$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa File: 29b0a77c-0492-339d-aa9c-b106f0acf458.roa (raw, json) Hash identifier: gBE3B1X4HvpZUwRv/6oVp4coT964k0Q4Jn1W6X7/KjA= Subject key identifier: D6:5D:EF:E7:99:D0:6B:30:F6:97:2A:59:CF:97:E0:0B:F4:15:41:59 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D04E2435C547FDF0D65DE5D08 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 15164 IP address blocks: 138.199.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:43:5c:54:7f:df:0d:65:de:5d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=d54897c3-0926-48ae-bc2f-26938a7989f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:b6:b3:6f:6e:b1:f5:33:de:99:7a:3a:47: 61:68:0a:28:3d:cf:80:43:ca:d7:af:30:5e:d3:09: 9b:8e:98:e6:d9:b1:25:fe:56:ff:db:bb:09:81:6b: 5f:b2:f6:7c:02:fe:35:1f:39:34:93:61:22:96:a0: 54:c7:7a:95:8b:cd:37:dc:4a:da:52:06:19:9d:74: 0f:71:96:48:53:53:0b:7e:0c:b9:ff:22:70:fb:f8: 92:30:69:e0:c5:b5:1b:f1:76:3f:d2:f5:24:f9:7f: 33:72:4c:06:17:a0:da:1f:78:fc:ad:8c:d4:77:72: b0:e4:a1:c9:0d:20:81:9f:d5:58:5f:10:42:7d:52: 4b:09:18:b0:73:9b:ff:c1:c1:26:09:82:ad:64:76: 27:aa:f5:10:7f:eb:20:78:41:7e:d6:4c:6b:d3:e7: 9c:e1:dd:86:b3:1e:33:b8:83:04:01:04:23:fa:d9: c9:ca:41:ff:65:00:54:08:3b:db:8b:e4:34:6a:49: 3a:50:ea:b0:9b:0b:8c:c1:5f:5e:5e:91:dd:8e:21: c8:eb:dd:5f:74:86:f3:a2:49:33:b2:08:f6:8c:61: 3a:c0:c1:ba:95:11:1f:5e:fc:c7:eb:5f:b4:c9:86: 99:9c:4e:c2:9e:27:c5:0f:60:de:b8:c9:6d:74:bd: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:EF:E7:99:D0:6B:30:F6:97:2A:59:CF:97:E0:0B:F4:15:41:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/29b0a77c-0492-339d-aa9c-b106f0acf458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 138.199.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:2f:bf:e7:d3:ab:6d:07:3a:18:af:cb:60:3a:4e:d6:48:c6: 46:b8:1f:bf:29:d4:9a:41:22:1d:4e:8a:4e:95:39:71:fa:60: 42:36:ea:60:c7:25:6b:68:12:74:a0:0b:f6:84:3a:f9:2e:d7: e1:0d:c1:2c:88:e8:af:3a:a4:cf:7c:bd:49:ef:70:06:89:c4: a9:45:e7:8d:0a:0c:5c:95:45:27:87:38:7a:6a:e9:55:9b:e8: 7e:6e:b4:72:5e:7f:d1:79:e1:ed:01:44:08:77:ee:5c:ae:b8: ae:3f:5d:d1:71:06:8a:62:d7:72:3e:91:88:72:68:20:02:2c: b7:32:5d:fd:d9:bd:eb:62:f2:f2:74:a7:82:f1:4c:72:8e:e6: b1:85:28:fe:c8:f8:53:b6:49:54:3d:fd:b4:ba:95:72:7f:72: 81:20:e5:d9:ef:56:21:c1:dc:86:7c:60:7d:86:9e:96:82:f1: 86:94:e1:e6:fc:51:23:ac:06:48:86:44:37:fb:6c:e0:9e:c7: ff:ab:b1:16:df:7d:53:bb:f7:3e:6d:eb:4c:d7:cf:c8:1e:cc: d1:1e:ca:7d:2a:07:cf:09:78:a0:69:cb:e0:68:ce:ef:c0:cb: 69:4b:4b:4b:62:4e:ed:11:2a:45:7d:73:5b:eb:ef:05:73:80: 3b:0b:8c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4kNcVH/fDWXeXQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDU0ODk3YzMtMDkyNi00OGFlLWJjMmYtMjY5MzhhNzk4OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN62s29usfUz3pl6OkdhaAooPc+AQ8rXrzBe 0wmbjpjm2bEl/lb/27sJgWtfsvZ8Av41Hzk0k2EilqBUx3qVi8033EraUgYZnXQP cZZIU1MLfgy5/yJw+/iSMGngxbUb8XY/0vUk+X8zckwGF6DaH3j8rYzUd3Kw5KHJ DSCBn9VYXxBCfVJLCRiwc5v/wcEmCYKtZHYnqvUQf+sgeEF+1kxr0+ec4d2Gsx4z uIMEAQQj+tnJykH/ZQBUCDvbi+Q0akk6UOqwmwuMwV9eXpHdjiHI691fdIbzokkz sgj2jGE6wMG6lREfXvzH61+0yYaZnE7CnifFD2DeuMltdL1uCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZd7+eZ0Gsw9pcqWc+X4Av0FUFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMjliMGE3N2MtMDQ5Mi0z MzlkLWFhOWMtYjEwNmYwYWNmNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcvv+fTq20HOhivy2A6TtZIxka4H78p1JpBIh1Oik6VOXH6YEI26mDH JWtoEnSgC/aEOvku1+ENwSyI6K86pM98vUnvcAaJxKlF540KDFyVRSeHOHpq6VWb 6H5utHJef9F54e0BRAh37lyuuK4/XdFxBopi13I+kYhyaCACLLcyXf3Zveti8vJ0 p4LxTHKO5rGFKP7I+FO2SVQ9/bS6lXJ/coEg5dnvViHB3IZ8YH2GnpaC8YaU4eb8 USOsBkiGRDf7bOCex/+rsRbffVO79z5t60zXz8gezNEeyn0qB88JeKBpy+Bozu/A y2lLS0tiTu0RKkV9c1vr7wVzgDsLjK8= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:43 2026 by rpki-client