$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa File: cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa (raw, json) Hash identifier: R7AUqgHOP1QeSSEhX1TxVzpbR0DenIotsVDT09CYf5k= Subject key identifier: BD:82:4D:F6:64:AD:A3:18:FF:7C:F1:85:CD:06:6A:12:A8:5C:2C:EE Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F4987CA653C35469BCC37AA40 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 199.200.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:ca:65:3c:35:46:9b:cc:37:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f1f3bd20-0c33-483e-b06c-b23ab638226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:92:5b:2e:ca:1a:a5:e3:c3:de:a0:0e:7b: e6:a5:cb:c8:a1:65:19:e6:d4:78:80:78:ce:bd:2e: 38:76:df:1a:a2:43:f5:72:0e:62:98:59:4b:f9:ef: 63:76:9a:a2:e2:1a:3a:7b:7c:c2:94:67:76:ec:77: 98:41:a3:1f:c6:ec:06:53:24:47:94:d2:40:56:58: 52:53:1d:72:56:39:28:3b:32:ff:47:bf:90:e1:f2: 08:cb:c7:5d:c4:89:8a:cb:f3:f8:50:0b:90:ef:b1: 97:f7:cc:b0:0a:87:4b:b5:0d:2f:d5:7c:a4:af:2e: d9:4f:34:ab:4d:cc:3b:a6:79:8e:e8:50:fe:fe:4b: 6d:07:40:d8:f6:65:01:cc:e9:24:18:54:8a:91:4b: 3d:63:cb:87:ad:ca:38:61:7b:f7:d3:38:a9:77:84: 23:27:d1:a1:db:94:e5:e6:89:ad:05:5d:b2:5f:27: e2:13:82:19:a5:08:fb:ef:e9:a2:90:a6:43:94:83: 4e:32:0f:2e:70:71:82:e5:c7:c6:32:e9:f6:38:dd: 60:fe:77:ce:78:a0:45:19:b5:84:93:ab:e1:cd:d0: 99:87:37:1c:d9:fe:fe:25:09:e7:79:ed:69:c6:56: c6:52:5e:55:df:13:ac:27:ab:f2:a7:97:60:89:ef: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:82:4D:F6:64:AD:A3:18:FF:7C:F1:85:CD:06:6A:12:A8:5C:2C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/cff1abdc-fada-3a1e-a962-0043c2dd71b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:2e:74:a2:a6:d4:25:7d:ca:4a:95:ae:f6:91:c9:0c:77:4d: b0:a0:b7:82:b8:57:80:c1:0d:08:50:e6:08:1b:1b:5c:7d:55: 93:56:e1:1b:0f:4c:d6:78:ff:24:90:47:bb:ab:85:ff:9e:34: 45:cc:7b:f8:67:6d:dd:d1:f4:9a:12:d0:e3:32:42:af:05:96: d6:d4:06:52:fa:44:af:1b:72:2b:59:d5:50:ea:b4:b6:55:bd: b1:08:38:b8:f9:19:08:f7:a0:0f:b2:f2:7a:82:eb:dd:59:3f: 37:8c:22:89:0c:e2:e2:35:70:82:27:66:5c:38:9a:a6:5a:b0: eb:62:df:77:44:37:ac:c0:9f:db:3b:3c:41:93:ae:62:32:69: 04:07:8c:bf:1d:4f:cd:08:f2:c1:c7:4a:86:f6:6b:37:d1:d2: d9:80:7d:89:57:7f:d0:f7:4f:63:b4:35:7c:ff:8b:d0:98:5c: 45:87:d7:8c:03:82:66:e8:d6:60:7a:11:74:54:a2:6f:a7:c8: a7:e1:c8:9e:e8:86:56:e3:13:8c:d3:5c:76:bc:c7:5f:7d:d2: ba:34:6e:6d:86:2f:91:22:36:7d:18:ba:4a:9d:18:3f:b2:4a: cc:bb:7a:46:fb:67:f7:80:f6:ab:31:aa:0c:4b:9b:ca:83:ba: c7:68:ca:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh8plPDVGm8w3qkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjFmM2JkMjAtMGMzMy00ODNlLWIwNmMtYjIzYWI2MzgyMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgimSWy7KGqXjw96gDnvmpcvIoWUZ5tR4gHjO vS44dt8aokP1cg5imFlL+e9jdpqi4ho6e3zClGd27HeYQaMfxuwGUyRHlNJAVlhS Ux1yVjkoOzL/R7+Q4fIIy8ddxImKy/P4UAuQ77GX98ywCodLtQ0v1Xykry7ZTzSr Tcw7pnmO6FD+/kttB0DY9mUBzOkkGFSKkUs9Y8uHrco4YXv30zipd4QjJ9Gh25Tl 5omtBV2yXyfiE4IZpQj77+mikKZDlINOMg8ucHGC5cfGMun2ON1g/nfOeKBFGbWE k6vhzdCZhzcc2f7+JQnnee1pxlbGUl5V3xOsJ6vyp5dgie+hGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2CTfZkraMY/3zxhc0GahKoXCzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvY2ZmMWFiZGMtZmFkYS0z YTFlLWE5NjItMDA0M2MyZGQ3MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEudKKm1CV9ykqVrvaRyQx3TbCgt4K4V4DBDQhQ5ggbG1x9VZNW4RsP TNZ4/ySQR7urhf+eNEXMe/hnbd3R9JoS0OMyQq8FltbUBlL6RK8bcitZ1VDqtLZV vbEIOLj5GQj3oA+y8nqC691ZPzeMIokM4uI1cIInZlw4mqZasOti33dEN6zAn9s7 PEGTrmIyaQQHjL8dT80I8sHHSob2azfR0tmAfYlXf9D3T2O0NXz/i9CYXEWH14wD gmbo1mB6EXRUom+nyKfhyJ7ohlbjE4zTXHa8x1990ro0bm2GL5EiNn0YukqdGD+y Ssy7ekb7Z/eA9qsxqgxLm8qDusdoyjg= -----END CERTIFICATE-----Generated at Tue Oct 6 05:58:03 2026 by rpki-client