$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa File: 1aea4482-4596-3858-b921-9cdd4d27ea47.roa (raw, json) Hash identifier: YZ5QZHx7moEa4+Mc6jj4wPB3iC0nXDM7nDxvuAUKaYM= Subject key identifier: 36:D5:DF:51:9E:E5:18:3A:1D:85:EE:14:D7:B0:2E:57:1C:66:57:EC Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F498BB86D55BE80C9ED627F00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 199.200.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b8:6d:55:be:80:c9:ed:62:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5eb94a9-5def-447c-b5b8-8647706ed0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:21:c9:d0:29:1a:9b:44:09:57:dc:d0:08: d5:e9:1b:8f:b9:1e:e9:61:db:f7:7f:fb:87:25:d3: 6e:5e:77:27:10:ab:5a:a9:97:5e:75:67:43:31:6f: 94:79:a5:77:2e:ce:37:7d:7d:f0:c6:56:95:9d:9e: d4:b3:13:b5:63:d2:0a:64:32:d0:45:c2:d2:33:29: 52:37:9e:5f:5d:a3:83:54:08:36:59:9c:37:65:e1: b4:dc:45:ba:75:84:b4:1a:f9:46:1e:73:45:fe:73: 00:07:d1:c0:7a:53:02:2c:36:9f:c5:ac:28:56:e5: 46:a3:a8:37:cd:27:89:32:ec:cc:ed:f1:00:a3:f6: c9:57:3c:3e:0e:83:fa:b7:d0:65:23:5a:8c:90:e7: a2:9d:ad:95:5f:6c:cc:7d:af:9c:28:d7:be:87:7c: 8e:3a:f5:03:f5:9e:bb:90:6b:01:99:25:f7:f9:74: b7:d1:f8:62:d5:ab:87:b7:1c:b4:50:23:9a:e4:69: c9:06:3b:b7:8a:9d:52:e7:04:1b:24:9e:7b:63:de: 17:5b:8c:75:ad:db:90:36:2f:34:b2:f3:89:57:b4: a5:44:2b:60:f4:20:cc:2b:9a:ea:ab:4d:4a:21:5b: 68:1e:39:2f:0b:3e:23:06:cd:33:73:3d:64:54:fb: 1e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D5:DF:51:9E:E5:18:3A:1D:85:EE:14:D7:B0:2E:57:1C:66:57:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:12:b8:90:8a:a0:53:47:ab:53:7e:4d:04:1b:76:6e:79:a0: 30:ca:1f:2f:4b:ff:c7:fa:6d:a1:fc:72:92:60:44:df:7b:5b: 73:71:eb:96:95:82:a8:17:8a:1c:31:94:50:d8:8a:48:a1:7f: db:03:7d:a2:e7:0a:47:c3:14:29:36:c8:56:e2:36:2d:ba:aa: ca:55:f9:b5:19:69:da:0d:f7:53:69:4c:69:01:4a:3d:7b:a6: cc:02:f4:bd:45:3d:79:02:0e:72:22:53:2f:69:34:6d:35:52: ec:9a:68:af:19:22:ae:60:2d:30:61:6e:dd:b8:0d:b6:20:f7: 44:1b:8a:17:53:5f:e8:57:0e:9b:b7:05:68:69:49:ca:d8:46: bc:bd:d1:c8:da:2e:c2:6d:c8:ca:e5:e7:ba:b6:48:4e:2f:11: d4:cf:6e:84:a7:b2:fd:55:c4:29:2f:8e:6e:88:ac:57:26:62: 8e:ac:2e:2d:f8:90:4e:ee:f6:de:7d:63:b6:0d:5d:84:c9:90: 72:9b:42:9d:20:d8:17:98:70:df:4b:9a:59:02:40:9b:b6:26: ff:c2:b2:87:34:52:fe:1e:d6:d1:7c:04:87:00:9b:4b:0d:8e: d8:94:05:17:e8:60:c9:37:da:cc:ce:a6:4f:a3:fe:ea:34:de: ee:9e:31:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji7htVb6Aye1ifwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzVlYjk0YTktNWRlZi00NDdjLWI1YjgtODY0NzcwNmVkMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEAhydApGptECVfc0AjV6RuPuR7pYdv3f/uH JdNuXncnEKtaqZdedWdDMW+UeaV3Ls43fX3wxlaVnZ7UsxO1Y9IKZDLQRcLSMylS N55fXaODVAg2WZw3ZeG03EW6dYS0GvlGHnNF/nMAB9HAelMCLDafxawoVuVGo6g3 zSeJMuzM7fEAo/bJVzw+DoP6t9BlI1qMkOeina2VX2zMfa+cKNe+h3yOOvUD9Z67 kGsBmSX3+XS30fhi1auHtxy0UCOa5GnJBju3ip1S5wQbJJ57Y94XW4x1rduQNi80 svOJV7SlRCtg9CDMK5rqq01KIVtoHjkvCz4jBs0zcz1kVPseHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbV31Ge5Rg6HYXuFNewLlccZlfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMWFlYTQ0ODItNDU5Ni0z ODU4LWI5MjEtOWNkZDRkMjdlYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUSuJCKoFNHq1N+TQQbdm55oDDKHy9L/8f6baH8cpJgRN97W3Nx65aV gqgXihwxlFDYikihf9sDfaLnCkfDFCk2yFbiNi26qspV+bUZadoN91NpTGkBSj17 pswC9L1FPXkCDnIiUy9pNG01UuyaaK8ZIq5gLTBhbt24DbYg90QbihdTX+hXDpu3 BWhpScrYRry90cjaLsJtyMrl57q2SE4vEdTPboSnsv1VxCkvjm6IrFcmYo6sLi34 kE7u9t59Y7YNXYTJkHKbQp0g2BeYcN9LmlkCQJu2Jv/Csoc0Uv4e1tF8BIcAm0sN jtiUBRfoYMk32szOpk+j/uo03u6eMf0= -----END CERTIFICATE-----Generated at Sat Oct 10 15:10:37 2026 by rpki-client