$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa File: afbebce4-9985-368e-9ee2-c9d9882efa72.roa (raw, json) Hash identifier: ddkefT+5unLbCg6UpmnLVjEXeGErWhsgmBZobUQ7tz4= Subject key identifier: 57:BB:32:2C:6D:D5:BF:40:F7:63:0C:60:E4:94:3A:BA:51:6D:C6:21 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F498993E1DC3B02A3FA5F2080 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 173.244.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:93:e1:dc:3b:02:a3:fa:5f:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9da3336a-a052-43a3-a9db-6e061638f1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a4:df:88:94:d5:16:68:6b:fb:15:97:10:76: f6:c4:e7:46:c0:b0:8a:98:04:55:73:d6:4b:75:b3: 88:62:3f:28:24:0f:a3:0f:b3:b2:24:61:72:5a:a9: ac:a9:36:ec:c0:4c:ed:ee:ff:17:02:3a:6d:67:b6: 1b:e8:f8:02:2e:15:56:8a:2d:24:16:9b:cd:be:cf: d2:3f:54:ac:e9:34:b4:e7:85:01:f9:f9:4e:c3:e7: 2b:a7:e6:3c:74:00:58:d7:b4:4e:a0:ed:ba:9d:db: 93:63:e5:f2:0a:c2:4c:03:e3:b8:67:4e:a9:b5:36: 7b:41:6a:84:13:30:92:0e:97:07:88:6c:cc:5b:fa: 3e:9a:0d:76:97:aa:ed:65:26:8c:fe:ba:b7:92:a1: 3c:f0:1c:54:83:d8:27:05:8a:4f:22:6f:d0:4b:e2: 0b:f5:fc:9c:74:eb:35:3e:b7:47:d5:af:f5:37:05: 37:13:f1:7d:d3:33:71:c6:ce:ad:dc:23:17:5b:71: af:d1:4f:d5:e4:7d:fa:f5:8d:6f:36:fc:cc:87:74: 10:f2:ef:b3:ab:73:99:45:bc:18:1a:35:8b:f6:99: 07:ad:ea:07:49:89:6d:57:96:d3:ae:0c:95:ce:b1: ca:8e:6c:2d:62:10:53:d7:2c:1e:16:1a:e5:7d:cf: db:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BB:32:2C:6D:D5:BF:40:F7:63:0C:60:E4:94:3A:BA:51:6D:C6:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/afbebce4-9985-368e-9ee2-c9d9882efa72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:af:e2:f9:f2:a4:d0:c6:8c:1e:de:89:1e:26:5e:a0:8f:88: b6:4e:a6:5f:21:0f:a6:1e:e3:03:29:52:77:9c:0f:54:48:f1: 58:0f:0d:44:b1:83:32:4c:4c:cf:a8:c2:cf:08:74:47:cb:6a: 17:5d:9c:5a:f5:b6:4c:ed:e7:7e:0f:a7:a9:0a:7f:1c:ce:c5: 17:37:0b:4a:13:7a:d9:94:09:ef:c4:90:01:20:de:68:12:24: 0c:7b:9b:8e:b4:04:84:8e:bb:55:2c:cb:9e:18:6a:cf:c3:1f: 7e:1b:14:db:fc:b5:6d:8e:85:bb:8c:26:02:ed:30:60:f2:64: ec:8a:09:bc:70:da:d2:b2:d1:89:4e:0d:ed:4f:0a:0e:94:fa: 4e:16:79:31:7a:d3:82:13:c5:d3:98:b2:a5:6c:7a:a0:89:cd: aa:b7:7f:97:a9:56:af:4b:83:f0:d7:97:3a:82:e7:90:de:76: 42:ff:73:fd:6f:46:d4:4c:d5:2e:f8:b2:f8:01:69:54:bc:d0: cb:91:93:1b:05:9d:d8:a2:dd:11:f1:6d:de:94:e2:fe:fc:33: 17:9c:01:70:02:fb:09:68:90:1e:c7:1c:21:24:4d:b9:62:43: 59:d6:40:40:89:7d:c0:c4:cb:64:fa:14:7e:2a:95:f2:83:26: 40:e9:b8:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZPh3DsCo/pfIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWRhMzMzNmEtYTA1Mi00M2EzLWE5ZGItNmUwNjE2MzhmMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKTfiJTVFmhr+xWXEHb2xOdGwLCKmARVc9ZL dbOIYj8oJA+jD7OyJGFyWqmsqTbswEzt7v8XAjptZ7Yb6PgCLhVWii0kFpvNvs/S P1Ss6TS054UB+flOw+crp+Y8dABY17ROoO26nduTY+XyCsJMA+O4Z06ptTZ7QWqE EzCSDpcHiGzMW/o+mg12l6rtZSaM/rq3kqE88BxUg9gnBYpPIm/QS+IL9fycdOs1 PrdH1a/1NwU3E/F90zNxxs6t3CMXW3Gv0U/V5H369Y1vNvzMh3QQ8u+zq3OZRbwY GjWL9pkHreoHSYltV5bTrgyVzrHKjmwtYhBT1yweFhrlfc/bpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe7Mixt1b9A92MMYOSUOrpRbcYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYWZiZWJjZTQtOTk4NS0z NjhlLTllZTItYzlkOTg4MmVmYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKv4vnypNDGjB7eiR4mXqCPiLZOpl8hD6Ye4wMpUnecD1RI8VgPDUSx gzJMTM+ows8IdEfLahddnFr1tkzt534Pp6kKfxzOxRc3C0oTetmUCe/EkAEg3mgS JAx7m460BISOu1Usy54Yas/DH34bFNv8tW2OhbuMJgLtMGDyZOyKCbxw2tKy0YlO De1PCg6U+k4WeTF604ITxdOYsqVseqCJzaq3f5epVq9Lg/DXlzqC55DedkL/c/1v RtRM1S74svgBaVS80MuRkxsFndii3RHxbd6U4v78MxecAXAC+wlokB7HHCEkTbli Q1nWQECJfcDEy2T6FH4qlfKDJkDpuBM= -----END CERTIFICATE-----Generated at Tue Sep 29 12:22:23 2026 by rpki-client