$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa File: a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa (raw, json) Hash identifier: +q6mTcn+CJ/UPLZx+Twte3xFm4Sy8x4FAueNiRNgq3g= Subject key identifier: EC:BD:EE:99:B8:2C:A6:B9:18:3E:6E:1B:E4:51:38:92:8A:8B:D9:0B Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584CA5F70C1335DD1EF9FCDD5840 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 15164 IP address blocks: 209.71.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:0c:13:35:dd:1e:f9:fc:dd:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=f185b352-90fc-40db-8ae2-6d2d91ba3360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:ce:ff:76:78:40:94:60:96:37:56:20:c5: f2:ef:e0:cd:88:aa:98:60:fd:88:d3:6a:67:d7:1c: e3:9d:19:29:2e:97:f3:67:4a:1f:b1:c7:2a:08:f5: 8e:15:c4:37:29:c7:e8:d8:a4:e5:7e:6b:cc:a0:ad: c7:a7:c5:85:08:69:b2:34:46:49:0a:7b:84:ab:bb: 1a:36:c7:cc:12:4b:3f:fe:18:32:c7:90:42:31:ab: ce:45:79:44:fa:61:f6:df:13:c1:4d:5f:b4:59:35: 24:67:4e:75:4d:bf:10:39:b2:cd:fa:f8:ac:c4:fe: 3b:64:c5:60:f0:d2:28:f0:83:9d:a5:04:67:8a:6b: 2b:b7:2d:a1:a6:c9:03:b6:1c:c3:90:61:02:e7:9a: cd:2f:e7:e7:99:ee:0f:db:c9:e8:78:56:32:b4:e4: 35:fd:23:8d:fb:ed:d7:4f:2d:4c:44:e8:8d:20:78: 0b:3d:60:74:cc:d8:24:3d:75:79:7e:3a:81:91:d4: 16:93:ca:af:f8:45:38:c8:8e:5e:a5:19:7c:6b:1e: ce:75:58:33:cd:f1:f4:c4:35:1c:7f:ea:1b:26:78: 78:01:3c:cf:7f:7b:1c:66:2d:9d:e2:f9:a6:09:cb: c0:10:70:48:e3:cf:41:66:6b:b8:39:82:ae:6e:3f: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BD:EE:99:B8:2C:A6:B9:18:3E:6E:1B:E4:51:38:92:8A:8B:D9:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:00:e2:87:fb:a2:62:ae:6d:42:3c:f4:95:52:d1:b5:26:f5: 51:2a:ea:af:11:b7:14:1e:ea:fa:15:cd:d9:1d:54:56:03:ea: 35:da:92:b9:37:cc:49:38:31:9e:fd:53:31:07:e3:23:66:2e: d0:b0:37:f5:c4:c7:e6:da:67:5f:25:21:38:ed:17:44:ac:5d: 46:39:4d:59:78:41:43:72:8e:c3:7b:57:0a:eb:8f:f3:08:84: 7f:f0:a6:dc:e4:5f:8c:9a:92:7c:e1:af:97:25:63:88:80:f7: 25:97:64:fe:11:3c:f1:1e:a7:d5:c2:c3:e3:fd:11:3d:f0:42: e9:19:78:45:c9:6f:03:f5:57:27:ec:26:df:80:57:69:48:87: d5:1d:2e:6a:ec:1a:37:e7:cc:de:8a:f1:32:4f:90:6e:07:15: 7c:b1:c9:ae:a2:93:fe:cd:19:69:7e:cb:b3:a8:a2:49:f8:ee: 63:e4:63:61:ce:f7:f8:e5:fe:b1:45:df:b8:06:18:e0:5e:fd: b8:18:26:1e:cb:56:79:56:c3:49:40:34:cd:b9:4e:a5:5e:af: 4c:5b:e2:56:e2:14:68:bd:4a:d3:d0:d0:9e:d6:5b:88:05:75: 77:b2:62:c2:38:c1:12:5c:05:41:8a:51:d8:e4:d2:21:39:e4: cf:db:60:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wwTNd0e+fzdWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZjE4NWIzNTItOTBmYy00MGRiLThhZTItNmQyZDkxYmEzMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnvO/3Z4QJRgljdWIMXy7+DNiKqYYP2I02pn 1xzjnRkpLpfzZ0ofsccqCPWOFcQ3Kcfo2KTlfmvMoK3Hp8WFCGmyNEZJCnuEq7sa NsfMEks//hgyx5BCMavORXlE+mH23xPBTV+0WTUkZ051Tb8QObLN+visxP47ZMVg 8NIo8IOdpQRnimsrty2hpskDthzDkGEC55rNL+fnme4P28noeFYytOQ1/SON++3X Ty1MROiNIHgLPWB0zNgkPXV5fjqBkdQWk8qv+EU4yI5epRl8ax7OdVgzzfH0xDUc f+obJnh4ATzPf3scZi2d4vmmCcvAEHBI489BZmu4OYKubj/AiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOy97pm4LKa5GD5uG+RROJKKi9kLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTcwNGMzYTAtNWQ2My0z MGJkLWFlYjktYTgyZmE1MTc4YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAA4of7omKubUI89JVS0bUm9VEq6q8RtxQe6voVzdkdVFYD6jXakrk3 zEk4MZ79UzEH4yNmLtCwN/XEx+baZ18lITjtF0SsXUY5TVl4QUNyjsN7Vwrrj/MI hH/wptzkX4yaknzhr5clY4iA9yWXZP4RPPEep9XCw+P9ET3wQukZeEXJbwP1Vyfs Jt+AV2lIh9UdLmrsGjfnzN6K8TJPkG4HFXyxya6ik/7NGWl+y7Oookn47mPkY2HO 9/jl/rFF37gGGOBe/bgYJh7LVnlWw0lANM25TqVer0xb4lbiFGi9StPQ0J7WW4gF dXeyYsI4wRJcBUGKUdjk0iE55M/bYB4= -----END CERTIFICATE-----Generated at Mon Mar 2 17:07:00 2026 by rpki-client