e:7d:03:43:8d:69:a6:0b:8c:83:3e:8b: 53:be:7a:c3:34:d9:32:59:31:46:41:24:a9:b7:fe:46:ee:ec: bd:12:54:dc:cc:9b:87:e2:36:0b:68:56:2e:51:44:f0:68:33: 1b:4e:08:ef:41:b4:2a:32:99:82:61:ab:4e:05:c3:a9:f9:37: 92:a8:1e:7c:ce:e9:e7:93:e0:1c:a1:ff:f1:83:b8:fd:8a:e4: e8:38:bd:da:48:60:b4:39:a9:1b:c6:9a:2e:9f:95:bf:14:e1: cc:a7:ef:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toF2LUozJdBcUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk MTMyMjQ1MTQtNWE3OC00YjllLWE0OWYtNjY2YTE3YjEwMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU9sTmOk/P9mymIgw/Sw8MOtnKNhlsEvNOfr XLKeqtgJBmFuM3WObg06MdmLdolCmZuAwK06abZOSQZdvl1iNJhIE1yioeU1YzY4 NCHwXdEH7mORPKqUBI1EEU41767QSwJKbgkxS3O18VUclfmXVS27hAjFXVwDHjco PVLs71vWSNAS1jb4QAzswU7BME1jsaQ7JKS1OInfEYAtiVyyM3l5MiWNmdWjuPK8 u9/5BSsUOS8TvXs3/sLRbqEoDdOaY6sQ7w9QqArx9rTFQuVYQgIQ0dqUS89bj+dW lprmwCs+hVuzN3yQrLDiepZ5R0+j88hWpA68Q9NTpuhFHF3ihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRIYwzE6OPa/jh+TAkVR0IqHZC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYjZlZDJkN2ItYzJhMy0z YTRhLThmOTEtNmI4ZTg1MzgyZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIQPBVJXzH+STmA83Az4f/5MjzRQUxNuOUX3jzVUvhMtFMvlkQ2fAgX vcnIszeZeJaNWE9WiQqCP/56utWBHDADsaYj8E07I3ZjIUeC5hCtKU1qq1vjxf38 A/1osRl/DByp7mF/YG4aMa+elq0zlOMdbfdOIqy7IunpHJ7d5eNKjmygyhVZUauf pUl/5xD4ZySRc9bwQh59A0ONaaYLjIM+i1O+esM02TJZMUZBJKm3/kbu7L0SVNzM m4fiNgtoVi5RRPBoMxtOCO9BtCoymYJhq04Fw6n5N5KoHnzO6eeT4Byh//GDuP2K 5Og4vdpIYLQ5qRvGmi6flb8U4cyn7zg= -----END CERTIFICATE-----Generated at Thu Oct 9 11:09:07 2025 by rpki-client