$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa File: 9a0e1652-643d-3073-a20b-c2aa99019a4f.roa (raw, json) Hash identifier: 62KN/Yr32/8xJQk/Hzo2XwXsJhO53uWXVSTnoPooKEQ= Subject key identifier: 84:00:8D:12:B3:AD:47:28:D6:29:A0:2F:09:27:42:09:EE:C8:C6:D4 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584CF6ECD75B3B7613F8A74B6180 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 15164 IP address blocks: 209.71.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d7:5b:3b:76:13:f8:a7:4b:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=5e1d470c-197a-4f20-9624-804fe9cdc6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:ca:b6:3a:47:bc:d6:56:f9:dd:66:a8:a6: 38:71:0a:67:80:f5:bb:e2:b3:4c:3d:1f:6e:dc:bd: 23:fa:e3:73:9e:28:f7:fb:71:c1:e3:1d:28:13:e3: cf:bf:f8:7b:ce:03:72:9e:98:fc:73:f1:ca:05:ea: af:11:f9:4e:58:a5:60:72:f5:b3:bb:91:3b:c1:f3: 6d:b4:64:90:fd:26:9e:ad:70:9c:56:a5:5b:a0:5f: e1:a4:6c:74:be:2d:56:1c:c4:53:e6:60:49:2a:fc: 54:0b:35:ec:67:08:7e:49:6d:fe:ba:92:c3:2f:d1: 62:fb:5b:06:5c:90:a9:f9:2b:ec:fb:1f:38:7c:c6: f8:f8:96:2f:30:3e:d6:c6:2d:76:1c:3e:44:7c:64: 6a:29:df:90:34:6c:36:67:17:84:3c:8e:15:fe:35: 38:bf:b5:dc:c7:47:f2:1a:dd:67:d7:4a:12:bd:9e: d0:76:a2:20:59:9a:d0:df:9c:84:ce:b8:a3:f6:16: 34:27:e8:27:60:1d:a8:11:f5:3b:5d:96:46:9c:2a: de:43:3d:bc:85:f4:54:40:4e:27:14:93:42:aa:eb: 6d:e6:a8:f8:81:a1:0d:b0:5a:6e:2d:de:e9:13:f1: ea:6f:24:7f:33:ea:e2:52:4e:56:45:68:3c:1a:c3: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:8D:12:B3:AD:47:28:D6:29:A0:2F:09:27:42:09:EE:C8:C6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:07:17:6d:b4:c9:47:3a:fa:28:31:a2:53:f2:14:3e:32:6d: ab:c0:d3:a6:74:63:d5:be:bb:05:d0:cf:83:85:89:e1:27:f1: cb:81:99:2d:13:30:cb:33:72:24:91:5b:3a:bb:10:f7:aa:ad: f4:70:57:26:b9:5a:e9:1c:7e:10:6e:7b:d3:86:ff:75:91:92: ad:9a:3f:0b:b0:9e:a3:65:d3:8a:4e:cd:e0:5c:a3:ab:07:ce: 6b:df:32:96:9f:4b:d8:ef:e7:ca:e8:f1:93:1a:1f:98:53:95: 0a:ef:7d:74:40:a4:85:cc:79:e1:aa:95:84:61:6c:d0:ef:6c: d7:7e:05:b6:1a:1f:8f:15:8d:40:1b:5b:21:0b:42:de:d7:b7: ca:55:04:99:1b:b9:74:9a:d3:57:f5:13:4e:49:fe:98:42:76: 6c:e7:6b:10:da:1b:4a:f0:ac:0f:d9:ea:f1:46:e4:e0:07:a6: c6:6c:95:cd:a3:71:f1:45:67:40:69:ad:c6:d1:be:c0:90:d9: 71:8a:3d:fa:21:31:d4:d1:5b:de:2b:33:6a:ee:20:e7:fd:14: 75:da:35:20:bb:ca:cd:f9:61:2f:c3:c7:a7:3c:3d:cc:26:99: eb:75:e5:7c:58:50:1f:3e:22:00:6d:73:f0:12:fc:06:d2:2f: 3a:e5:88:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NdbO3YT+KdLYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk NWUxZDQ3MGMtMTk3YS00ZjIwLTk2MjQtODA0ZmU5Y2RjNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhjKtjpHvNZW+d1mqKY4cQpngPW74rNMPR9u 3L0j+uNznij3+3HB4x0oE+PPv/h7zgNynpj8c/HKBeqvEflOWKVgcvWzu5E7wfNt tGSQ/SaerXCcVqVboF/hpGx0vi1WHMRT5mBJKvxUCzXsZwh+SW3+upLDL9Fi+1sG XJCp+Svs+x84fMb4+JYvMD7Wxi12HD5EfGRqKd+QNGw2ZxeEPI4V/jU4v7Xcx0fy Gt1n10oSvZ7QdqIgWZrQ35yEzrij9hY0J+gnYB2oEfU7XZZGnCreQz28hfRUQE4n FJNCqutt5qj4gaENsFpuLd7pE/HqbyR/M+riUk5WRWg8GsNsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQAjRKzrUco1imgLwknQgnuyMbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOWEwZTE2NTItNjQzZC0z MDczLWEyMGItYzJhYTk5MDE5YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0HF220yUc6+igxolPyFD4ybavA06Z0Y9W+uwXQz4OFieEn8cuBmS0T MMszciSRWzq7EPeqrfRwVya5WukcfhBue9OG/3WRkq2aPwuwnqNl04pOzeBco6sH zmvfMpafS9jv58ro8ZMaH5hTlQrvfXRApIXMeeGqlYRhbNDvbNd+BbYaH48VjUAb WyELQt7Xt8pVBJkbuXSa01f1E05J/phCdmznaxDaG0rwrA/Z6vFG5OAHpsZslc2j cfFFZ0BprcbRvsCQ2XGKPfohMdTRW94rM2ruIOf9FHXaNSC7ys35YS/Dx6c8Pcwm met15XxYUB8+IgBtc/AS/AbSLzrliKE= -----END CERTIFICATE-----Generated at Mon Mar 2 21:25:11 2026 by rpki-client