$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa File: ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa (raw, json) Hash identifier: MfnFbdy+7lxD6dOiwCMvYEupKS8d8z8DWfWzl3ynaHU= Subject key identifier: 87:7D:F4:38:A1:F6:20:D2:1D:59:45:A3:57:15:53:A4:44:97:E7:F7 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC7F83A1700C11501CE780 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 173.244.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7f:83:a1:70:0c:11:50:1c:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=d3d4d981-ce01-441f-b169-db07c564f87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:13:ae:89:4e:fb:78:21:40:69:dc:54:9e:a8: 06:05:94:f0:f1:0a:b2:94:eb:3e:52:34:ed:8a:51: 1c:1c:4b:b0:06:c5:3e:28:ca:49:f6:3f:1e:17:b0: bb:dd:d5:eb:12:13:0c:3c:cd:47:46:94:1d:74:58: 03:d9:ad:3d:00:f5:ac:86:ea:c8:01:a9:8d:ac:a7: bb:e6:d3:f7:8c:e3:ff:a8:b1:67:aa:dd:97:7b:d3: a8:33:50:6f:71:5b:81:7a:28:0b:56:e7:fc:64:f2: 15:61:e5:3c:d4:94:45:46:93:b5:9a:a1:1a:6a:53: 76:ea:4c:32:dd:13:be:50:5a:4a:f6:27:32:96:57: 0a:89:b0:d9:19:dd:b2:da:31:91:22:97:83:88:35: 29:f4:07:45:d4:59:7f:cd:12:87:13:f7:f1:fc:42: 43:6d:93:53:44:89:9d:0c:39:e8:9c:79:0a:41:9a: 14:54:f9:e4:44:1b:f3:db:56:3d:76:44:30:81:4d: 9e:dd:99:9d:dc:06:fb:8b:c4:69:d0:79:4d:92:af: cc:05:4b:c3:b3:21:a6:2b:ad:45:54:f6:03:22:e4: 4b:58:f0:08:cd:26:14:d6:50:9c:39:61:c0:60:f5: 79:f4:e0:e3:c7:6a:6b:74:ee:d6:96:22:fb:e6:00: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7D:F4:38:A1:F6:20:D2:1D:59:45:A3:57:15:53:A4:44:97:E7:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ee1b32e0-0ba8-3200-94c2-a135e2c6f445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:81:f5:51:04:f2:c8:d0:0b:0c:26:ce:35:13:e4:1f:b7:69: f2:3f:75:19:f2:62:33:a0:89:f0:06:47:57:50:bb:34:f3:16: 67:b9:ad:c5:1b:f6:88:5a:bd:0e:f9:63:36:de:85:20:84:1e: 69:e0:0e:f0:b7:55:73:f9:be:ed:d6:a5:b9:95:76:bd:e6:d9: a6:12:9c:b2:1b:c7:da:86:03:bb:4f:b3:e0:bb:bd:d6:2d:3d: 71:f8:b5:56:72:95:8a:e0:e6:e0:a3:24:ec:07:86:f4:f4:ec: ed:0c:9a:4c:2d:bb:03:63:4f:1b:3c:c2:e7:72:c0:98:c1:88: 5d:9a:5e:33:a0:44:c8:33:ed:69:bc:67:46:fe:05:3b:a8:a5: 13:de:04:4b:c2:9c:34:74:bb:52:a5:26:94:c5:c7:0c:09:64: 7d:fb:60:6e:00:b9:b1:ed:86:7c:a6:2d:d9:dc:d5:93:87:f3: 52:22:21:58:9c:4e:7f:01:a0:63:f8:e1:45:d9:53:d6:b1:5b: 38:33:23:6f:af:5d:86:5f:59:8c:d2:f9:c7:03:3c:94:6d:1e: e7:7f:a3:94:b8:63:76:a1:7d:72:79:e1:01:35:28:5c:57:57: 67:f4:81:1b:95:68:74:a8:b7:31:cc:38:2f:dd:0b:eb:db:7c: b4:7b:da:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3H+DoXAMEVAc54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDNkNGQ5ODEtY2UwMS00NDFmLWIxNjktZGIwN2M1NjRmODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBOuiU77eCFAadxUnqgGBZTw8QqylOs+UjTt ilEcHEuwBsU+KMpJ9j8eF7C73dXrEhMMPM1HRpQddFgD2a09APWshurIAamNrKe7 5tP3jOP/qLFnqt2Xe9OoM1BvcVuBeigLVuf8ZPIVYeU81JRFRpO1mqEaalN26kwy 3RO+UFpK9icyllcKibDZGd2y2jGRIpeDiDUp9AdF1Fl/zRKHE/fx/EJDbZNTRImd DDnonHkKQZoUVPnkRBvz21Y9dkQwgU2e3Zmd3Ab7i8Rp0HlNkq/MBUvDsyGmK61F VPYDIuRLWPAIzSYU1lCcOWHAYPV59ODjx2prdO7WliL75gCk0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId99Dih9iDSHVlFo1cVU6REl+f3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZWUxYjMyZTAtMGJhOC0z MjAwLTk0YzItYTEzNWUyYzZmNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECB9VEE8sjQCwwmzjUT5B+3afI/dRnyYjOgifAGR1dQuzTzFme5rcUb 9ohavQ75YzbehSCEHmngDvC3VXP5vu3WpbmVdr3m2aYSnLIbx9qGA7tPs+C7vdYt PXH4tVZylYrg5uCjJOwHhvT07O0MmkwtuwNjTxs8wudywJjBiF2aXjOgRMgz7Wm8 Z0b+BTuopRPeBEvCnDR0u1KlJpTFxwwJZH37YG4AubHthnymLdnc1ZOH81IiIVic Tn8BoGP44UXZU9axWzgzI2+vXYZfWYzS+ccDPJRtHud/o5S4Y3ahfXJ54QE1KFxX V2f0gRuVaHSotzHMOC/dC+vbfLR72kQ= -----END CERTIFICATE-----Generated at Thu Oct 9 11:09:37 2025 by rpki-client