$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa File: baf36f1f-7681-3019-9422-c187c0a3a355.roa (raw, json) Hash identifier: 3mUUhaOozarATWB1nWGCe9aqQU4M1s92pzG8OsDWNWw= Subject key identifier: 8F:36:8F:D1:14:DA:BF:50:95:22:1D:37:68:85:68:2C:F2:2A:84:89 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F4972DF83C139D4D3E7F4F300 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 173.244.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:df:83:c1:39:d4:d3:e7:f4:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7978fbed-b6c9-49ae-a4d2-a5b0a5bd267f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8a:6b:4c:f9:5f:ef:eb:c6:89:55:0f:b9:14: 03:7a:a4:6f:cc:da:91:34:f9:20:67:9d:ae:ef:f2: dc:0f:18:0d:c7:fe:57:38:65:b6:35:ee:5e:50:0b: 67:81:dd:cd:af:08:05:54:a5:ed:b4:05:29:d9:56: 71:42:ea:52:49:dc:5e:d2:44:1d:af:e2:77:97:3c: 57:00:7b:bc:0d:f6:95:24:c3:35:1b:c6:7e:47:cd: 00:60:d9:78:aa:90:22:73:1f:84:85:bf:22:68:aa: ce:69:8d:1b:58:98:5f:65:1b:7e:62:81:47:09:7d: aa:3b:51:c0:c1:d6:b6:8c:82:21:ed:12:88:f5:a7: 27:76:f2:89:f1:4e:e1:5a:ed:ad:a6:a8:54:32:60: 38:35:9c:57:0c:6d:14:00:43:fe:bc:c3:ce:bb:ae: 3a:35:d7:61:58:fa:db:06:ef:e1:13:8b:d5:51:59: 3b:ff:e4:8e:25:7f:dc:37:50:43:93:43:9f:4a:39: 31:4e:74:10:7b:06:1e:f6:46:d0:ef:61:e2:50:43: 20:c0:b3:cc:49:a5:31:9f:77:4a:e5:a2:9d:85:d7: bb:9b:32:fb:cc:47:a1:47:24:61:95:7f:85:5d:a5: 15:74:ec:bf:57:97:1c:b2:32:0e:ee:9c:6c:05:80: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:8F:D1:14:DA:BF:50:95:22:1D:37:68:85:68:2C:F2:2A:84:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/baf36f1f-7681-3019-9422-c187c0a3a355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 173.244.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:25:c6:00:e4:10:9a:e0:0c:b9:88:6d:48:9a:45:73:d1:95: 00:04:d4:fe:03:ed:66:2a:0e:f2:bc:ee:c4:38:d1:f0:ce:3f: f7:aa:95:05:e1:b0:94:5f:8b:de:64:c7:1c:0a:7c:26:05:05: 60:04:03:ea:ec:62:8e:8d:80:1d:07:5d:61:e8:23:0d:af:a5: 6a:fe:47:27:04:18:f4:bf:86:a0:2d:05:2a:a4:8c:5c:8c:8a: 3a:1a:6f:0e:05:a9:b1:4a:af:62:62:f7:ed:34:d0:f6:a7:24: eb:67:86:d5:52:c6:76:dd:a7:97:86:71:d1:46:ac:f4:dd:75: df:73:ad:e4:fd:09:4b:7a:58:be:12:7d:50:86:27:15:46:71: ca:b5:ec:ce:f9:60:64:ec:13:d9:69:ab:fc:fc:b4:6a:da:e5: 0c:68:e6:96:ed:c1:70:7f:a3:20:90:d1:1f:50:77:97:bb:09: fd:ce:ac:1e:46:a1:7a:bf:d5:fe:11:17:05:bb:f1:42:c5:dd: fd:f0:71:df:f9:e2:2c:f3:66:ab:73:ad:79:2a:8c:67:d9:9e: d2:10:4b:8e:83:4d:df:54:72:ce:52:5b:1d:6c:06:ee:52:78: 69:6c:cf:42:28:e3:6f:f3:1e:65:d8:9d:32:eb:8d:c5:73:b1: 60:4d:18:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jct+DwTnU0+f08wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzk3OGZiZWQtYjZjOS00OWFlLWE0ZDItYTViMGE1YmQyNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYprTPlf7+vGiVUPuRQDeqRvzNqRNPkgZ52u 7/LcDxgNx/5XOGW2Ne5eUAtngd3NrwgFVKXttAUp2VZxQupSSdxe0kQdr+J3lzxX AHu8DfaVJMM1G8Z+R80AYNl4qpAicx+Ehb8iaKrOaY0bWJhfZRt+YoFHCX2qO1HA wda2jIIh7RKI9acndvKJ8U7hWu2tpqhUMmA4NZxXDG0UAEP+vMPOu646NddhWPrb Bu/hE4vVUVk7/+SOJX/cN1BDk0OfSjkxTnQQewYe9kbQ72HiUEMgwLPMSaUxn3dK 5aKdhde7mzL7zEehRyRhlX+FXaUVdOy/V5ccsjIO7pxsBYAfGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI82j9EU2r9QlSIdN2iFaCzyKoSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYmFmMzZmMWYtNzY4MS0z MDE5LTk0MjItYzE4N2MwYTNhMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAklxgDkEJrgDLmIbUiaRXPRlQAE1P4D7WYqDvK87sQ40fDOP/eqlQXh sJRfi95kxxwKfCYFBWAEA+rsYo6NgB0HXWHoIw2vpWr+RycEGPS/hqAtBSqkjFyM ijoabw4FqbFKr2Ji9+000PanJOtnhtVSxnbdp5eGcdFGrPTddd9zreT9CUt6WL4S fVCGJxVGccq17M75YGTsE9lpq/z8tGra5Qxo5pbtwXB/oyCQ0R9Qd5e7Cf3OrB5G oXq/1f4RFwW78ULF3f3wcd/54izzZqtzrXkqjGfZntIQS46DTd9Ucs5SWx1sBu5S eGlsz0Io42/zHmXYnTLrjcVzsWBNGCw= -----END CERTIFICATE-----Generated at Mon Oct 12 04:50:23 2026 by rpki-client