$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa File: 31300e2b-97a7-3d58-a34f-406ef6444722.roa (raw, json) Hash identifier: aoOmYlPnFKUETRLnMNPJU9vzBYiIRVWbG4LQy/YWsOs= Subject key identifier: FF:3F:7C:26:BC:32:51:45:62:D5:9C:90:72:9E:22:22:FC:B7:3D:65 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584EA7998C0BFB344E4D9AEFCD80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15164 IP address blocks: 209.71.146.0/23 maxlen: 23 209.71.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:8c:0b:fb:34:4e:4d:9a:ef:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0f0eaeed-798f-4c4c-b927-ce26282febf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:55:52:19:29:e1:29:c5:6b:67:67:cb:8e:79: 00:5b:ad:0f:e2:b8:e5:c3:bf:e4:3e:88:45:bf:ee: 7b:ce:95:7b:0d:e7:cf:c2:40:26:25:41:39:03:e5: 4d:6e:f7:43:06:66:9d:7a:95:79:eb:50:35:19:84: c6:2c:f7:a2:65:8e:9a:f7:4f:82:68:f7:b7:89:1f: 95:80:d5:cf:98:dc:cc:44:7e:ae:f4:88:2d:4a:e2: b1:4e:f0:ad:5d:27:7b:04:24:7e:d1:29:61:61:e3: d4:05:b7:14:42:6f:c5:10:54:ca:8d:d4:3a:bc:6b: b6:ed:8b:6f:68:18:45:c2:92:cb:85:0a:50:96:b1: 1e:51:61:37:58:42:dc:c3:42:b5:81:3d:b4:66:dc: 80:f0:69:9e:c0:f1:bd:70:35:bf:a5:e4:e3:c4:fe: 44:3b:47:4e:b8:7f:8c:4b:f7:43:a1:08:f4:3a:13: ed:47:87:42:b1:d9:f8:2e:4c:3c:66:44:59:c4:3f: 5b:4d:8e:a7:94:21:f7:6a:3a:b8:8e:d1:ef:54:e3: 37:3c:77:1f:49:e0:3f:01:d1:b6:32:09:06:62:ec: 65:a2:67:ed:92:a2:7e:db:8a:71:73:f2:0f:05:fc: a0:8b:be:82:86:a5:eb:37:20:4f:8d:dc:bc:ba:dc: ac:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3F:7C:26:BC:32:51:45:62:D5:9C:90:72:9E:22:22:FC:B7:3D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/31300e2b-97a7-3d58-a34f-406ef6444722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.146.0-209.71.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e7:b5:b0:cf:dc:29:6d:23:6e:57:6d:cf:20:b7:11:ff:f7: 02:d2:33:d0:c3:ca:48:8d:2e:11:86:71:a3:1d:82:8b:1e:34: 43:07:50:b9:d7:af:79:2c:f0:47:6a:e0:7a:33:a7:74:f5:12: 8a:ff:3d:36:02:02:37:75:17:9c:6c:77:a9:81:21:61:82:77: c5:a5:3c:25:5f:1f:6a:a2:3b:24:72:f6:fd:9f:1f:6f:64:5b: 16:88:b9:1f:47:8a:22:84:8e:3d:18:23:a8:a2:84:33:78:77: 56:f3:81:39:bc:6c:48:e8:f7:f3:60:e7:81:d2:62:9b:36:7f: 72:f6:ce:fa:3c:4e:6d:49:3e:35:91:06:4b:93:50:ad:db:83: 59:96:a0:4c:57:76:c6:d2:24:3a:25:1c:2b:96:49:9c:54:c4: 8d:3b:88:73:3e:d6:21:b8:60:73:2f:7d:73:ec:66:37:9d:f5: 66:11:12:4a:11:a3:3e:31:b8:04:30:48:5b:ed:20:d7:80:b9: 28:5b:93:1a:19:1b:68:96:01:ed:fc:b8:d5:b5:f9:d6:a0:35: 6b:12:31:d5:ae:39:2a:59:76:aa:04:27:47:3e:86:25:27:8d: 95:d1:89:13:f2:4a:1d:21:ec:9e:05:35:78:03:f6:9c:14:40: 36:63:64:e7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6nmYwL+zROTZrvzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGYwZWFlZWQtNzk4Zi00YzRjLWI5MjctY2UyNjI4MmZlYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllVSGSnhKcVrZ2fLjnkAW60P4rjlw7/kPohF v+57zpV7DefPwkAmJUE5A+VNbvdDBmadepV561A1GYTGLPeiZY6a90+CaPe3iR+V gNXPmNzMRH6u9IgtSuKxTvCtXSd7BCR+0SlhYePUBbcUQm/FEFTKjdQ6vGu27Ytv aBhFwpLLhQpQlrEeUWE3WELcw0K1gT20ZtyA8GmewPG9cDW/peTjxP5EO0dOuH+M S/dDoQj0OhPtR4dCsdn4Lkw8ZkRZxD9bTY6nlCH3ajq4jtHvVOM3PHcfSeA/AdG2 MgkGYuxlomftkqJ+24pxc/IPBfygi76ChqXrNyBPjdy8utys9wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP8/fCa8MlFFYtWckHKeIiL8tz1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMzEzMDBlMmItOTdhNy0z ZDU4LWEzNGYtNDA2ZWY2NDQ0NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHRR5ID BAHRR5QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAqee1sM/cKW0jbldtzyC3Ef/3AtIz0MPKSI0uEYZxox2C ix40QwdQudeveSzwR2rgejOndPUSiv89NgICN3UXnGx3qYEhYYJ3xaU8JV8faqI7 JHL2/Z8fb2RbFoi5H0eKIoSOPRgjqKKEM3h3VvOBObxsSOj382DngdJimzZ/cvbO +jxObUk+NZEGS5NQrduDWZagTFd2xtIkOiUcK5ZJnFTEjTuIcz7WIbhgcy99c+xm N531ZhESShGjPjG4BDBIW+0g14C5KFuTGhkbaJYB7fy41bX51qA1axIx1a45Kll2 qgQnRz6GJSeNldGJE/JKHSHsngU1eAP2nBRANmNk5w== -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:55 2026 by rpki-client