$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa File: 7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa (raw, json) Hash identifier: JLljsup8ye9qHgLIYd2iK9oTAB/m9gG/Eh80AIcrz8U= Subject key identifier: 75:25:14:CB:66:62:F1:32:2B:CD:EC:3A:2D:85:DA:11:B8:41:AB:7D Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D5E1A734F2D7A8D6451597D00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 15164 IP address blocks: 209.71.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:73:4f:2d:7a:8d:64:51:59:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=30f565a5-9b35-469c-9de2-ece3998cddf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:44:4a:4d:74:b7:52:7f:cc:de:2f:e1:32:44: e6:c2:ef:5e:e1:28:ee:08:be:a3:47:1d:ac:5e:6a: 37:45:75:54:8f:cb:12:ae:f6:d9:27:a0:6b:8a:bb: 36:a1:ea:7a:7f:73:43:03:57:ef:f8:3f:ed:7a:8d: f5:b5:0a:0e:14:90:9d:bc:b5:f1:99:19:93:9b:9f: ce:55:ba:be:33:1a:80:43:bd:03:70:29:31:ff:40: 44:b4:aa:00:00:3b:92:f1:64:33:f8:66:75:0f:21: 0d:3a:0f:c5:69:c6:97:8b:6e:38:a6:83:c4:06:72: 94:8d:4d:38:15:40:b3:4d:95:43:1c:df:76:e0:8b: 3c:cc:ed:ba:6d:6e:8f:6f:aa:24:40:49:25:03:17: 86:a8:56:90:56:62:75:e4:0c:a2:e6:44:66:ab:76: a2:52:75:42:5d:6d:96:c4:f3:a4:61:7b:7e:72:9f: 41:f6:01:e8:58:25:95:fd:0c:0f:b9:29:03:9c:a5: 39:cc:39:48:c4:a2:49:34:aa:8a:eb:73:bd:b0:89: 92:28:ee:ae:bf:55:c2:e2:47:f3:e2:ea:ec:d1:65: c3:47:83:ca:14:5c:9f:6f:9f:33:6e:26:c2:2e:4f: ca:91:68:a8:65:39:57:06:ca:49:cd:04:17:8e:47: 0e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:25:14:CB:66:62:F1:32:2B:CD:EC:3A:2D:85:DA:11:B8:41:AB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a8:7c:79:49:a7:c3:bc:af:92:84:39:5b:02:44:85:cf:aa: 6f:29:ca:5f:e6:26:71:19:80:96:d6:40:29:ab:ef:7d:e7:c0: 87:65:31:41:9b:8e:14:36:4b:75:ef:54:65:45:7d:02:03:1f: 87:d2:06:fe:7c:97:94:ca:d8:4e:df:2e:79:f1:d7:f3:13:25: 55:58:c2:0f:38:87:64:27:a5:f5:ee:54:5c:9b:17:5e:be:40: 6f:69:f1:50:ae:ef:11:62:a2:64:0d:b3:1a:b4:60:68:2f:b3: 8b:ed:c8:cd:e2:87:74:55:c2:fc:67:52:72:d7:34:77:43:f5: 02:58:db:ea:0a:a4:a1:f1:a5:e7:93:46:a5:89:bf:a7:bf:1a: 3e:b3:06:26:71:cd:0c:a2:b3:f4:14:6c:2e:7c:ca:5b:4e:55: 30:89:24:e1:df:73:c4:1f:3f:6b:10:63:ad:f8:7f:31:79:9b: 7e:49:41:b2:d0:52:6e:55:c0:cf:2e:66:08:a0:aa:cf:e4:3f: e7:04:b2:23:bd:0f:48:6b:0d:07:82:2d:fb:11:b8:a6:bd:c7: ab:4a:62:37:d9:55:ad:44:4f:16:e5:63:99:cb:ef:d6:f5:dd: e5:fa:a0:0c:c5:a4:a2:75:33:37:04:b2:62:8b:04:c1:09:42: a4:7c:62:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnNPLXqNZFFZfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MzBmNTY1YTUtOWIzNS00NjljLTlkZTItZWNlMzk5OGNkZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnERKTXS3Un/M3i/hMkTmwu9e4SjuCL6jRx2s Xmo3RXVUj8sSrvbZJ6Brirs2oep6f3NDA1fv+D/teo31tQoOFJCdvLXxmRmTm5/O Vbq+MxqAQ70DcCkx/0BEtKoAADuS8WQz+GZ1DyENOg/FacaXi244poPEBnKUjU04 FUCzTZVDHN924Is8zO26bW6Pb6okQEklAxeGqFaQVmJ15Ayi5kRmq3aiUnVCXW2W xPOkYXt+cp9B9gHoWCWV/QwPuSkDnKU5zDlIxKJJNKqK63O9sImSKO6uv1XC4kfz 4urs0WXDR4PKFFyfb58zbibCLk/KkWioZTlXBspJzQQXjkcOcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUlFMtmYvEyK83sOi2F2hG4Qat9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvN2Y4Y2QyMDMtZGZlNS0z ZDY5LThlNWEtMWY0NDJmMzFmOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuofHlJp8O8r5KEOVsCRIXPqm8pyl/mJnEZgJbWQCmr733nwIdlMUGb jhQ2S3XvVGVFfQIDH4fSBv58l5TK2E7fLnnx1/MTJVVYwg84h2QnpfXuVFybF16+ QG9p8VCu7xFiomQNsxq0YGgvs4vtyM3ih3RVwvxnUnLXNHdD9QJY2+oKpKHxpeeT RqWJv6e/Gj6zBiZxzQyis/QUbC58yltOVTCJJOHfc8QfP2sQY634fzF5m35JQbLQ Um5VwM8uZgigqs/kP+cEsiO9D0hrDQeCLfsRuKa9x6tKYjfZVa1ETxblY5nL79b1 3eX6oAzFpKJ1MzcEsmKLBMEJQqR8Ylk= -----END CERTIFICATE-----Generated at Fri Apr 17 17:40:15 2026 by rpki-client