$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa File: 1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa (raw, json) Hash identifier: Rfev79wXpDLTUG33damIP3uMO1zBLDdRn4XSbWViYnE= Subject key identifier: 73:2D:9A:6C:54:CD:D4:14:15:20:C3:25:55:81:DE:5A:67:7F:30:EB Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584AD23BC3764B32E50BAFD9C480 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 15164 IP address blocks: 209.71.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c3:76:4b:32:e5:0b:af:d9:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d53e3bef-0eec-4215-a0ea-7cc79fa10236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:0d:e4:c0:d6:65:ae:b8:67:36:b7:00:c7: 8a:68:15:f7:12:ba:b3:fb:41:3c:33:54:37:25:fb: 87:39:95:a6:a2:f5:95:79:51:e1:0d:1d:8d:1e:ac: 6e:94:bd:d6:47:97:9a:e1:64:f5:e3:04:92:b1:d8: 9b:2e:ba:22:1a:3b:39:d0:d7:8c:f7:6a:bc:59:31: f4:3d:97:8f:cc:7e:f2:1d:46:84:3c:2f:8d:8b:19: c3:7e:5f:86:3b:2c:4d:01:61:90:80:1c:e9:08:c4: 54:1f:ec:9d:87:4f:02:b9:b5:1b:e2:78:ee:91:16: 9b:7c:a4:2e:c5:6b:f1:70:db:a4:0e:6c:c9:86:2d: d9:a0:56:89:09:f9:5a:4a:e9:5e:b9:7d:d5:69:55: 5a:94:eb:a9:77:74:53:9d:12:6b:f0:bf:8a:44:66: c4:82:ae:47:96:f3:3e:7c:d2:56:2c:f4:dc:0e:e1: 01:b6:36:82:dc:6c:94:7f:83:bb:ea:65:07:a0:31: 08:16:3b:6a:27:ba:92:bd:59:4b:8f:35:09:4d:db: fe:34:f0:0b:ee:d3:29:43:c0:d1:95:e5:5e:27:aa: 0c:6b:f3:db:67:20:ad:9a:8d:83:7c:11:ae:c6:0e: b7:3d:5d:ba:8d:54:6f:93:54:08:50:18:c3:d5:bf: a7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2D:9A:6C:54:CD:D4:14:15:20:C3:25:55:81:DE:5A:67:7F:30:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:44:12:31:c2:1f:78:52:67:d2:2c:f7:63:88:97:b9:77:4c: 22:b3:cc:f4:f4:ec:45:06:d7:de:96:b0:6b:7d:e6:a3:41:35: 0b:8a:1a:b9:fb:b1:04:3d:0f:e7:6f:f9:79:9f:b2:ab:3a:cf: d5:e4:ff:b2:34:9e:f0:9a:5b:5a:41:92:ab:12:dc:fd:e4:2c: d6:2b:f1:16:29:05:4b:96:97:9c:68:8a:b9:0b:d2:06:2f:8f: 9a:be:19:47:e3:d1:71:62:33:7c:bb:6a:20:9d:a9:ed:e1:83: b0:10:84:7e:20:ce:5a:79:5e:eb:75:c5:1d:66:7e:54:6a:3d: 02:3f:aa:7a:6c:1e:fa:26:ae:13:90:36:f5:21:0a:99:eb:24: 4e:42:f3:6e:14:ba:3e:49:56:4b:07:91:85:50:2d:3c:48:33: 68:11:d3:74:85:f1:b1:0e:9d:ab:9d:9e:c7:75:24:42:d1:83: d6:69:47:ce:e3:9c:ca:73:87:20:01:08:bf:3a:77:e4:c3:46: 9e:f2:0c:0d:4f:f3:42:16:b9:3c:8d:ef:43:1b:6f:6a:a6:34: 43:2b:35:f6:62:20:89:23:d8:6f:27:6c:14:84:61:3b:87:ed: 91:9d:20:23:62:b9:21:4d:36:21:70:d3:a3:0a:3e:cf:3c:c8: 12:d9:cb:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8N2SzLlC6/ZxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDUzZTNiZWYtMGVlYy00MjE1LWEwZWEtN2NjNzlmYTEwMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjIN5MDWZa64Zza3AMeKaBX3Erqz+0E8M1Q3 JfuHOZWmovWVeVHhDR2NHqxulL3WR5ea4WT14wSSsdibLroiGjs50NeM92q8WTH0 PZePzH7yHUaEPC+NixnDfl+GOyxNAWGQgBzpCMRUH+ydh08CubUb4njukRabfKQu xWvxcNukDmzJhi3ZoFaJCflaSuleuX3VaVValOupd3RTnRJr8L+KRGbEgq5HlvM+ fNJWLPTcDuEBtjaC3GyUf4O76mUHoDEIFjtqJ7qSvVlLjzUJTdv+NPAL7tMpQ8DR leVeJ6oMa/PbZyCtmo2DfBGuxg63PV26jVRvk1QIUBjD1b+nWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMtmmxUzdQUFSDDJVWB3lpnfzDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMTA3NmExYzYtYWRiNy0z NmI4LTg4NzktNGNkZDA2MjFlZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1EEjHCH3hSZ9Is92OIl7l3TCKzzPT07EUG196WsGt95qNBNQuKGrn7 sQQ9D+dv+Xmfsqs6z9Xk/7I0nvCaW1pBkqsS3P3kLNYr8RYpBUuWl5xoirkL0gYv j5q+GUfj0XFiM3y7aiCdqe3hg7AQhH4gzlp5Xut1xR1mflRqPQI/qnpsHvomrhOQ NvUhCpnrJE5C824Uuj5JVksHkYVQLTxIM2gR03SF8bEOnaudnsd1JELRg9ZpR87j nMpzhyABCL86d+TDRp7yDA1P80IWuTyN70Mbb2qmNEMrNfZiIIkj2G8nbBSEYTuH 7ZGdICNiuSFNNiFw06MKPs88yBLZy0A= -----END CERTIFICATE-----Generated at Thu Aug 21 07:21:32 2025 by rpki-client