$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa File: cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa (raw, json) Hash identifier: KTna1MPxDZKgeNGErHr76vXgKGZVzu2cvBBf7e+LMT4= Subject key identifier: D4:C6:DB:30:EC:FD:7A:B8:D7:EE:F1:10:0F:9B:02:64:46:06:AA:61 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584EA79504C48BDB300B99F0C780 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15164 IP address blocks: 199.200.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:04:c4:8b:db:30:0b:99:f0:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c4f44ea9-5a97-43e9-a506-ba108e32613f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:09:02:64:88:ac:fa:5b:5a:52:d1:ae:64: cb:bd:dc:71:c8:93:46:24:d1:22:48:ae:1c:61:59: 36:31:89:2b:9f:5e:10:56:d8:24:be:81:58:bc:d6: a7:3c:4d:07:ca:03:20:fc:30:5f:ea:ee:18:03:4e: 2f:ba:87:60:f5:07:e0:93:00:42:94:2b:f5:ff:f6: 21:90:57:15:a7:ec:2e:64:f2:1c:c3:9c:55:e5:67: 95:8b:d2:89:a4:c4:95:22:ba:30:8d:9c:b0:aa:d1: e5:fe:1b:3a:88:d2:c9:27:68:95:00:88:04:f8:01: e9:b9:a7:5e:1a:ab:e2:63:e4:00:47:ff:36:e3:1f: ad:ea:a4:6c:30:30:01:1b:0e:d2:55:d0:d0:1c:88: b6:a4:7a:1c:10:c6:71:59:91:50:c4:44:9a:38:e8: d1:a1:e8:3b:55:f0:65:60:82:e7:7a:20:5f:5c:ca: 36:4b:b6:cb:7f:9e:e9:0f:86:b9:f3:ae:79:7b:2a: 85:00:07:0f:82:cd:74:4c:9a:ec:1a:54:55:4f:e2: d4:bb:81:f4:c5:e7:3d:0d:1a:0a:ed:75:cd:a6:54: b7:b2:92:ab:cd:c7:7b:e2:92:88:6c:bc:ca:f2:8d: 2c:96:72:0a:dc:5c:78:3c:89:fb:0d:0e:4c:b1:fc: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C6:DB:30:EC:FD:7A:B8:D7:EE:F1:10:0F:9B:02:64:46:06:AA:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:2b:9d:c4:3d:90:7d:ad:11:87:1c:09:29:96:0d:9c:86:ce: 09:41:d3:7f:5d:75:4e:28:a8:5b:31:ce:85:8b:e1:1f:bf:d1: aa:e3:52:88:91:42:22:31:1a:d0:91:84:4c:6d:7c:fd:d2:ce: eb:f7:c5:a2:b0:d7:14:1f:ce:55:87:bc:92:c7:5c:fb:77:2f: 35:c0:f6:41:c8:2b:90:f1:46:84:45:99:b5:d4:54:eb:1c:18: af:a2:13:97:52:be:f2:18:9a:7c:eb:ca:99:fb:de:ea:83:af: fa:72:d5:25:15:5a:91:ed:df:b8:b2:03:a7:21:aa:e3:c1:c9: 63:4c:c5:db:47:9e:28:b6:43:db:8b:1e:c9:a6:1c:cb:48:98: 3a:e1:0d:ad:90:e6:70:ce:7c:58:80:13:b0:d5:21:5c:47:41: 74:b1:01:54:c8:35:dd:09:f6:6f:f0:5b:e4:7a:16:a0:30:70: 41:42:e3:ee:e4:a1:2f:79:d3:3f:4e:08:99:40:ad:64:a2:50: 51:46:3d:5f:4e:99:09:1c:07:fc:dd:b4:46:ff:94:05:12:e6: 4f:e6:69:49:7f:7d:5d:05:78:73:33:19:c1:40:7c:60:c4:94: 32:34:7a:a0:95:55:2f:db:19:85:2f:a1:c0:4f:4f:23:b9:32: cc:37:e5:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlQTEi9swC5nwx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzRmNDRlYTktNWE5Ny00M2U5LWE1MDYtYmExMDhlMzI2MTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWoJAmSIrPpbWlLRrmTLvdxxyJNGJNEiSK4c YVk2MYkrn14QVtgkvoFYvNanPE0HygMg/DBf6u4YA04vuodg9QfgkwBClCv1//Yh kFcVp+wuZPIcw5xV5WeVi9KJpMSVIrowjZywqtHl/hs6iNLJJ2iVAIgE+AHpuade GqviY+QAR/824x+t6qRsMDABGw7SVdDQHIi2pHocEMZxWZFQxESaOOjRoeg7VfBl YILneiBfXMo2S7bLf57pD4a58655eyqFAAcPgs10TJrsGlRVT+LUu4H0xec9DRoK 7XXNplS3spKrzcd74pKIbLzK8o0slnIK3Fx4PIn7DQ5Msfwp1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTG2zDs/Xq41+7xEA+bAmRGBqphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvY2ZmMWFiZGMtZmFkYS0z YTFlLWE5NjItMDA0M2MyZGQ3MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0rncQ9kH2tEYccCSmWDZyGzglB039ddU4oqFsxzoWL4R+/0arjUoiR QiIxGtCRhExtfP3Szuv3xaKw1xQfzlWHvJLHXPt3LzXA9kHIK5DxRoRFmbXUVOsc GK+iE5dSvvIYmnzrypn73uqDr/py1SUVWpHt37iyA6chquPByWNMxdtHnii2Q9uL HsmmHMtImDrhDa2Q5nDOfFiAE7DVIVxHQXSxAVTINd0J9m/wW+R6FqAwcEFC4+7k oS950z9OCJlArWSiUFFGPV9OmQkcB/zdtEb/lAUS5k/maUl/fV0FeHMzGcFAfGDE lDI0eqCVVS/bGYUvocBPTyO5Msw35ao= -----END CERTIFICATE-----Generated at Wed Jul 29 11:01:39 2026 by rpki-client