$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa File: 1aea4482-4596-3858-b921-9cdd4d27ea47.roa (raw, json) Hash identifier: KflWFkgIY0S0goRpoRHqn9a8QK6/BQC8LkpSMMzTAVk= Subject key identifier: 1E:50:1E:3E:71:FB:12:8A:B5:92:C6:E8:B6:EC:EC:73:D0:40:C4:0C Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584DF0AB49C3454BBC4BED91FD80 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 15164 IP address blocks: 199.200.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:49:c3:45:4b:bc:4b:ed:91:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=20329a9e-61b7-445d-aed1-f718c82a25d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f4:dd:ab:4e:c7:9c:b9:77:7e:d8:b5:bf:22: 84:85:47:32:66:9e:50:89:d4:8b:34:ca:69:22:7e: 6f:f8:ee:89:a6:9b:41:10:7e:85:c4:b2:3b:7a:7f: 4e:13:e6:22:02:24:54:14:23:46:b7:14:3b:9a:77: 55:8a:89:93:0f:be:01:0a:ae:b3:08:c5:d1:2f:51: 63:c7:35:6f:6a:40:f9:37:d5:86:76:37:7d:73:68: e6:e0:27:aa:c2:29:0c:34:45:f4:21:1a:88:36:ac: 0b:a9:cf:41:98:86:d8:6a:95:fc:23:89:fe:59:e8: 17:a8:d3:49:31:e6:6c:3c:d0:af:a7:48:6a:3e:6a: b4:54:df:64:9d:2a:54:14:54:ed:98:8a:63:65:8c: 0f:f7:24:43:60:98:bb:82:55:90:ff:ea:43:7d:18: cb:1d:20:40:e3:63:c4:89:fa:8e:9e:45:51:fc:bf: d8:65:90:dd:45:ae:9c:5f:85:d1:c6:c1:52:3f:4d: f0:73:dd:c0:b6:4e:ba:26:35:e1:85:a2:b5:f6:ef: ab:d7:94:ec:d9:63:2e:68:38:0b:51:e9:6c:fd:33: b0:a1:2a:97:1b:f7:63:ee:2a:db:78:50:06:d5:6b: 90:3c:d9:aa:4f:70:00:45:33:5b:ef:12:17:8c:0a: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:50:1E:3E:71:FB:12:8A:B5:92:C6:E8:B6:EC:EC:73:D0:40:C4:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:20:a0:63:9b:ec:30:4b:b6:9a:a7:f1:19:9b:9a:53:1d:10: be:be:f5:53:8c:fd:ab:ff:b0:59:a5:1c:bf:ac:38:50:46:5b: 0b:14:80:f5:b8:be:2d:f9:0b:26:30:d4:76:58:ca:85:09:f4: 76:33:aa:cb:5b:e7:4c:21:e9:38:33:be:4d:83:1f:fd:b3:1e: 84:81:bc:84:94:55:b6:61:ef:be:07:97:0a:93:f0:a6:9e:f7: d8:7d:92:f9:f9:c1:e2:6a:61:3e:5c:4f:0f:01:03:ba:f4:f1: e4:05:d3:de:0e:6c:c7:00:bd:30:83:95:3b:fe:f7:40:17:90: 90:a1:ff:9d:46:ca:a2:42:f0:0b:76:30:03:dc:4c:f3:64:3b: 86:a4:67:44:c6:ff:f2:67:76:d4:15:b5:99:ad:60:77:03:2c: 99:b2:31:b5:4e:f6:e9:6a:dc:b7:ee:0f:c6:0d:74:c2:52:02: 8d:3d:92:ea:36:d3:4f:ae:d2:fc:21:a9:6f:3e:14:a4:4f:9f: 1c:ed:10:ed:2d:80:b8:05:12:aa:4f:4c:89:b4:ad:1f:a3:62: 65:d0:11:ea:5a:6e:2d:d1:7e:f3:7a:9e:69:95:89:98:80:d8: ad:2a:f9:6b:5e:3e:e0:b7:bd:e1:04:29:72:17:9a:f2:35:aa: 3f:93:05:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wq0nDRUu8S+2R/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk MjAzMjlhOWUtNjFiNy00NDVkLWFlZDEtZjcxOGM4MmEyNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Tdq07HnLl3fti1vyKEhUcyZp5QidSLNMpp In5v+O6JpptBEH6FxLI7en9OE+YiAiRUFCNGtxQ7mndViomTD74BCq6zCMXRL1Fj xzVvakD5N9WGdjd9c2jm4CeqwikMNEX0IRqINqwLqc9BmIbYapX8I4n+WegXqNNJ MeZsPNCvp0hqPmq0VN9knSpUFFTtmIpjZYwP9yRDYJi7glWQ/+pDfRjLHSBA42PE ifqOnkVR/L/YZZDdRa6cX4XRxsFSP03wc93Atk66JjXhhaK19u+r15Ts2WMuaDgL Uels/TOwoSqXG/dj7irbeFAG1WuQPNmqT3AARTNb7xIXjArRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5QHj5x+xKKtZLG6Lbs7HPQQMQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMWFlYTQ0ODItNDU5Ni0z ODU4LWI5MjEtOWNkZDRkMjdlYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcgoGOb7DBLtpqn8RmbmlMdEL6+9VOM/av/sFmlHL+sOFBGWwsUgPW4 vi35CyYw1HZYyoUJ9HYzqstb50wh6Tgzvk2DH/2zHoSBvISUVbZh774HlwqT8Kae 99h9kvn5weJqYT5cTw8BA7r08eQF094ObMcAvTCDlTv+90AXkJCh/51GyqJC8At2 MAPcTPNkO4akZ0TG//JndtQVtZmtYHcDLJmyMbVO9ulq3LfuD8YNdMJSAo09kuo2 00+u0vwhqW8+FKRPnxztEO0tgLgFEqpPTIm0rR+jYmXQEepabi3RfvN6nmmViZiA 2K0q+WtePuC3veEEKXIXmvI1qj+TBeQ= -----END CERTIFICATE-----Generated at Sat Jun 13 01:50:57 2026 by rpki-client