$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa File: decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa (raw, json) Hash identifier: 4A/Esj+VKdK/ficsNxLVTaNZAoFyWB58UK4CoQv31cQ= Subject key identifier: 02:13:A8:F0:DC:EB:D2:A2:43:DB:DC:39:33:1F:4C:E6:D1:97:1F:7E Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B41E724DEACB84F61EE71BB80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 74.51.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:24:de:ac:b8:4f:61:ee:71:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=d1147e4f-71a6-41e8-bd85-5cde6fc6705d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:30:17:15:0b:98:75:4b:45:d9:b7:3e:f3:44: 06:32:59:2a:f1:a7:38:e6:9c:21:58:aa:fe:50:8b: 57:4c:ff:30:71:13:5b:5d:ad:1d:44:23:f0:44:69: a4:08:fb:b0:d5:b6:23:3c:d8:f8:13:60:9e:e9:f6: 19:50:d4:1c:fc:f3:63:46:b7:43:6c:2e:40:58:cf: 0e:ec:c0:4d:dc:97:57:2b:92:94:4c:81:87:43:9b: 12:a0:49:fb:66:2b:4e:ae:27:9b:51:b8:16:6a:38: 85:a9:59:08:8d:e5:8f:71:71:14:0b:18:99:50:33: 78:93:ba:93:9a:63:cb:0f:46:79:e3:f9:b8:9f:b1: 60:9d:2a:0d:3c:21:81:fc:7e:87:f3:33:0f:71:e0: 74:12:08:33:ae:d4:6d:de:f9:bf:c7:01:57:95:1b: ce:09:9e:b6:56:d4:04:4c:35:7f:10:c0:36:f5:cf: 96:c1:45:5c:f6:2d:49:bd:c5:c6:e3:9a:8b:a6:59: 20:aa:c8:d9:c3:5f:e6:dc:5a:a3:b6:e0:b7:8f:b3: 67:6d:21:1c:7b:2a:52:a3:71:36:43:c5:42:6f:fa: 44:ab:26:ad:5f:2d:cf:6d:e4:8d:8f:d4:43:29:34: ed:9b:20:a1:27:59:35:be:13:94:fc:e2:94:fb:86: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:13:A8:F0:DC:EB:D2:A2:43:DB:DC:39:33:1F:4C:E6:D1:97:1F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/decc79d0-7a73-3fc2-a68f-cb88551c6c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 74.51.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:2a:5d:f0:39:54:28:15:20:68:23:56:6b:46:cc:e4:96:b2: 3b:d0:88:65:b9:63:2e:38:a7:ad:e2:5d:ca:8c:27:73:3f:63: 9b:49:49:d1:b2:d0:45:22:33:c0:8d:1b:24:1c:67:66:8b:76: eb:8e:62:f8:cd:e1:b5:0a:dc:6b:12:1c:5b:66:77:85:ad:4a: 53:46:31:01:24:b9:ad:16:c3:08:d1:cf:f7:c4:b8:a4:5d:70: 20:a1:f7:64:09:2f:69:16:6f:f5:bd:ff:9e:4f:43:fc:4f:85: d6:6d:b4:bc:0f:d0:a6:ee:ab:49:d2:9b:dc:84:a8:84:de:93: 37:30:a5:23:b0:71:25:16:05:03:f9:ef:58:72:db:ab:49:8e: b9:0b:f6:1d:fa:17:2d:e1:76:01:9f:ce:50:1f:8e:5f:49:f8: 92:df:9e:ca:d6:17:87:5f:b6:80:cd:33:36:32:03:7e:ac:ee: 0c:0c:46:ad:a0:ba:b4:d7:16:e7:bb:82:89:d9:97:40:89:f0: 70:d6:05:a3:60:23:48:da:37:2e:5d:93:a1:7c:25:7e:57:c0: e7:79:c4:af:cc:5e:bc:e0:12:7b:51:b5:ed:23:f6:c3:88:82: 3e:be:c1:1a:e2:e7:6b:66:fd:f3:54:8c:be:5a:82:eb:f9:67: 0d:22:45:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yTerLhPYe5xu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDExNDdlNGYtNzFhNi00MWU4LWJkODUtNWNkZTZmYzY3MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DAXFQuYdUtF2bc+80QGMlkq8ac45pwhWKr+ UItXTP8wcRNbXa0dRCPwRGmkCPuw1bYjPNj4E2Ce6fYZUNQc/PNjRrdDbC5AWM8O 7MBN3JdXK5KUTIGHQ5sSoEn7ZitOriebUbgWajiFqVkIjeWPcXEUCxiZUDN4k7qT mmPLD0Z54/m4n7FgnSoNPCGB/H6H8zMPceB0EggzrtRt3vm/xwFXlRvOCZ62VtQE TDV/EMA29c+WwUVc9i1JvcXG45qLplkgqsjZw1/m3FqjtuC3j7NnbSEceypSo3E2 Q8VCb/pEqyatXy3PbeSNj9RDKTTtmyChJ1k1vhOU/OKU+4aNwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAITqPDc69KiQ9vcOTMfTObRlx9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGVjYzc5ZDAtN2E3My0z ZmMyLWE2OGYtY2I4ODU1MWM2YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsqXfA5VCgVIGgjVmtGzOSWsjvQiGW5Yy44p63iXcqMJ3M/Y5tJSdGy 0EUiM8CNGyQcZ2aLduuOYvjN4bUK3GsSHFtmd4WtSlNGMQEkua0WwwjRz/fEuKRd cCCh92QJL2kWb/W9/55PQ/xPhdZttLwP0Kbuq0nSm9yEqITekzcwpSOwcSUWBQP5 71hy26tJjrkL9h36Fy3hdgGfzlAfjl9J+JLfnsrWF4dftoDNMzYyA36s7gwMRq2g urTXFue7gonZl0CJ8HDWBaNgI0jaNy5dk6F8JX5XwOd5xK/MXrzgEntRte0j9sOI gj6+wRri52tm/fNUjL5aguv5Zw0iRY8= -----END CERTIFICATE-----Generated at Thu Oct 9 11:13:55 2025 by rpki-client