$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa File: 207c1b2b-d1db-300f-bc1a-372f077d979a.roa (raw, json) Hash identifier: f9CuxXAWnrRiGdtSj2pjvkTw7r2diBoPoxfH3boy9Yo= Subject key identifier: 58:05:3D:36:2C:23:32:73:9C:65:E3:F7:2B:6C:4F:B2:93:94:4C:8C Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F4974BCD03BE4DD668F725A00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 199.200.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:bc:d0:3b:e4:dd:66:8f:72:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=566f0fd6-46d4-448d-92eb-20b3342bff41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:fd:a3:fc:4d:a1:2c:a9:a3:89:8a:e9:fe: 94:a8:aa:8a:23:8e:ce:8f:2c:31:55:14:cc:9a:fd: 7d:0d:2e:2c:01:5b:7a:04:40:4f:43:46:54:b6:cd: 86:b5:01:98:4c:aa:27:04:04:08:e6:ee:07:5b:56: 4d:18:dc:49:f0:c1:6c:32:a6:ed:36:60:a2:72:37: 9a:64:06:2a:88:fa:95:05:4c:81:33:f8:9f:cb:bb: 14:8d:ef:bf:1b:10:a8:cc:6b:55:e5:59:d2:71:95: ba:56:2a:58:de:5f:ab:96:d2:3a:b0:3f:44:78:0e: 8f:b5:c0:f2:50:cc:ff:e9:b3:7a:e9:42:d6:cf:d1: bc:a8:c6:c2:6a:c3:79:7c:61:a3:28:3b:09:7f:d9: 6f:51:b7:14:f3:46:0a:4b:d8:c7:bf:a9:8e:e1:65: 05:cd:19:ef:17:e9:86:84:ce:62:80:0a:09:26:ef: 5a:b7:97:5a:5f:bc:47:d4:93:c4:12:e6:13:15:50: 64:3e:70:12:a3:12:19:46:50:12:1d:02:52:35:53: 00:9a:5c:5f:5a:42:34:e4:17:8c:6e:fd:a8:5f:4e: 56:84:4a:71:b7:9d:c5:2e:7a:a7:1b:ed:b5:fe:26: af:5e:55:db:ab:7a:e4:10:df:79:62:e4:10:a2:f9: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:05:3D:36:2C:23:32:73:9C:65:E3:F7:2B:6C:4F:B2:93:94:4C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/207c1b2b-d1db-300f-bc1a-372f077d979a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e9:f8:29:0a:2e:4f:45:91:5a:eb:5b:16:8a:23:71:c4:03: 40:78:5e:a6:d8:4f:a5:57:74:d4:e9:93:db:97:53:83:6f:aa: 28:70:3f:a8:fc:c1:73:23:48:fc:a1:af:57:46:14:25:7b:85: 41:f6:79:19:6d:45:f4:cf:ff:a4:bf:c3:9d:1c:50:82:fe:40: 80:24:6e:74:57:61:4d:98:75:4b:6e:74:02:11:a4:af:a2:65: 05:2e:f0:ad:3d:26:90:25:e9:f4:44:49:e8:4b:a5:92:ec:e1: 03:c4:9f:ff:56:9d:15:64:15:85:90:76:c7:93:40:90:ba:b6: e2:bd:e6:c8:5f:d7:de:07:1d:16:65:21:30:fd:2f:ad:33:c6: ef:67:52:d0:be:26:02:50:6e:f6:f2:aa:8d:f5:83:be:59:d9: 31:b6:b1:5c:28:39:6e:74:9e:53:01:f6:7d:98:2a:63:a4:ab: 85:db:78:64:54:19:55:e1:3c:bf:8e:a8:a5:8c:67:e2:34:a3: 9a:d6:77:6d:1f:e3:84:02:c9:fa:d1:5a:75:6e:40:3b:0a:c1: 6c:de:8a:be:ae:2b:af:bc:ba:3f:75:67:00:48:85:b5:70:09: b9:14:00:f1:1f:37:fc:89:3a:26:a8:e3:21:84:67:ce:07:de: 0b:6d:e8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLzQO+TdZo9yWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTY2ZjBmZDYtNDZkNC00NDhkLTkyZWItMjBiMzM0MmJmZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt79o/xNoSypo4mK6f6UqKqKI47OjywxVRTM mv19DS4sAVt6BEBPQ0ZUts2GtQGYTKonBAQI5u4HW1ZNGNxJ8MFsMqbtNmCicjea ZAYqiPqVBUyBM/ify7sUje+/GxCozGtV5VnScZW6VipY3l+rltI6sD9EeA6PtcDy UMz/6bN66ULWz9G8qMbCasN5fGGjKDsJf9lvUbcU80YKS9jHv6mO4WUFzRnvF+mG hM5igAoJJu9at5daX7xH1JPEEuYTFVBkPnASoxIZRlASHQJSNVMAmlxfWkI05BeM bv2oX05WhEpxt53FLnqnG+21/iavXlXbq3rkEN95YuQQovlswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgFPTYsIzJznGXj9ytsT7KTlEyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjA3YzFiMmItZDFkYi0z MDBmLWJjMWEtMzcyZjA3N2Q5NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8haMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHp+CkKLk9FkVrrWxaKI3HEA0B4XqbYT6VXdNTpk9uXU4NvqihwP6j8 wXMjSPyhr1dGFCV7hUH2eRltRfTP/6S/w50cUIL+QIAkbnRXYU2YdUtudAIRpK+i ZQUu8K09JpAl6fRESehLpZLs4QPEn/9WnRVkFYWQdseTQJC6tuK95shf194HHRZl ITD9L60zxu9nUtC+JgJQbvbyqo31g75Z2TG2sVwoOW50nlMB9n2YKmOkq4XbeGRU GVXhPL+OqKWMZ+I0o5rWd20f44QCyfrRWnVuQDsKwWzeir6uK6+8uj91ZwBIhbVw CbkUAPEfN/yJOiao4yGEZ84H3gtt6H0= -----END CERTIFICATE-----Generated at Sun Sep 27 06:49:24 2026 by rpki-client