$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ff1f3231-fe68-3f00-9736-157787b8535f.roa File: ff1f3231-fe68-3f00-9736-157787b8535f.roa (raw, json) Hash identifier: EE/m2VrH19VZquKHgKlzuT/fU/6vZzE1l+KVIFwGqmI= Subject key identifier: AB:31:0E:97:51:80:67:74:40:C1:CB:DB:E8:01:60:AA:F2:0E:47:E8 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F498B661EF8B09ED5DBEAB900 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ff1f3231-fe68-3f00-9736-157787b8535f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 199.200.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:66:1e:f8:b0:9e:d5:db:ea:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ce8ee006-ec91-461d-a0a2-9e49006b48ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:62:2b:27:92:58:49:0e:45:c4:19:4a:96: 78:49:f4:6a:0c:f9:23:fa:72:6c:0d:2a:06:f2:28: cb:36:93:0f:eb:fd:c3:d2:6c:dd:62:60:05:6f:04: 81:96:d0:ff:a9:1a:8e:d0:5f:95:3f:35:79:88:3c: 92:d2:61:78:23:10:c4:a8:05:99:c7:9c:f3:6a:7c: d2:fc:68:17:4b:aa:c5:21:7b:35:84:51:76:2f:00: 3a:d4:ae:d2:5d:de:3c:a0:08:7e:09:c8:45:37:2e: 91:6c:e3:3f:a3:0c:53:fc:44:9d:fd:c2:a9:78:ca: 94:62:97:78:9d:4c:cd:bc:46:e3:86:d0:f3:cd:6f: b9:25:52:3f:38:e7:97:19:3b:fc:ca:91:1c:7e:ff: bb:96:70:0a:da:07:c5:7f:cf:35:80:14:20:8f:df: 83:72:4b:b4:7d:c2:8f:66:f0:ab:bc:6f:4e:e6:a9: e1:2c:53:7a:fd:1e:7c:8e:b6:43:fb:0b:ae:f4:bd: 8f:69:1d:7a:82:45:2f:21:b3:a0:6b:33:26:ab:b2: 4a:4f:f5:92:d2:2e:9f:34:9a:06:2d:53:85:d7:64: bb:f7:84:71:34:8a:26:48:7f:5b:59:11:c9:61:1b: af:96:35:dc:ce:59:02:4e:9d:4a:a6:f7:31:3b:64: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:31:0E:97:51:80:67:74:40:C1:CB:DB:E8:01:60:AA:F2:0E:47:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ff1f3231-fe68-3f00-9736-157787b8535f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:14:1f:f1:5b:78:2e:a7:d7:84:db:d9:c3:25:4a:cf:ba:8e: b6:79:ef:c8:e9:bf:36:41:35:a6:7d:5e:9a:df:22:1b:b5:e6: b9:e6:3c:2d:b4:99:a6:f0:f8:2c:30:83:1a:e9:a8:0f:97:21: 30:84:58:f7:0d:d0:fa:60:1d:3e:b6:19:1a:b2:d6:48:36:3e: 67:c6:bd:05:a9:5d:2c:7b:76:db:67:0e:47:96:20:09:49:cd: 09:1d:ce:69:95:93:3d:66:ee:b7:07:c1:3e:79:af:2f:f8:9e: ef:56:59:a0:d3:d8:0d:51:bb:6e:63:ad:b6:45:9d:49:66:a0: d9:3d:a3:3f:0d:8f:75:cb:08:68:10:0e:46:4b:94:f9:b4:4f: 99:28:ca:2b:52:60:5b:61:c3:cb:ce:c4:22:d8:31:eb:d2:ed: 83:ba:e3:31:dd:f5:da:3f:68:d8:49:b5:06:2d:bb:cf:31:59: 17:af:45:5b:e6:72:13:0b:99:c2:3a:46:7a:5a:7b:fb:24:64: f2:a1:b2:35:ff:33:c9:bc:9e:4d:df:01:93:4f:b6:0a:42:ca: 2a:8d:99:f5:61:f4:46:d3:9e:14:34:60:97:45:f3:aa:d7:2b: 30:06:8e:fe:a3:7f:fd:43:11:d9:f2:72:6a:82:e1:46:f4:b7: d2:f6:a8:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2Ye+LCe1dvquQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2U4ZWUwMDYtZWM5MS00NjFkLWEwYTItOWU0OTAwNmI0OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc1iKyeSWEkORcQZSpZ4SfRqDPkj+nJsDSoG 8ijLNpMP6/3D0mzdYmAFbwSBltD/qRqO0F+VPzV5iDyS0mF4IxDEqAWZx5zzanzS /GgXS6rFIXs1hFF2LwA61K7SXd48oAh+CchFNy6RbOM/owxT/ESd/cKpeMqUYpd4 nUzNvEbjhtDzzW+5JVI/OOeXGTv8ypEcfv+7lnAK2gfFf881gBQgj9+Dcku0fcKP ZvCrvG9O5qnhLFN6/R58jrZD+wuu9L2PaR16gkUvIbOgazMmq7JKT/WS0i6fNJoG LVOF12S794RxNIomSH9bWRHJYRuvljXczlkCTp1KpvcxO2RpEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsxDpdRgGd0QMHL2+gBYKryDkfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZmYxZjMyMzEtZmU2OC0z ZjAwLTk3MzYtMTU3Nzg3Yjg1MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMUH/FbeC6n14Tb2cMlSs+6jrZ578jpvzZBNaZ9XprfIhu15rnmPC20 mabw+CwwgxrpqA+XITCEWPcN0PpgHT62GRqy1kg2PmfGvQWpXSx7dttnDkeWIAlJ zQkdzmmVkz1m7rcHwT55ry/4nu9WWaDT2A1Ru25jrbZFnUlmoNk9oz8Nj3XLCGgQ DkZLlPm0T5koyitSYFthw8vOxCLYMevS7YO64zHd9do/aNhJtQYtu88xWRevRVvm chMLmcI6Rnpae/skZPKhsjX/M8m8nk3fAZNPtgpCyiqNmfVh9EbTnhQ0YJdF86rX KzAGjv6jf/1DEdnycmqC4Ub0t9L2qJc= -----END CERTIFICATE-----Generated at Thu Oct 8 03:45:19 2026 by rpki-client