$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa File: a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa (raw, json) Hash identifier: 5R/al7yJTu1BQ5/L+4MMh21r+mZrzzUmW8SHLnfMZjo= Subject key identifier: 6E:51:99:76:A5:FE:42:CA:F4:4E:7C:46:BB:E0:6C:98:AC:BE:87:ED Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F7782D8EFB092717E6C6770A0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 15164 IP address blocks: 209.71.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:d8:ef:b0:92:71:7e:6c:67:70:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=efdcb7f8-c7ba-49e9-9666-38c95c92b456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6e:4a:3c:a5:91:4f:8f:e5:a6:68:5b:9c:18: 1b:86:ca:f1:f4:e2:b3:74:94:23:29:91:d4:8e:35: 33:13:05:f6:f2:22:dc:27:4a:85:d7:51:77:4c:ea: bc:9a:a2:68:ed:31:92:c6:61:67:06:55:3e:24:b1: 06:12:12:74:88:9d:14:06:46:dd:30:e5:09:f5:ae: d3:19:e7:68:13:71:d6:53:79:91:d2:ac:77:31:33: b4:57:d6:54:76:2a:2c:8a:74:1d:8c:b0:dc:c6:0f: ac:20:0a:10:6b:50:3b:c9:26:a3:41:49:fa:ed:07: e2:7c:d4:37:ff:63:eb:76:e9:f8:58:48:b2:b3:1e: e9:05:c9:b3:6d:1c:52:7d:f6:7b:07:d7:74:d2:92: 88:ff:8b:12:37:c6:f0:5b:de:dc:64:f0:0e:de:f5: b5:53:b0:51:b8:c1:3e:ef:1f:cc:7f:08:2b:d5:81: 73:47:4a:53:12:8e:28:c7:21:d5:bf:13:d8:1f:7b: b8:a8:de:6c:b8:51:74:9d:78:c6:f1:4b:93:21:b3: ef:b4:16:8a:32:7b:30:c7:c0:99:2c:7b:b1:eb:57: 23:00:6a:2b:f2:a9:d1:98:65:e8:3f:c2:25:6a:46: 1c:4f:51:9f:f0:22:83:41:a7:5a:a1:58:73:b2:00: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:51:99:76:A5:FE:42:CA:F4:4E:7C:46:BB:E0:6C:98:AC:BE:87:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a1eb3e77-b96a-3a44-92c9-9479d02ba4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f1:90:b4:d2:99:6e:91:d9:ca:74:f1:1a:c9:57:16:61:69: 21:a2:ac:0b:36:6d:8a:21:e3:50:b4:ff:e8:68:57:1d:cf:ad: c3:24:d2:48:ac:c3:14:91:06:da:26:dd:ef:91:81:78:de:b4: 7e:a8:d3:29:10:01:10:2a:a6:5c:b4:23:db:b2:a0:3b:a7:9d: 08:96:f5:66:68:53:9d:7c:1f:f1:c9:a0:c1:c3:6b:48:f5:ec: 48:56:72:cf:a0:41:34:d5:5e:2e:0d:d7:7b:ca:d6:a8:e2:dc: 22:43:68:89:b0:96:91:3d:8a:96:46:fc:a4:f8:8e:bb:74:0c: fb:38:a8:f9:c6:a1:4f:68:ca:6c:e2:45:0c:35:a5:11:c8:66: 31:73:db:de:a9:05:21:24:9a:0b:b8:b5:9e:11:50:02:2a:7b: f1:c4:74:81:5a:6a:78:84:b0:eb:13:b6:e5:59:a2:00:0b:e6: 27:d9:16:d4:19:9e:ba:85:b7:95:08:42:9c:61:c5:16:66:f3: 8c:86:72:4e:44:5c:9b:b9:14:df:7a:bd:6b:24:7b:12:83:be: 16:06:b1:53:6a:4c:cc:27:e3:69:78:16:77:99:55:90:f1:50: d8:7b:3a:8c:cf:09:b0:d5:28:31:3d:7c:a1:15:63:c4:ba:4f: 49:b3:a1:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtjvsJJxfmxncKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZWZkY2I3ZjgtYzdiYS00OWU5LTk2NjYtMzhjOTVjOTJiNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG5KPKWRT4/lpmhbnBgbhsrx9OKzdJQjKZHU jjUzEwX28iLcJ0qF11F3TOq8mqJo7TGSxmFnBlU+JLEGEhJ0iJ0UBkbdMOUJ9a7T GedoE3HWU3mR0qx3MTO0V9ZUdiosinQdjLDcxg+sIAoQa1A7ySajQUn67QfifNQ3 /2Prdun4WEiysx7pBcmzbRxSffZ7B9d00pKI/4sSN8bwW97cZPAO3vW1U7BRuME+ 7x/Mfwgr1YFzR0pTEo4oxyHVvxPYH3u4qN5suFF0nXjG8UuTIbPvtBaKMnswx8CZ LHux61cjAGor8qnRmGXoP8IlakYcT1Gf8CKDQadaoVhzsgBhhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5RmXal/kLK9E58RrvgbJisvoftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTFlYjNlNzctYjk2YS0z YTQ0LTkyYzktOTQ3OWQwMmJhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrxkLTSmW6R2cp08RrJVxZhaSGirAs2bYoh41C0/+hoVx3PrcMk0kis wxSRBtom3e+RgXjetH6o0ykQARAqply0I9uyoDunnQiW9WZoU518H/HJoMHDa0j1 7EhWcs+gQTTVXi4N13vK1qji3CJDaImwlpE9ipZG/KT4jrt0DPs4qPnGoU9oymzi RQw1pRHIZjFz296pBSEkmgu4tZ4RUAIqe/HEdIFaaniEsOsTtuVZogAL5ifZFtQZ nrqFt5UIQpxhxRZm84yGck5EXJu5FN96vWskexKDvhYGsVNqTMwn42l4FneZVZDx UNh7OozPCbDVKDE9fKEVY8S6T0mzodI= -----END CERTIFICATE-----Generated at Tue Oct 13 04:12:42 2026 by rpki-client