$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa File: 91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa (raw, json) Hash identifier: X7YCBpofWxFdYhXAaGyWDWXlSnfLE57xW793rGmblyU= Subject key identifier: 71:B5:75:71:C5:32:9D:90:D2:F7:12:12:CA:E7:AA:E2:F1:9F:83:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F1897B73A9186108F4F814480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 7342 IP address blocks: 209.131.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b7:3a:91:86:10:8f:4f:81:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=4c5fc8d1-acca-4fa2-a385-f9693489d902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:6d:df:f9:e0:a6:66:4b:7b:8c:62:f6:ac: 49:09:cc:0f:8d:89:66:56:82:a3:75:dc:38:06:4a: 52:ed:a8:f2:dd:73:27:1e:9a:86:3c:e2:1f:57:f4: 15:d9:41:ac:bd:f9:4a:34:17:8d:aa:1e:2d:b7:bf: 2b:bc:70:f7:0c:8b:f6:7c:5f:de:83:0e:12:39:e1: 54:57:b4:19:8d:e6:05:9a:c2:19:1f:aa:0c:54:a2: f3:27:f0:2a:18:fe:11:0a:dc:3b:6c:d6:53:4f:5d: ee:e5:49:9a:53:8f:75:0d:ec:1e:93:0f:3f:89:ce: a2:be:b5:85:c0:d6:ba:fe:f9:65:66:ec:67:8e:d0: d6:b6:55:f2:7f:38:09:21:df:d4:71:30:0f:31:7e: f9:92:2d:5b:87:50:01:a2:e1:80:53:17:f2:4f:75: d5:7a:b4:08:82:29:48:2d:99:94:66:a7:c8:cd:96: e7:33:ad:9f:a3:95:dc:a9:4f:50:65:27:e0:af:17: 76:d1:99:8e:0b:03:6e:b9:1a:72:a1:2e:84:8c:e9: 69:b9:43:39:20:cc:75:d1:0f:7a:7a:fb:47:57:91: 8b:3b:30:68:82:c9:72:24:33:05:c0:81:f1:ab:3f: 93:07:82:9a:03:b1:56:83:a0:9a:a7:32:76:d5:47: 72:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B5:75:71:C5:32:9D:90:D2:F7:12:12:CA:E7:AA:E2:F1:9F:83:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91be5bd1-0b9b-3b4e-81f2-f68c7879c74b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:73:5d:55:e0:88:79:6e:bf:55:0b:62:eb:7b:e7:21:38:82: 99:fd:9e:c9:d7:83:b3:f8:fc:0e:66:0a:8a:65:9b:80:b3:74: 8e:0e:55:87:60:b2:4a:3d:0d:44:e7:d7:b3:7a:88:50:36:a9: 3b:81:88:da:42:3f:80:38:cf:4b:ef:88:91:88:a2:fa:bd:06: 73:6d:7f:f1:38:9b:b9:8c:3a:05:7c:3b:95:05:59:48:d0:0f: 32:21:f7:0c:ef:0a:3a:db:7a:78:98:a6:ab:8e:b8:cd:d1:5b: 9c:48:9c:fa:04:4a:58:6b:85:c4:71:04:52:6c:68:2c:b9:f2: e5:d9:26:ef:e3:d9:53:47:fe:54:80:60:81:45:e9:89:be:9b: 8d:c6:c9:8a:37:8b:a6:04:b1:79:9f:45:76:4b:30:06:7e:28: 15:4e:a1:a2:21:18:51:54:64:a9:80:c9:44:6a:70:ac:c9:29: 18:77:46:f7:49:b1:17:0c:a8:47:bd:7a:ec:c4:5a:cc:41:e0: 8e:3b:22:bd:92:4b:06:c7:c7:43:79:cd:6a:a5:47:19:3c:8e: d9:42:90:22:55:35:fb:69:ea:11:e8:98:a7:12:a4:a9:50:f7: d3:f2:a3:40:87:4c:71:02:a8:e5:40:46:9d:89:a2:db:3b:1d: 7a:60:7a:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7c6kYYQj0+BRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NGM1ZmM4ZDEtYWNjYS00ZmEyLWEzODUtZjk2OTM0ODlkOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9Ft3/ngpmZLe4xi9qxJCcwPjYlmVoKjddw4 BkpS7ajy3XMnHpqGPOIfV/QV2UGsvflKNBeNqh4tt78rvHD3DIv2fF/egw4SOeFU V7QZjeYFmsIZH6oMVKLzJ/AqGP4RCtw7bNZTT13u5UmaU491Dewekw8/ic6ivrWF wNa6/vllZuxnjtDWtlXyfzgJId/UcTAPMX75ki1bh1ABouGAUxfyT3XVerQIgilI LZmUZqfIzZbnM62fo5XcqU9QZSfgrxd20ZmOCwNuuRpyoS6EjOlpuUM5IMx10Q96 evtHV5GLOzBogslyJDMFwIHxqz+TB4KaA7FWg6CapzJ21UdyMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG1dXHFMp2Q0vcSEsrnquLxn4ORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTFiZTViZDEtMGI5Yi0z YjRlLTgxZjItZjY4Yzc4NzljNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJzXVXgiHluv1ULYut75yE4gpn9nsnXg7P4/A5mCoplm4CzdI4OVYdg sko9DUTn17N6iFA2qTuBiNpCP4A4z0vviJGIovq9BnNtf/E4m7mMOgV8O5UFWUjQ DzIh9wzvCjrbeniYpquOuM3RW5xInPoESlhrhcRxBFJsaCy58uXZJu/j2VNH/lSA YIFF6Ym+m43GyYo3i6YEsXmfRXZLMAZ+KBVOoaIhGFFUZKmAyURqcKzJKRh3RvdJ sRcMqEe9euzEWsxB4I47Ir2SSwbHx0N5zWqlRxk8jtlCkCJVNftp6hHomKcSpKlQ 99Pyo0CHTHECqOVARp2Jots7HXpgeu0= -----END CERTIFICATE-----Generated at Sun Sep 27 16:45:57 2026 by rpki-client