$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa File: a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa (raw, json) Hash identifier: 6EiD/hwVK9PVyTKJ1qCe0HHsfe6OAPdQsZp38BH0Zik= Subject key identifier: 6D:F1:CA:4F:0D:6F:7E:BA:35:36:A2:D1:70:1D:3B:D8:05:EA:5E:20 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D524340BF56986841A28D60B4 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 15164 IP address blocks: 209.71.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:40:bf:56:98:68:41:a2:8d:60:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=8bc274dc-de05-4d0b-9510-44bebc5c2b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:c0:b3:a7:44:58:3a:40:23:62:e3:a5:ca: 4d:62:14:c8:49:6f:8a:c1:c5:42:d0:00:a4:5c:c3: 56:5c:ad:7e:be:63:0a:46:3d:a8:08:9b:9e:39:36: fd:31:5a:2c:c6:79:7d:46:2b:03:37:6e:69:35:9f: 43:55:82:74:7c:65:35:b1:1b:63:35:f0:85:33:6b: 1e:b4:f6:81:5e:25:87:fe:13:f7:0c:8a:a7:7e:62: 2f:30:93:05:2a:3f:50:f8:65:00:a4:f2:19:c0:98: 2c:0f:be:e8:79:02:c2:38:c1:c9:08:b8:da:d6:df: e5:5e:88:ec:d5:cc:20:cc:35:9e:5d:15:37:5b:d6: b7:64:d0:53:cc:42:22:18:1e:61:15:20:7d:56:e9: 83:16:be:eb:fc:a5:c2:d1:a0:66:8f:e4:d3:99:53: a6:d9:9f:18:ac:8f:ea:1d:ce:b1:b1:21:e5:0e:c5: 13:d6:64:ec:9c:80:8f:52:64:d0:4e:b9:9d:6d:15: 35:c6:80:15:2b:00:6d:11:c9:f3:57:99:08:9f:f4: 19:fb:45:4e:b8:47:57:41:72:68:44:15:b2:6c:78: e7:5f:23:5e:f9:d3:58:c4:1e:c7:2c:37:34:e1:c0: 31:67:6f:36:66:d1:75:15:03:ef:27:c0:50:d5:b9: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F1:CA:4F:0D:6F:7E:BA:35:36:A2:D1:70:1D:3B:D8:05:EA:5E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5e:fc:eb:1c:a1:6b:85:99:80:56:72:d9:1a:79:b3:50:70: 05:9f:24:8a:56:c2:f9:c3:8b:b3:9f:30:43:74:c2:67:a5:b2: 7a:d8:9a:84:f4:c3:fd:b6:b4:a3:cf:0c:7d:3d:ca:eb:e9:02: 84:ba:57:f3:61:75:49:ae:6d:aa:0c:c8:23:70:74:eb:36:5c: 55:b8:bb:da:f6:c8:b7:29:d2:37:90:91:88:7d:e9:23:78:cb: 21:5f:9c:a7:4a:52:4b:ec:45:cc:4d:14:d9:0e:9a:5f:95:39: c6:ac:e7:87:61:88:46:b1:d8:4d:fb:8b:f5:68:92:cf:79:6e: 16:16:98:36:92:96:43:fe:1a:c6:69:eb:94:d1:b4:9a:7c:70: 7c:ad:6b:6f:96:b9:fb:49:12:1e:e0:96:ac:3b:05:84:d9:25: 2f:be:42:4e:06:f9:20:28:71:76:cb:f8:41:f0:4d:ed:a1:e8: e6:5b:f6:93:a8:aa:71:bd:b7:ab:8d:c9:d6:98:e2:b8:bc:0c: 7f:eb:77:45:dd:05:70:da:1b:99:8f:7a:0b:8b:1b:08:a1:64: eb:7a:27:7b:ee:80:a6:0d:c3:7e:ff:b6:17:52:60:c6:59:93: ff:32:ec:f0:2f:d8:9c:ec:45:5a:75:f5:d5:77:0e:89:61:c4: 50:2e:d9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0C/VphoQaKNYLQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OGJjMjc0ZGMtZGUwNS00ZDBiLTk1MTAtNDRiZWJjNWMyYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE3As6dEWDpAI2LjpcpNYhTISW+KwcVC0ACk XMNWXK1+vmMKRj2oCJueOTb9MVosxnl9RisDN25pNZ9DVYJ0fGU1sRtjNfCFM2se tPaBXiWH/hP3DIqnfmIvMJMFKj9Q+GUApPIZwJgsD77oeQLCOMHJCLja1t/lXojs 1cwgzDWeXRU3W9a3ZNBTzEIiGB5hFSB9VumDFr7r/KXC0aBmj+TTmVOm2Z8YrI/q Hc6xsSHlDsUT1mTsnICPUmTQTrmdbRU1xoAVKwBtEcnzV5kIn/QZ+0VOuEdXQXJo RBWybHjnXyNe+dNYxB7HLDc04cAxZ282ZtF1FQPvJ8BQ1bkdlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3xyk8Nb366NTai0XAdO9gF6l4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTFlYjNlNzctYjk2YS0z YTQ0LTkyYzktOTQ3OWQwMmJhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJe/OscoWuFmYBWctkaebNQcAWfJIpWwvnDi7OfMEN0wmelsnrYmoT0 w/22tKPPDH09yuvpAoS6V/NhdUmubaoMyCNwdOs2XFW4u9r2yLcp0jeQkYh96SN4 yyFfnKdKUkvsRcxNFNkOml+VOcas54dhiEax2E37i/Voks95bhYWmDaSlkP+GsZp 65TRtJp8cHyta2+WuftJEh7glqw7BYTZJS++Qk4G+SAocXbL+EHwTe2h6OZb9pOo qnG9t6uNydaY4ri8DH/rd0XdBXDaG5mPeguLGwihZOt6J3vugKYNw37/thdSYMZZ k/8y7PAv2JzsRVp19dV3DolhxFAu2RI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:07:15 2026 by rpki-client