$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa File: 1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa (raw, json) Hash identifier: IAktOMPuWLSKijFCvqp3WRGTvWRtqH010AI5iQ5vxoU= Subject key identifier: 0B:81:D6:D9:86:10:9D:BB:95:2F:17:EE:FF:EB:34:9F:2A:1E:5E:F2 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584C93D1A99A02215377F0A98140 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa Signing time: Mon 19 Jan 2026 14:00:38 +0000 ROA not before: Mon 19 Jan 2026 14:00:38 +0000 ROA not after: Sun 19 Apr 2026 13:00:38 +0000 asID: 15164 IP address blocks: 209.71.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:d1:a9:9a:02:21:53:77:f0:a9:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 19 14:00:38 2026 GMT Not After : Apr 19 13:00:38 2026 GMT Subject: CN=dfc88a1b-95e2-4c96-919a-a5ddf857290d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:68:ae:12:ab:f1:eb:87:f1:a9:75:6e:f1: 28:a8:4b:cb:90:f1:30:ac:3d:c7:f3:e0:a4:49:df: d1:8b:41:97:81:85:6e:1e:07:5c:6d:3b:6f:ba:c8: aa:a0:51:83:bb:5f:d5:a6:a5:92:79:98:fd:da:84: 54:ed:62:10:b8:5d:1c:57:60:6c:4a:71:a9:dd:41: b9:f6:0c:f2:07:ab:1d:19:53:e7:18:72:10:33:35: f7:f8:85:7a:5c:56:6c:86:a9:5d:6e:f3:f4:6f:fb: 75:b6:b7:ba:f4:25:5d:c8:af:f7:45:d1:04:b3:0c: 88:98:39:e6:49:9d:63:56:d9:58:21:2d:0e:08:c8: 52:53:42:a4:aa:1f:c1:e9:0a:36:89:a0:5e:83:c4: 58:60:84:e3:15:8f:ea:e4:36:6a:48:b7:35:a0:94: ae:b9:b1:9c:58:08:69:22:1d:38:f9:4a:ba:77:a6: d8:89:db:ab:1e:93:2e:db:31:b5:97:6a:90:e2:6d: b0:5b:43:c5:ee:0a:1d:22:95:ce:c5:c9:17:56:5f: e9:e2:25:62:8d:03:d6:6f:e1:14:0a:c1:7f:b9:2b: c0:d6:44:3a:23:f3:fb:03:d5:96:26:d9:ae:78:77: f7:d4:6f:41:96:c9:2f:6b:25:2d:19:a4:6b:14:28: 38:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:81:D6:D9:86:10:9D:BB:95:2F:17:EE:FF:EB:34:9F:2A:1E:5E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1076a1c6-adb7-36b8-8879-4cdd0621ef94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:21:10:7d:d9:4f:e8:1a:ba:17:08:50:9e:40:ba:3e:15:7f: 58:54:be:09:ee:a0:01:da:e7:79:eb:15:91:23:5a:6d:26:17: e2:96:5c:3d:95:62:44:aa:4f:d6:a1:5d:bd:9e:c9:e2:cc:6f: b5:23:f4:b8:4b:e4:15:db:b0:de:96:e9:a3:e4:fc:65:1d:f0: 57:52:5f:9e:de:11:47:e2:4a:7a:7d:9c:8b:90:f8:59:c7:54: b0:d0:e0:37:fd:81:3d:a7:46:1c:ad:95:14:bd:6c:69:aa:95: ce:47:95:b1:2b:b9:26:72:fc:74:0b:0e:1c:c3:24:53:f9:18: 4b:13:ec:9f:6a:46:92:fd:a7:ae:17:90:2e:11:8b:e9:9c:af: d6:1f:3e:60:1f:09:14:a3:7c:96:64:22:24:de:e7:98:4b:87: 0f:8c:6a:ba:57:de:05:0b:be:b0:75:cc:cf:10:54:43:e8:9b: 6e:61:0f:7c:aa:bb:79:91:dc:12:fe:0f:74:3d:ac:f6:bf:6c: 52:b2:a8:ac:3c:ce:55:1e:49:c1:07:a9:90:e1:7d:17:6d:97: f9:9d:1e:e6:2d:13:1b:b7:5b:13:a9:6f:11:98:c1:77:98:93: 38:ef:03:cd:8d:8e:4f:b1:89:d0:e0:b0:9f:9d:9a:2e:87:e3: b4:75:8f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyT0amaAiFTd/CpgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk ZGZjODhhMWItOTVlMi00Yzk2LTkxOWEtYTVkZGY4NTcyOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnklorhKr8euH8al1bvEoqEvLkPEwrD3H8+Ck Sd/Ri0GXgYVuHgdcbTtvusiqoFGDu1/VpqWSeZj92oRU7WIQuF0cV2BsSnGp3UG5 9gzyB6sdGVPnGHIQMzX3+IV6XFZshqldbvP0b/t1tre69CVdyK/3RdEEswyImDnm SZ1jVtlYIS0OCMhSU0Kkqh/B6Qo2iaBeg8RYYITjFY/q5DZqSLc1oJSuubGcWAhp Ih04+Uq6d6bYidurHpMu2zG1l2qQ4m2wW0PF7godIpXOxckXVl/p4iVijQPWb+EU CsF/uSvA1kQ6I/P7A9WWJtmueHf31G9BlskvayUtGaRrFCg4+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuB1tmGEJ27lS8X7v/rNJ8qHl7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMTA3NmExYzYtYWRiNy0z NmI4LTg4NzktNGNkZDA2MjFlZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABohEH3ZT+gauhcIUJ5Auj4Vf1hUvgnuoAHa53nrFZEjWm0mF+KWXD2V YkSqT9ahXb2eyeLMb7Uj9LhL5BXbsN6W6aPk/GUd8FdSX57eEUfiSnp9nIuQ+FnH VLDQ4Df9gT2nRhytlRS9bGmqlc5HlbEruSZy/HQLDhzDJFP5GEsT7J9qRpL9p64X kC4Ri+mcr9YfPmAfCRSjfJZkIiTe55hLhw+MarpX3gULvrB1zM8QVEPom25hD3yq u3mR3BL+D3Q9rPa/bFKyqKw8zlUeScEHqZDhfRdtl/mdHuYtExu3WxOpbxGYwXeY kzjvA82Njk+xidDgsJ+dmi6H47R1j9k= -----END CERTIFICATE-----Generated at Mon Mar 2 17:13:07 2026 by rpki-client