$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa File: a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa (raw, json) Hash identifier: sW6HIuf1JdzjrQBAZJ9EsZNAn2hLnwLqImNC1DVG/2E= Subject key identifier: 3C:D7:05:92:41:E0:EC:FD:1A:20:21:80:A2:71:4A:DC:3E:60:C7:82 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584AE5C6750014DF339C84280E80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 15164 IP address blocks: 209.71.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:75:00:14:df:33:9c:84:28:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=73fa0dad-8e3d-4a3c-840f-417c964d5fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:94:95:04:41:c9:ba:f6:50:59:13:1e:c9: 81:51:d3:94:20:16:68:af:b5:45:9c:b0:90:ed:bb: 9b:d1:82:3d:6d:42:b5:5c:5e:57:e9:83:f9:1c:06: 9b:f1:09:16:a4:a0:2c:82:e9:fa:fc:9e:e7:ae:bd: 92:5a:e1:b2:c2:95:9d:4b:61:fd:7d:7b:43:e5:0d: b9:d9:58:6c:5d:ec:7c:9d:bc:53:b0:83:bc:13:98: 20:0e:ad:9d:91:18:18:fd:3c:30:7c:68:89:d0:35: 1d:58:44:ae:65:c4:b2:a9:e8:c4:e8:bb:63:ab:13: 71:fa:17:90:1b:75:70:5a:c4:71:68:b5:55:7a:ba: 63:e4:57:82:ff:0d:7b:f8:ee:d2:af:df:34:e2:b9: 05:42:9a:ab:c1:52:ef:33:bb:5a:31:6d:80:d6:28: 86:f1:d0:60:cf:c4:5e:1c:a8:9d:a9:41:3c:c8:0a: 88:32:32:06:da:06:0f:01:00:10:6f:e7:d5:c5:d3: a8:9a:ac:a4:a5:53:94:f1:cf:d2:dd:47:7e:a7:2d: 24:77:35:1d:5b:52:54:1a:b3:1b:28:2e:3c:37:c4: d2:b9:83:2d:a7:7d:1e:e6:07:50:5b:57:f7:de:47: 8a:54:39:4b:d3:f4:1b:03:e7:e2:06:c9:39:f9:4a: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:05:92:41:E0:EC:FD:1A:20:21:80:A2:71:4A:DC:3E:60:C7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:87:af:c5:f8:06:2c:f2:ae:f9:6b:b3:6f:cb:69:0b:bb:44: ec:a1:12:7f:99:04:1b:37:d6:8a:72:2d:c3:b5:db:e0:10:a6: 29:c5:e0:43:19:8d:21:df:1a:55:33:79:75:68:8d:e0:c1:71: 30:41:4c:be:57:4f:2f:73:2d:54:b9:15:e3:f1:96:24:68:54: 60:a4:9a:da:b8:76:23:68:d4:55:1e:46:a2:47:b5:78:d9:04: e1:38:89:93:00:3f:d8:67:ed:c3:47:9d:5c:87:29:45:37:27: 02:16:37:72:7f:0f:b2:8a:b7:fb:a6:02:78:e1:27:1c:e3:4a: fe:ec:15:36:10:fd:73:12:cd:69:bf:1c:37:e3:b8:90:8a:e8: 19:68:f7:81:6f:9e:13:88:87:ff:f2:c6:bd:79:90:7d:bb:ef: 80:e2:44:05:36:86:09:d5:5f:03:3b:a1:1a:de:f4:4c:09:d8: 4e:f2:df:b6:30:c2:61:e3:4c:6f:50:c9:37:b7:d1:8d:6a:0f: d7:9f:df:4f:39:ce:14:b8:10:aa:80:58:49:0d:66:ec:1d:c3: f0:8b:51:4f:14:77:ab:c6:ba:52:af:82:7a:33:de:00:78:1d: 52:6b:39:96:f0:1f:24:a4:76:c0:a9:b5:fb:20:e4:39:f5:ba: af:3a:ff:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnUAFN8znIQoDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk NzNmYTBkYWQtOGUzZC00YTNjLTg0MGYtNDE3Yzk2NGQ1ZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3qUlQRBybr2UFkTHsmBUdOUIBZor7VFnLCQ 7bub0YI9bUK1XF5X6YP5HAab8QkWpKAsgun6/J7nrr2SWuGywpWdS2H9fXtD5Q25 2VhsXex8nbxTsIO8E5ggDq2dkRgY/TwwfGiJ0DUdWESuZcSyqejE6LtjqxNx+heQ G3VwWsRxaLVVerpj5FeC/w17+O7Sr9804rkFQpqrwVLvM7taMW2A1iiG8dBgz8Re HKidqUE8yAqIMjIG2gYPAQAQb+fVxdOomqykpVOU8c/S3Ud+py0kdzUdW1JUGrMb KC48N8TSuYMtp30e5gdQW1f33keKVDlL0/QbA+fiBsk5+Uq8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzXBZJB4Oz9GiAhgKJxStw+YMeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTcwNGMzYTAtNWQ2My0z MGJkLWFlYjktYTgyZmE1MTc4YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKHr8X4Bizyrvlrs2/LaQu7ROyhEn+ZBBs31opyLcO12+AQpinF4EMZ jSHfGlUzeXVojeDBcTBBTL5XTy9zLVS5FePxliRoVGCkmtq4diNo1FUeRqJHtXjZ BOE4iZMAP9hn7cNHnVyHKUU3JwIWN3J/D7KKt/umAnjhJxzjSv7sFTYQ/XMSzWm/ HDfjuJCK6Blo94FvnhOIh//yxr15kH2774DiRAU2hgnVXwM7oRre9EwJ2E7y37Yw wmHjTG9QyTe30Y1qD9ef3085zhS4EKqAWEkNZuwdw/CLUU8Ud6vGulKvgnoz3gB4 HVJrOZbwHySkdsCptfsg5Dn1uq86/+I= -----END CERTIFICATE-----Generated at Thu Aug 21 07:21:33 2025 by rpki-client