$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa File: 0609aee8-be76-3063-9d65-d282b41f7e4b.roa (raw, json) Hash identifier: VO/hruPujHxpFdhfSU+9EE5KGOJcpEjGkuE/E+RY5ys= Subject key identifier: 01:21:7B:0B:F8:61:76:82:91:E2:1D:97:8E:05:37:A3:23:94:E5:02 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F49877780B5DEF68373108980 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 74.51.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:77:80:b5:de:f6:83:73:10:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f38c1d83-3173-4b98-8a63-c3e53934ffd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:dc:1f:f2:5b:12:f2:21:d9:47:d7:3f:d8: fa:3f:a7:bf:5d:ae:cf:e3:fc:6c:4e:38:fd:68:07: e4:c0:09:93:3e:d3:28:1b:db:8d:c8:c1:3a:fb:1d: 99:21:ec:bf:1e:d4:5f:45:e8:5d:af:d2:21:cf:2f: 15:5f:b6:c0:61:fc:36:77:9f:09:c9:c4:22:50:8e: 02:2a:f9:4b:1a:50:9d:fd:7c:98:37:9b:81:b9:bd: 75:ea:19:3f:75:0a:30:86:b9:dd:4e:b7:e6:ac:e5: f5:62:6d:08:3c:03:bd:2d:9b:2c:87:b6:3f:f7:83: ae:a7:12:bf:cf:9c:81:26:e7:b1:08:bd:43:56:a7: e1:60:7e:c8:c7:e1:35:f1:ed:d7:4e:0b:52:f7:3b: 82:8a:83:5a:ed:6d:bc:66:c5:a0:78:96:68:0b:bf: ee:97:49:76:e3:f5:83:82:d3:19:2d:49:12:13:bc: d5:ef:b7:7a:05:8e:59:b3:61:cb:a3:b7:30:92:c8: 9f:10:b4:2e:70:65:cc:9e:ca:a3:7e:8a:c0:4d:4b: 23:de:51:0b:9d:5e:f7:c1:91:d2:b0:8c:1d:c0:e1: d6:d1:61:31:e3:39:dd:7f:3c:cc:75:c2:c5:74:80: df:c1:6c:64:35:1a:88:12:a0:ca:c6:86:70:b0:e8: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:21:7B:0B:F8:61:76:82:91:E2:1D:97:8E:05:37:A3:23:94:E5:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0609aee8-be76-3063-9d65-d282b41f7e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 74.51.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:be:21:3e:8e:5a:b6:bf:ac:cf:1f:d4:fa:2a:d4:46:b8:8d: 15:85:33:b8:7a:6b:fe:9b:aa:de:36:a1:26:47:17:61:bf:3e: 10:8a:14:73:1c:c3:2b:ab:5b:eb:ab:9e:48:e5:4f:be:b9:4d: 1c:77:b1:f8:45:53:3c:10:2a:5d:85:b2:c4:51:11:13:51:ba: 84:99:00:f0:6e:27:f4:33:ac:1a:17:7a:0b:d0:dc:b5:1f:54: 64:28:e3:2c:02:40:ab:81:bb:9a:e7:24:35:e1:36:81:ce:f9: ad:eb:c3:59:ef:62:ce:e5:44:6f:e3:0f:10:51:65:e5:d0:89: 04:53:c1:b9:02:0f:81:41:65:4f:a6:38:d3:3a:da:24:78:ea: 69:71:76:93:c1:00:d3:07:13:b7:4d:a7:ad:53:38:7e:ea:82: 94:26:39:61:76:5e:a9:3b:42:6f:9f:ae:22:7a:1c:68:88:09: a2:ec:88:33:28:01:ba:62:c0:33:66:98:4a:39:9a:0a:6d:22: ac:ce:fa:8b:22:ec:3e:c7:45:3a:61:56:55:b4:18:56:3f:b4: d4:82:66:78:df:54:cf:b5:4d:7f:e7:3c:46:14:ff:c1:9c:da: 42:99:10:9e:83:d0:c9:18:94:f6:e4:db:5b:dd:32:40:58:58: 72:61:6c:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh3eAtd72g3MQiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjM4YzFkODMtMzE3My00Yjk4LThhNjMtYzNlNTM5MzRmZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydrcH/JbEvIh2UfXP9j6P6e/Xa7P4/xsTjj9 aAfkwAmTPtMoG9uNyME6+x2ZIey/HtRfRehdr9Ihzy8VX7bAYfw2d58JycQiUI4C KvlLGlCd/XyYN5uBub116hk/dQowhrndTrfmrOX1Ym0IPAO9LZssh7Y/94OupxK/ z5yBJuexCL1DVqfhYH7Ix+E18e3XTgtS9zuCioNa7W28ZsWgeJZoC7/ul0l24/WD gtMZLUkSE7zV77d6BY5Zs2HLo7cwksifELQucGXMnsqjforATUsj3lELnV73wZHS sIwdwOHW0WEx4zndfzzMdcLFdIDfwWxkNRqIEqDKxoZwsOiM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEhewv4YXaCkeIdl44FN6MjlOUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMDYwOWFlZTgtYmU3Ni0z MDYzLTlkNjUtZDI4MmI0MWY3ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG+IT6OWra/rM8f1Poq1Ea4jRWFM7h6a/6bqt42oSZHF2G/PhCKFHMc wyurW+urnkjlT765TRx3sfhFUzwQKl2FssRRERNRuoSZAPBuJ/QzrBoXegvQ3LUf VGQo4ywCQKuBu5rnJDXhNoHO+a3rw1nvYs7lRG/jDxBRZeXQiQRTwbkCD4FBZU+m ONM62iR46mlxdpPBANMHE7dNp61TOH7qgpQmOWF2Xqk7Qm+friJ6HGiICaLsiDMo AbpiwDNmmEo5mgptIqzO+osi7D7HRTphVlW0GFY/tNSCZnjfVM+1TX/nPEYU/8Gc 2kKZEJ6D0MkYlPbk21vdMkBYWHJhbD4= -----END CERTIFICATE-----Generated at Sat Oct 3 12:58:10 2026 by rpki-client