$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa File: c9b75257-3222-3571-8c3f-8375e5c50eb2.roa (raw, json) Hash identifier: ssyO31ox5bMUo8ii+PKf++hnoHtk+7f0E/8cgQABsTo= Subject key identifier: 58:0E:95:D1:F8:C4:CE:B0:AF:76:61:49:81:90:7E:F1:67:33:53:69 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F498901DC28187C204BD38318 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 199.200.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:01:dc:28:18:7c:20:4b:d3:83:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ab786fe-ed71-43b6-b70d-fd5c216028e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:15:27:3a:49:ba:56:ab:b8:3e:a0:67:56: 07:be:69:3f:1a:ef:6b:49:67:f6:88:ff:db:ec:76: 2a:b1:cb:61:12:4d:45:a8:f6:0f:f1:23:29:af:1c: 97:76:f4:52:09:01:c3:3c:0e:9a:42:0b:df:d0:83: 5b:45:44:14:98:f2:92:75:0c:ee:fd:ee:e7:de:49: d1:93:40:a9:32:14:7d:53:a6:6c:a3:3a:e0:de:23: d9:e7:3e:68:2d:69:77:f9:e5:ee:4e:ed:36:8b:7a: 2d:bd:9c:96:66:3d:15:20:dc:fe:eb:b1:87:55:76: 25:b1:52:6e:c3:2a:b1:b5:c0:ec:c9:fd:38:ef:06: e4:fa:f4:69:4e:fe:d5:78:84:39:25:c4:03:c7:19: 03:c0:5d:67:3c:9e:30:21:a9:bc:a5:6c:a5:84:34: 25:9d:f3:ca:f7:ff:ce:ad:7b:13:0b:1f:82:84:8d: 8d:0b:4a:ae:52:15:80:db:be:f8:77:5d:b5:3f:7a: 33:98:41:59:8d:38:76:d4:63:9f:c2:c2:84:b7:1a: de:b1:cc:08:80:6c:c0:46:45:74:08:df:20:3b:8e: 5a:4e:d2:d3:bb:c6:86:7c:40:1b:d3:77:72:d7:6b: 3f:05:07:79:b7:db:a3:e9:b4:49:a7:17:6a:10:a8: b8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:95:D1:F8:C4:CE:B0:AF:76:61:49:81:90:7E:F1:67:33:53:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/c9b75257-3222-3571-8c3f-8375e5c50eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:06:7e:1e:9f:b5:f2:d9:58:18:2b:fe:f7:1a:b8:a5:95:4c: fb:94:09:48:d1:b7:a9:7b:94:cf:ee:35:b4:95:48:75:f6:12: 61:a0:86:3c:7e:d1:07:af:96:11:be:83:79:26:bf:54:71:6d: 2f:20:07:10:df:5f:54:6d:8b:10:55:e9:bd:54:a8:d5:16:36: 06:0b:96:52:9e:18:1f:5c:36:9e:e6:1d:22:51:13:93:03:3b: 1c:2d:e6:35:6b:16:77:07:20:65:75:19:0f:32:ef:c1:0b:4e: 42:ac:f9:f0:91:6d:41:3a:d2:c0:73:a4:97:40:66:31:50:2f: 46:51:6a:50:12:39:d7:73:d3:eb:0b:21:a3:65:2b:a4:a9:81: 0b:e9:1a:08:84:36:24:88:04:e2:52:52:5c:f2:9a:8b:1d:98: 04:28:db:03:4f:30:39:c6:32:e6:53:e7:f7:db:3b:c9:b4:1a: a7:36:e9:70:50:ae:0c:a5:be:a2:4c:c2:e7:8f:ed:f9:77:a3: 1d:bf:34:e6:e7:43:f0:6c:29:42:64:49:c0:27:e7:c5:23:7f: a5:b9:f3:93:08:20:f0:20:77:dd:21:79:6d:79:36:82:ac:d4: db:b1:a7:cd:75:b0:34:e1:de:27:96:43:c7:7d:02:00:2d:55: b1:31:fc:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQHcKBh8IEvTgxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmFiNzg2ZmUtZWQ3MS00M2I2LWI3MGQtZmQ1YzIxNjAyOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6oVJzpJularuD6gZ1YHvmk/Gu9rSWf2iP/b 7HYqscthEk1FqPYP8SMprxyXdvRSCQHDPA6aQgvf0INbRUQUmPKSdQzu/e7n3knR k0CpMhR9U6Zsozrg3iPZ5z5oLWl3+eXuTu02i3otvZyWZj0VINz+67GHVXYlsVJu wyqxtcDsyf047wbk+vRpTv7VeIQ5JcQDxxkDwF1nPJ4wIam8pWylhDQlnfPK9//O rXsTCx+ChI2NC0quUhWA2774d121P3ozmEFZjTh21GOfwsKEtxrescwIgGzARkV0 CN8gO45aTtLTu8aGfEAb03dy12s/BQd5t9uj6bRJpxdqEKi4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgOldH4xM6wr3ZhSYGQfvFnM1NpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYzliNzUyNTctMzIyMi0z NTcxLThjM2YtODM3NWU1YzUwZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYGfh6ftfLZWBgr/vcauKWVTPuUCUjRt6l7lM/uNbSVSHX2EmGghjx+ 0QevlhG+g3kmv1RxbS8gBxDfX1RtixBV6b1UqNUWNgYLllKeGB9cNp7mHSJRE5MD Oxwt5jVrFncHIGV1GQ8y78ELTkKs+fCRbUE60sBzpJdAZjFQL0ZRalASOddz0+sL IaNlK6SpgQvpGgiENiSIBOJSUlzymosdmAQo2wNPMDnGMuZT5/fbO8m0Gqc26XBQ rgylvqJMwueP7fl3ox2/NObnQ/BsKUJkScAn58Ujf6W585MIIPAgd90heW15NoKs 1Nuxp811sDTh3ieWQ8d9AgAtVbEx/Dk= -----END CERTIFICATE-----Generated at Sat Oct 10 11:51:44 2026 by rpki-client