$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa File: e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa (raw, json) Hash identifier: /RxsOeRZMazMsqSQ68KA3PZUhovO87hc6iD05TlmU9Q= Subject key identifier: 21:9A:48:E6:16:C3:B5:F6:CF:4D:94:73:46:7E:63:6F:EE:49:C7:12 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584EA795050E40D312B2E1F71B80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15164 IP address blocks: 173.244.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:05:0e:40:d3:12:b2:e1:f7:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=23fde4e7-de22-4ec7-8007-de3bd4ff9369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:24:6f:77:83:5e:5d:a5:d0:a6:01:60:59: b4:e8:dd:33:34:c5:cc:f0:b6:10:5a:60:ae:ce:11: c8:83:1f:27:f4:49:b9:04:ad:2b:b7:7e:81:cd:7f: 17:a0:b5:74:73:cc:b4:91:50:6f:a3:47:45:55:c8: 67:58:06:62:61:09:16:51:9b:43:db:e1:fc:7b:bc: a1:9b:b2:9e:f4:20:d4:f4:b6:87:3c:fd:42:b1:df: 0f:64:90:3b:63:73:77:19:05:c6:b2:fe:fd:b3:db: 6c:77:3d:bf:07:00:2d:52:82:d3:56:f0:a1:46:af: 59:3e:ff:b6:0a:0b:c1:fe:85:08:b3:2f:47:c3:76: 1f:60:3b:f2:f0:f8:d6:33:60:b0:73:ce:69:b9:0d: 42:25:b5:fa:ab:3e:f0:0a:42:bf:ce:c3:87:c1:3f: 2b:55:12:c8:b9:05:7e:91:09:0b:b1:ee:9a:e8:54: ff:e8:f9:47:28:87:4f:92:e9:bb:b4:34:35:30:89: c0:e8:12:92:0d:90:d2:16:cf:92:47:0c:b6:4f:8f: 73:fc:f4:e6:ef:d7:df:53:5d:23:03:e8:7e:86:8c: 17:1a:45:22:81:70:2e:14:ff:70:d7:b9:f2:5b:52: 78:77:a9:bb:b8:cf:8d:23:0f:bd:06:bb:82:e1:3d: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9A:48:E6:16:C3:B5:F6:CF:4D:94:73:46:7E:63:6F:EE:49:C7:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7f0aaf0-1ca0-39c7-ab01-0cb521389e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ff:9d:24:9a:3f:01:04:a8:53:ce:d2:b6:a4:53:2b:59:56: 67:33:28:38:08:6c:31:8e:d6:e1:19:73:df:95:8f:04:f9:e1: 6a:ba:8b:8c:17:3c:9c:36:ac:5d:00:d1:6e:3e:e0:43:50:1a: 61:d6:f5:62:78:fb:fd:58:35:84:7d:15:e7:99:ac:49:3c:d7: d2:bc:46:9e:d8:fb:a7:f5:e0:2e:e6:ff:10:7b:75:74:a9:49: 9e:44:8c:49:3f:be:da:1e:fc:47:a2:80:72:a2:5c:91:e9:cc: 59:7b:27:59:e2:0f:23:9c:99:0d:18:49:22:04:0f:9f:4a:99: 28:18:f9:50:5b:f6:e3:32:d2:43:9e:b2:a5:b5:c3:93:31:a5: b9:1a:5c:a8:a1:7f:8e:f7:e6:5f:e2:53:ad:9e:70:0e:c1:19: 0a:71:f1:b6:3f:2d:17:3c:b9:ff:54:82:1c:17:0c:d4:8e:3c: 00:dd:11:f9:b7:d0:9a:ba:b4:63:82:93:9d:96:58:23:b2:26: 7f:9a:d4:4d:c2:64:ed:1d:28:0d:6a:6b:d4:80:9c:3f:4a:01: 5d:47:1f:5e:31:70:f2:08:ee:ce:4d:48:95:63:8f:ae:65:73: 08:4b:52:25:2b:08:09:3e:4e:2d:ca:7f:cc:2d:68:ea:bb:cf: d7:4c:27:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlQUOQNMSsuH3G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjNmZGU0ZTctZGUyMi00ZWM3LTgwMDctZGUzYmQ0ZmY5MzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdIkb3eDXl2l0KYBYFm06N0zNMXM8LYQWmCu zhHIgx8n9Em5BK0rt36BzX8XoLV0c8y0kVBvo0dFVchnWAZiYQkWUZtD2+H8e7yh m7Ke9CDU9LaHPP1Csd8PZJA7Y3N3GQXGsv79s9tsdz2/BwAtUoLTVvChRq9ZPv+2 CgvB/oUIsy9Hw3YfYDvy8PjWM2Cwc85puQ1CJbX6qz7wCkK/zsOHwT8rVRLIuQV+ kQkLse6a6FT/6PlHKIdPkum7tDQ1MInA6BKSDZDSFs+SRwy2T49z/PTm79ffU10j A+h+howXGkUigXAuFP9w17nyW1J4d6m7uM+NIw+9BruC4T2eAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGaSOYWw7X2z02Uc0Z+Y2/uSccSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZTdmMGFhZjAtMWNhMC0z OWM3LWFiMDEtMGNiNTIxMzg5ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH/nSSaPwEEqFPO0rakUytZVmczKDgIbDGO1uEZc9+VjwT54Wq6i4wX PJw2rF0A0W4+4ENQGmHW9WJ4+/1YNYR9FeeZrEk819K8Rp7Y+6f14C7m/xB7dXSp SZ5EjEk/vtoe/EeigHKiXJHpzFl7J1niDyOcmQ0YSSIED59KmSgY+VBb9uMy0kOe sqW1w5MxpbkaXKihf4735l/iU62ecA7BGQpx8bY/LRc8uf9UghwXDNSOPADdEfm3 0Jq6tGOCk52WWCOyJn+a1E3CZO0dKA1qa9SAnD9KAV1HH14xcPII7s5NSJVjj65l cwhLUiUrCAk+Ti3Kf8wtaOq7z9dMJ0M= -----END CERTIFICATE-----Generated at Wed Jul 29 09:33:54 2026 by rpki-client