$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/57d97e63-0f1a-3df1-8ca3-e4f065a97796.roa File: 57d97e63-0f1a-3df1-8ca3-e4f065a97796.roa (raw, json) Hash identifier: 3Nt3vlAiJdVWL6AfiizZdeyX5tEl7EaEzLydwPrvWGE= Subject key identifier: A5:49:0D:00:02:D9:80:0D:BE:87:07:2B:4A:3D:D5:C2:2B:07:25:D1 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D5243C7A2ACAF2BC79B1A6E00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/57d97e63-0f1a-3df1-8ca3-e4f065a97796.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 15164 IP address blocks: 209.71.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c7:a2:ac:af:2b:c7:9b:1a:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=f76eb6a7-dbf7-486e-98e6-e227a255227f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:ba:f7:75:35:fe:b8:2e:0b:6a:9a:ed:22: 4a:8b:25:b8:fb:1d:68:ed:6a:6d:5b:99:46:3d:71: 90:9c:65:3a:d4:de:2c:08:86:b7:32:b6:74:dd:5e: ff:dd:36:51:60:9e:60:23:9d:af:e3:8b:52:ef:47: 88:5c:84:ed:62:c0:a3:c6:d8:0a:48:bc:b3:0c:e8: 90:ee:c0:4e:db:87:5a:85:28:bf:83:cb:21:75:2c: 89:8e:0f:32:7d:bc:4b:a8:97:e0:a6:f2:f9:e0:a2: 3f:b4:f4:52:82:87:9b:f4:5a:44:cd:d5:e6:f2:ad: 91:f6:9f:55:b5:7f:ea:a1:31:67:fa:cd:bb:b5:e9: ff:3d:bd:9e:95:f5:d3:c8:7e:73:3f:99:33:a2:c8: 77:1a:8f:26:8c:06:97:c2:a0:35:83:44:bb:16:a9: a8:8b:2c:58:f3:8c:63:66:dc:89:36:a0:5f:99:5e: 28:7c:de:ce:9b:76:2a:64:68:59:9a:b9:78:77:b9: 05:81:c6:08:8b:fa:fa:46:ef:f2:e8:7d:6f:f4:16: 8d:70:f8:be:de:10:c3:73:07:ee:1f:15:33:cf:57: b1:52:48:35:38:f3:cd:35:cc:21:81:2d:ec:e6:be: 81:05:1d:f8:1a:56:8d:96:10:ef:c6:77:79:58:08: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:49:0D:00:02:D9:80:0D:BE:87:07:2B:4A:3D:D5:C2:2B:07:25:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/57d97e63-0f1a-3df1-8ca3-e4f065a97796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:63:de:8f:25:74:6c:db:9d:00:74:c0:ba:8e:12:80:3c:bf: 76:2c:c9:12:72:c7:d1:f6:b9:dc:b7:08:57:76:82:a1:36:af: b5:7e:83:b7:89:c4:2c:f9:56:40:06:10:68:89:b1:52:ec:b9: f4:5e:1a:1c:e7:0f:b7:0b:91:be:9c:e4:65:07:31:c9:dc:66: 9c:ff:41:79:de:1e:99:53:6f:4a:dc:f2:0c:7a:6d:7b:dc:6a: 9f:1b:8d:83:57:78:71:6e:47:65:0b:d7:ae:8b:3e:7d:5f:1a: b1:d0:0c:e2:79:98:ee:da:b0:35:44:bc:35:d4:8f:08:83:1e: f9:17:7b:0c:21:5e:0e:44:9a:ee:80:0e:d4:9d:7a:ed:35:fb: 35:33:0a:83:0c:3b:d9:2e:7c:30:a8:7f:b9:72:8d:8c:67:97: ed:d5:e5:b0:fa:ba:72:1f:40:2e:fd:50:3a:e9:d0:4d:96:20: 33:15:65:72:d6:eb:98:f8:82:ba:b2:c5:16:25:de:15:c7:3c: b9:16:1d:d1:ba:8f:3c:f9:4f:a8:1b:f9:b5:15:71:0e:8c:b2: 75:92:9e:a1:92:0e:bc:d5:cb:e8:c9:d3:3b:26:3e:3b:c4:31: f2:14:10:92:b3:3f:e1:ac:3a:c7:b6:94:24:aa:49:4b:98:49: 6e:2d:af:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8eirK8rx5sabgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk Zjc2ZWI2YTctZGJmNy00ODZlLTk4ZTYtZTIyN2EyNTUyMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSS693U1/rguC2qa7SJKiyW4+x1o7WptW5lG PXGQnGU61N4sCIa3MrZ03V7/3TZRYJ5gI52v44tS70eIXITtYsCjxtgKSLyzDOiQ 7sBO24dahSi/g8shdSyJjg8yfbxLqJfgpvL54KI/tPRSgoeb9FpEzdXm8q2R9p9V tX/qoTFn+s27ten/Pb2elfXTyH5zP5kzosh3Go8mjAaXwqA1g0S7FqmoiyxY84xj ZtyJNqBfmV4ofN7Om3YqZGhZmrl4d7kFgcYIi/r6Ru/y6H1v9BaNcPi+3hDDcwfu HxUzz1exUkg1OPPNNcwhgS3s5r6BBR34GlaNlhDvxnd5WAhcgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVJDQAC2YANvocHK0o91cIrByXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTdkOTdlNjMtMGYxYS0z ZGYxLThjYTMtZTRmMDY1YTk3Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1j3o8ldGzbnQB0wLqOEoA8v3YsyRJyx9H2udy3CFd2gqE2r7V+g7eJ xCz5VkAGEGiJsVLsufReGhznD7cLkb6c5GUHMcncZpz/QXneHplTb0rc8gx6bXvc ap8bjYNXeHFuR2UL166LPn1fGrHQDOJ5mO7asDVEvDXUjwiDHvkXewwhXg5Emu6A DtSdeu01+zUzCoMMO9kufDCof7lyjYxnl+3V5bD6unIfQC79UDrp0E2WIDMVZXLW 65j4grqyxRYl3hXHPLkWHdG6jzz5T6gb+bUVcQ6MsnWSnqGSDrzVy+jJ0zsmPjvE MfIUEJKzP+GsOse2lCSqSUuYSW4tr6k= -----END CERTIFICATE-----Generated at Fri Apr 17 15:19:12 2026 by rpki-client