$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa File: 1aea4482-4596-3858-b921-9cdd4d27ea47.roa (raw, json) Hash identifier: 9PdY5QeL7fdATOZnKyQP66xckoa2T5ZUeqVROvT10FY= Subject key identifier: 31:1F:AF:70:BF:C8:5B:99:7A:8B:43:2A:87:CC:3F:0A:DA:6B:9B:30 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584EA7950E0D1C5D9BE115551F00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15164 IP address blocks: 199.200.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:0e:0d:1c:5d:9b:e1:15:55:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=70a0796f-4cf3-47eb-aae5-3d42f9c2eb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:d5:ae:bb:f7:98:be:5f:27:a6:3a:18:e0: 70:e0:3f:28:e6:d9:ba:81:1c:7d:49:66:e7:89:d8: ba:f6:82:17:bb:a3:3d:20:15:50:8a:91:bb:0e:eb: 08:fb:08:ae:c5:f5:ca:42:55:73:30:7e:bf:3f:7e: 1f:0c:50:e0:27:b8:a0:49:f7:c1:73:aa:49:31:76: 8f:b3:3d:a9:7a:14:d5:6f:ad:56:61:3f:b6:34:3f: d1:73:53:38:da:d2:5f:cd:8a:a4:af:30:cd:a1:bd: b2:9e:78:16:47:ae:45:2b:57:e8:92:8c:e8:16:d3: f5:b5:5c:b7:fc:f9:3b:e3:81:46:24:a1:9f:45:a1: 63:c1:61:b2:aa:c9:3f:ff:77:14:eb:c0:6b:76:34: ab:40:b5:95:64:c0:eb:1f:8f:0b:fa:f9:c2:c1:32: 53:ab:16:95:50:b0:e9:91:9d:90:bd:35:8e:df:95: 8a:69:34:d3:ff:87:0e:59:20:f7:0a:34:d3:6e:ec: ad:c5:41:a1:9e:fb:bd:ef:98:26:e2:ee:69:10:d2: d1:3d:43:4e:f7:bf:38:62:b6:c8:f4:d4:94:85:df: ee:46:0d:59:f0:b8:c4:6b:c4:88:44:1b:70:4c:7a: 7b:a8:ce:1a:12:45:c4:e3:83:a8:80:b7:86:06:5b: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:AF:70:BF:C8:5B:99:7A:8B:43:2A:87:CC:3F:0A:DA:6B:9B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:93:7f:7e:ef:54:70:67:81:49:ad:ed:b3:2a:ba:cb:3e:cd: d0:b9:ea:d2:84:e0:ae:bf:f9:1b:28:fc:9f:33:93:a5:5a:3a: 2a:74:b5:ad:d0:ae:4d:f8:4a:f3:74:70:a6:ec:d3:0f:d4:e2: 7d:d6:66:a4:b7:03:73:7a:34:a9:04:23:d7:1b:e3:80:83:c8: ac:d5:df:c6:7a:61:65:63:dd:bf:03:53:34:a6:19:cc:33:2b: 8f:6b:a5:05:7c:db:a1:a7:8d:3b:50:ce:5c:60:95:1f:c9:bc: 09:ba:ae:4d:d1:c2:b6:62:39:21:08:d7:53:3d:15:6e:9f:24: 69:5c:b8:49:10:4d:55:2e:7a:37:80:a5:8b:b1:9a:33:7d:34: ae:29:01:82:ce:c7:cc:42:ef:2b:99:09:fc:3d:76:f2:4d:81: e1:dd:bb:05:c8:8a:5b:66:3b:ec:f0:80:c8:5b:a9:c1:91:70: 4d:e8:bd:94:63:3c:4b:b7:60:1c:a7:40:25:f3:0f:ef:df:03: 19:2e:cc:b5:45:b0:f9:f4:41:0a:4f:7e:9e:e0:74:f2:cc:b4: d6:4c:b5:09:26:0d:5c:5e:dc:7c:54:a2:7d:ae:c8:f6:c8:5c: 09:50:7f:45:51:d5:1b:5f:7f:93:da:69:cc:eb:44:0f:b6:71: be:fb:0a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlQ4NHF2b4RVVHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzBhMDc5NmYtNGNmMy00N2ViLWFhZTUtM2Q0MmY5YzJlYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnTVrrv3mL5fJ6Y6GOBw4D8o5tm6gRx9SWbn idi69oIXu6M9IBVQipG7DusI+wiuxfXKQlVzMH6/P34fDFDgJ7igSffBc6pJMXaP sz2pehTVb61WYT+2ND/Rc1M42tJfzYqkrzDNob2ynngWR65FK1fokozoFtP1tVy3 /Pk744FGJKGfRaFjwWGyqsk//3cU68BrdjSrQLWVZMDrH48L+vnCwTJTqxaVULDp kZ2QvTWO35WKaTTT/4cOWSD3CjTTbuytxUGhnvu975gm4u5pENLRPUNO9784YrbI 9NSUhd/uRg1Z8LjEa8SIRBtwTHp7qM4aEkXE44OogLeGBltSBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEfr3C/yFuZeotDKofMPwraa5swMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMWFlYTQ0ODItNDU5Ni0z ODU4LWI5MjEtOWNkZDRkMjdlYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOTf37vVHBngUmt7bMquss+zdC56tKE4K6/+Rso/J8zk6VaOip0ta3Q rk34SvN0cKbs0w/U4n3WZqS3A3N6NKkEI9cb44CDyKzV38Z6YWVj3b8DUzSmGcwz K49rpQV826GnjTtQzlxglR/JvAm6rk3RwrZiOSEI11M9FW6fJGlcuEkQTVUuejeA pYuxmjN9NK4pAYLOx8xC7yuZCfw9dvJNgeHduwXIiltmO+zwgMhbqcGRcE3ovZRj PEu3YBynQCXzD+/fAxkuzLVFsPn0QQpPfp7gdPLMtNZMtQkmDVxe3HxUon2uyPbI XAlQf0VR1Rtff5PaaczrRA+2cb77CiY= -----END CERTIFICATE-----Generated at Wed Jul 29 08:38:19 2026 by rpki-client