$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa File: 2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa (raw, json) Hash identifier: +AxWnk74LpUO8Gta19HGiQUsH0IQhM5IXv5Y2UDlAzU= Subject key identifier: 6D:45:3D:C5:B4:80:69:B6:1C:2C:BF:CF:C0:E1:4F:8C:8B:78:03:9F Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D00B23D2DE3E5612D8E2AB5C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 15164 IP address blocks: 209.71.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:3d:2d:e3:e5:61:2d:8e:2a:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=3c2441ab-db49-4119-a27e-dcb54e460174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:60:b9:e9:46:ce:bf:37:34:e3:8e:4b:33: 46:4f:ed:d1:09:5f:11:c0:85:d8:09:97:ef:41:d0: d8:28:f3:9e:6b:60:87:b3:35:86:15:3c:83:63:d7: d2:a7:41:66:d4:d2:94:dd:2e:d3:86:6a:97:7e:d8: 1d:04:79:fc:fa:1c:f8:37:06:f8:48:e0:f3:fd:cd: 00:f6:ac:c1:9d:7e:96:72:df:da:93:5b:e6:42:f6: 5c:b4:c8:a8:10:ff:72:58:b1:b6:08:73:8f:61:42: 2e:90:06:6d:bd:0e:35:90:27:eb:77:34:aa:d0:1f: c0:a8:45:1a:c5:bb:ee:eb:85:88:c4:f9:b1:7d:68: 8e:5e:20:99:d3:f3:9b:96:dd:56:b5:f7:b8:40:4e: 76:d9:1d:71:3b:fe:34:7e:dc:ee:94:95:bc:6b:46: 63:fc:3f:06:09:f9:1e:93:7d:bb:a4:8e:8f:17:61: 49:17:09:9b:69:92:33:07:99:62:5c:8b:91:6e:13: e9:3a:6b:b8:59:55:a6:9e:79:1e:16:09:b1:20:5c: 03:5b:98:04:fd:16:19:b4:aa:e0:42:73:fd:d3:1d: 2d:24:ad:a3:c2:dc:3c:5d:09:8f:24:10:e2:30:66: 39:3e:91:87:a2:4d:af:52:03:cd:d5:5a:16:f5:c5: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:45:3D:C5:B4:80:69:B6:1C:2C:BF:CF:C0:E1:4F:8C:8B:78:03:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e3:e2:1b:76:1c:d8:ac:fd:32:e1:2d:f2:a3:af:e8:9a:21: 1d:9e:1d:cd:f5:fa:ef:a3:81:df:2f:94:c5:4b:ef:bf:f4:4d: 0d:f8:66:05:fa:84:95:6e:4b:e5:59:1d:10:f8:e0:c3:ac:65: 56:66:52:c7:9c:c3:22:11:55:0f:ab:4f:aa:b1:b8:fe:f8:ff: dd:d3:5e:a5:00:f3:52:24:fa:7d:4d:51:8c:58:73:1f:05:3c: ad:3f:4a:34:de:af:35:48:d6:56:76:73:96:c5:f0:c0:9d:e9: 35:a8:11:25:d1:41:d9:62:dd:80:a8:82:5c:b8:5f:9a:8a:b2: 98:a5:24:c9:c1:30:36:7a:86:18:86:87:b6:27:e1:bb:96:a9: c3:ff:68:7e:69:3f:11:0e:e7:bf:a3:20:d2:06:c2:2e:ec:1a: 76:50:11:91:f5:87:ba:38:13:03:bd:02:2a:c7:cb:4e:58:dd: 18:08:3f:43:16:83:21:50:36:73:f5:e6:11:6b:d3:af:27:5c: 8a:6f:94:a7:ce:d2:1b:3c:ac:e0:5a:5f:e4:b9:cf:96:0e:88: bd:47:fc:a6:21:47:a7:d8:ce:7c:01:2d:8f:03:04:62:9e:ee: 7a:b3:f9:b6:31:5f:cf:8a:48:73:69:05:04:aa:6f:30:77:27: 34:5a:28:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asj0t4+VhLY4qtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk M2MyNDQxYWItZGI0OS00MTE5LWEyN2UtZGNiNTRlNDYwMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvpguelGzr83NOOOSzNGT+3RCV8RwIXYCZfv QdDYKPOea2CHszWGFTyDY9fSp0Fm1NKU3S7ThmqXftgdBHn8+hz4Nwb4SODz/c0A 9qzBnX6Wct/ak1vmQvZctMioEP9yWLG2CHOPYUIukAZtvQ41kCfrdzSq0B/AqEUa xbvu64WIxPmxfWiOXiCZ0/Oblt1Wtfe4QE522R1xO/40ftzulJW8a0Zj/D8GCfke k327pI6PF2FJFwmbaZIzB5liXIuRbhPpOmu4WVWmnnkeFgmxIFwDW5gE/RYZtKrg QnP90x0tJK2jwtw8XQmPJBDiMGY5PpGHok2vUgPN1VoW9cXBowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1FPcW0gGm2HCy/z8DhT4yLeAOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMmEzMmMwYTEtZWQxYi0z YTNlLWIzODAtOTE4Mzc0ZDc3Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETj4ht2HNis/TLhLfKjr+iaIR2eHc31+u+jgd8vlMVL77/0TQ34ZgX6 hJVuS+VZHRD44MOsZVZmUsecwyIRVQ+rT6qxuP74/93TXqUA81Ik+n1NUYxYcx8F PK0/SjTerzVI1lZ2c5bF8MCd6TWoESXRQdli3YCogly4X5qKspilJMnBMDZ6hhiG h7Yn4buWqcP/aH5pPxEO57+jINIGwi7sGnZQEZH1h7o4EwO9AirHy05Y3RgIP0MW gyFQNnP15hFr068nXIpvlKfO0hs8rOBaX+S5z5YOiL1H/KYhR6fYznwBLY8DBGKe 7nqz+bYxX8+KSHNpBQSqbzB3JzRaKDA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:48 2026 by rpki-client