$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa File: 9a0e1652-643d-3073-a20b-c2aa99019a4f.roa (raw, json) Hash identifier: Wi2j/q2VguEmNXvSW1QK4CNVOiANFI+5sET8ffyZ1A8= Subject key identifier: 1D:C4:CD:32:50:F8:E9:F4:70:7A:2B:34:8F:D8:F5:2A:E8:C2:6B:48 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F4975E97D2D66FEC69E707E00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 209.71.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e9:7d:2d:66:fe:c6:9e:70:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec77f06c-762d-41bb-a073-d04830dd16ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e8:08:3b:15:e5:16:63:c2:3b:76:64:83:87: 57:32:89:ae:ab:a8:82:ef:f2:a6:6a:43:5b:23:48: c1:15:7b:71:1d:f3:78:24:0a:1b:d9:26:86:49:75: 91:09:f8:08:bf:f6:78:61:a4:d1:85:66:af:2a:9a: 39:2c:5a:48:4b:8f:d0:2e:12:59:3a:ab:09:ed:5f: f1:80:84:66:48:21:9b:a6:ce:bb:d2:fa:8a:44:7b: 07:07:42:d1:0f:f5:b9:55:50:b9:cf:7d:00:36:32: ea:a3:2e:d2:70:81:c0:58:6e:d7:04:c5:07:49:1d: e6:5b:f1:0a:f0:91:cf:99:16:7b:6d:d3:72:18:c3: 7e:01:3b:b1:b7:1d:3a:14:0f:1a:e0:b3:f4:b7:b4: c6:2b:ae:44:61:bb:c1:e0:e4:d0:4b:9d:16:3d:b2: f4:51:7e:69:0f:d3:7a:34:8c:53:71:26:b9:40:6c: 21:7f:ca:1d:ca:53:17:57:62:20:c6:7a:10:6d:2e: 23:41:a0:fb:da:86:04:ec:85:b6:d4:bb:f7:17:c7: bf:73:cc:3d:8a:cf:00:ae:e0:0b:0a:04:50:7e:da: ec:e4:af:40:36:27:a3:8e:7f:f9:a3:66:44:d2:b3: fe:a2:ea:59:9b:4e:0e:a1:48:95:e3:1b:6b:41:8f: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C4:CD:32:50:F8:E9:F4:70:7A:2B:34:8F:D8:F5:2A:E8:C2:6B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/9a0e1652-643d-3073-a20b-c2aa99019a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:75:93:ed:8c:6d:6c:f3:98:66:52:69:b1:0d:d2:7d:e9:4f: 97:d0:17:43:4e:19:75:0e:3d:d3:b5:b6:b7:3a:55:eb:66:5d: 78:17:f4:2b:fc:92:4c:ea:78:64:e9:01:86:39:1a:fd:7e:e0: c4:0e:3a:78:6b:ea:9e:f5:00:b9:a6:79:dd:60:89:d0:a3:77: c4:8b:3e:43:cc:da:25:d7:fe:31:d8:9c:87:f5:02:44:a7:a1: 11:d3:37:55:c5:fa:ff:56:cb:19:1c:d8:13:d4:c3:43:24:47: d4:3a:2d:07:40:e0:fc:27:96:f0:ae:23:6f:11:c1:55:f6:a2: 47:4b:1c:51:f8:b6:51:c8:c0:23:41:b7:97:3b:eb:8b:01:31: 05:f8:d4:19:7e:f3:b7:60:c7:d9:d2:91:36:24:78:c4:83:d8: 1f:cf:ea:f1:50:40:1d:37:a7:6a:8e:05:0d:ac:04:f2:91:67: d9:e1:b0:bb:5c:10:49:7d:d1:b2:81:ff:67:7b:9c:1e:8c:0b: 72:95:37:63:ec:25:47:58:f3:98:da:ac:ba:2d:61:33:87:ff: 6b:81:87:12:a3:65:d5:ef:09:56:4c:d3:51:65:d9:cf:65:86: 2b:60:e3:0b:fd:8e:f1:4f:c7:97:47:57:b2:ad:2a:38:e2:fc: a5:9b:9b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdel9LWb+xp5wfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM3N2YwNmMtNzYyZC00MWJiLWEwNzMtZDA0ODMwZGQxNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgugIOxXlFmPCO3Zkg4dXMomuq6iC7/KmakNb I0jBFXtxHfN4JAob2SaGSXWRCfgIv/Z4YaTRhWavKpo5LFpIS4/QLhJZOqsJ7V/x gIRmSCGbps670vqKRHsHB0LRD/W5VVC5z30ANjLqoy7ScIHAWG7XBMUHSR3mW/EK 8JHPmRZ7bdNyGMN+ATuxtx06FA8a4LP0t7TGK65EYbvB4OTQS50WPbL0UX5pD9N6 NIxTcSa5QGwhf8odylMXV2IgxnoQbS4jQaD72oYE7IW21Lv3F8e/c8w9is8AruAL CgRQftrs5K9ANiejjn/5o2ZE0rP+oupZm04OoUiV4xtrQY9HbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3EzTJQ+On0cHorNI/Y9SrowmtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvOWEwZTE2NTItNjQzZC0z MDczLWEyMGItYzJhYTk5MDE5YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE51k+2MbWzzmGZSabEN0n3pT5fQF0NOGXUOPdO1trc6VetmXXgX9Cv8 kkzqeGTpAYY5Gv1+4MQOOnhr6p71ALmmed1gidCjd8SLPkPM2iXX/jHYnIf1AkSn oRHTN1XF+v9Wyxkc2BPUw0MkR9Q6LQdA4PwnlvCuI28RwVX2okdLHFH4tlHIwCNB t5c764sBMQX41Bl+87dgx9nSkTYkeMSD2B/P6vFQQB03p2qOBQ2sBPKRZ9nhsLtc EEl90bKB/2d7nB6MC3KVN2PsJUdY85jarLotYTOH/2uBhxKjZdXvCVZM01Fl2c9l hitg4wv9jvFPx5dHV7KtKjji/KWbm5A= -----END CERTIFICATE-----Generated at Sun Oct 4 08:26:05 2026 by rpki-client