$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa File: b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa (raw, json) Hash identifier: ThSKLm8lC5gH8nduHeX+PAhOMLEFlPlC+b2r6DvNCv0= Subject key identifier: E1:71:E7:6E:C9:EA:41:95:1F:87:CE:21:91:E8:B6:70:17:62:13:24 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584CBAE7378E928658322CB2FD80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 15164 IP address blocks: 209.71.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:37:8e:92:86:58:32:2c:b2:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=ea831f59-616b-4f73-b6bb-eb7ea07f81b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:53:04:a4:22:be:e4:ba:c2:e0:95:8b:75: e0:bf:7c:aa:4e:ca:8b:72:e0:5f:83:27:ae:41:0c: 15:0e:5f:13:0f:4b:60:0c:c6:f5:38:77:b9:90:73: 1b:77:84:76:5e:96:bb:d7:23:91:d4:39:68:5f:26: 91:50:95:ae:46:a1:c5:04:d4:67:18:1c:de:95:b0: a3:5b:ba:69:79:e3:10:98:79:57:46:27:c4:fb:42: ff:e6:c6:a3:04:8e:93:74:21:59:7c:85:8e:8a:99: f1:d3:16:2d:82:ea:0d:8f:4e:78:66:80:0e:ba:45: 8a:8e:c9:27:a1:63:1c:f1:9f:5d:34:0e:cc:e8:f0: 32:9a:ab:31:0c:8b:c7:cc:72:13:7a:13:74:7e:34: 1f:30:94:ad:6e:41:85:c1:d0:ae:fe:3d:8f:d3:64: 29:32:44:2c:24:7f:b3:3b:14:4f:05:c8:7d:f4:37: 78:36:83:96:6d:bf:0d:b1:d2:3c:19:1d:88:19:30: da:c9:d2:a0:d8:b9:e1:1e:59:4e:43:0c:ab:56:b7: 30:77:fd:79:d1:58:12:cf:dc:34:7e:29:94:fd:fb: 1b:66:23:36:b7:e9:18:b3:22:42:5b:f8:00:d1:8a: b2:3f:83:16:2b:ef:fc:88:04:84:45:fe:6b:85:aa: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:71:E7:6E:C9:EA:41:95:1F:87:CE:21:91:E8:B6:70:17:62:13:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bf:f2:34:03:80:7e:14:fb:0d:89:49:aa:0c:6c:af:ac:a1: a0:86:cc:f9:e5:40:84:68:68:7e:b8:2a:24:4a:f0:eb:bd:3d: 0f:21:49:e7:3b:74:5c:e1:ab:74:6a:5e:67:af:93:81:86:1e: 80:73:96:23:a6:c7:98:26:c4:e3:23:ac:5a:0f:0a:12:85:f5: c4:94:4e:01:73:40:1b:f7:b3:73:9b:d7:46:c3:a4:40:1a:bb: a9:d6:87:b0:f4:ed:87:e6:5e:99:77:d4:b7:b4:ab:cc:2a:d3: 9a:4a:35:e2:c1:bd:3b:59:68:07:12:17:9d:89:4f:98:e5:de: 19:17:4b:bf:4d:32:df:bf:99:ee:67:04:16:b1:11:f6:fa:aa: 91:d0:c4:8a:38:52:6f:bf:7d:71:24:9a:aa:e1:87:1d:02:5c: 50:0a:35:9a:75:b7:69:d8:7e:1a:ce:b5:5c:25:c1:f4:85:86: f7:fd:72:d8:9a:ed:0a:82:3e:87:1f:73:94:26:4d:ca:5a:45: cd:b2:ab:a7:8b:c6:3a:8d:49:de:b1:83:45:ff:0f:d0:ff:49: 13:c8:6f:70:80:89:e3:46:1f:ab:d0:08:e8:37:5e:b0:1e:8d: 5e:b3:e7:5f:bf:e3:a7:e1:df:30:fe:cc:fa:a7:3c:9f:25:82: f0:c2:3f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zeOkoZYMiyy/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZWE4MzFmNTktNjE2Yi00ZjczLWI2YmItZWI3ZWEwN2Y4MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoctTBKQivuS6wuCVi3Xgv3yqTsqLcuBfgyeu QQwVDl8TD0tgDMb1OHe5kHMbd4R2Xpa71yOR1DloXyaRUJWuRqHFBNRnGBzelbCj W7ppeeMQmHlXRifE+0L/5sajBI6TdCFZfIWOipnx0xYtguoNj054ZoAOukWKjskn oWMc8Z9dNA7M6PAymqsxDIvHzHITehN0fjQfMJStbkGFwdCu/j2P02QpMkQsJH+z OxRPBch99Dd4NoOWbb8NsdI8GR2IGTDaydKg2LnhHllOQwyrVrcwd/150VgSz9w0 fimU/fsbZiM2t+kYsyJCW/gA0YqyP4MWK+/8iASERf5rhapYKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFx527J6kGVH4fOIZHotnAXYhMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYjJkOTJjYTQtNTI0Yi0z ZmFmLTkwZTctZGNkNzAzMDhmODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW/8jQDgH4U+w2JSaoMbK+soaCGzPnlQIRoaH64KiRK8Ou9PQ8hSec7 dFzhq3RqXmevk4GGHoBzliOmx5gmxOMjrFoPChKF9cSUTgFzQBv3s3Ob10bDpEAa u6nWh7D07YfmXpl31Le0q8wq05pKNeLBvTtZaAcSF52JT5jl3hkXS79NMt+/me5n BBaxEfb6qpHQxIo4Um+/fXEkmqrhhx0CXFAKNZp1t2nYfhrOtVwlwfSFhvf9ctia 7QqCPocfc5QmTcpaRc2yq6eLxjqNSd6xg0X/D9D/SRPIb3CAieNGH6vQCOg3XrAe jV6z51+/46fh3zD+zPqnPJ8lgvDCP9E= -----END CERTIFICATE-----Generated at Mon Mar 2 22:19:24 2026 by rpki-client