$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa File: 2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa (raw, json) Hash identifier: bf81cC7f5FYw/1vC5zyst8Bfhy/GPa6+xYuWYvNICG4= Subject key identifier: 98:33:E6:E8:14:A6:61:16:B8:DA:47:97:84:FF:62:D9:B1:BC:F8:17 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584EA78F26526B6793FB5FE78B00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15164 IP address blocks: 209.71.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:26:52:6b:67:93:fb:5f:e7:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=765e12a4-7783-46bb-94c4-0f00f8e16767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:4c:45:a4:34:bc:20:ce:77:e1:26:08:bf: 2e:03:82:0d:29:01:7b:c9:f8:f6:ca:ae:6b:5c:85: 43:1a:cf:52:79:aa:33:f2:e9:5d:10:cc:8a:8d:7c: a3:88:b1:6a:05:50:ec:fc:9c:3d:9d:ae:a5:76:3b: f2:b7:77:7b:9f:6c:4c:ac:61:96:ed:7a:a8:ed:c1: 9d:bd:d7:96:e8:7f:d8:6a:0e:1c:b4:0f:e3:6f:2d: 0b:7f:c4:0a:33:df:3d:d1:04:d7:d6:f2:70:e5:00: 99:9a:b2:13:63:63:28:11:94:52:4e:f2:f0:92:40: 4f:d6:0f:87:bb:59:49:cc:6c:e1:9d:f6:9e:b9:4a: 84:3d:6b:a1:18:19:b9:25:a1:bd:f1:dd:c7:2c:d5: 61:5e:1d:f6:c6:83:c9:a6:cd:f4:5c:9d:d6:a9:c2: 54:da:af:e0:1e:bd:e2:b8:67:d1:8f:17:19:3b:24: 4a:30:f6:f0:28:dd:6f:42:ce:45:b5:16:9c:e0:e4: ff:2c:fd:a8:33:ea:e7:07:07:f4:ce:60:55:3a:51: ed:91:93:8b:28:29:8a:08:4d:f3:61:ec:93:e2:d8: 00:51:b6:56:c7:e3:a1:bf:2c:20:b9:a1:a0:95:94: d0:7a:4b:c1:3f:cf:46:ff:a4:98:03:81:cd:fa:f1: ad:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:33:E6:E8:14:A6:61:16:B8:DA:47:97:84:FF:62:D9:B1:BC:F8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/2a32c0a1-ed1b-3a3e-b380-918374d77f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6a:78:a1:32:eb:2a:b2:1d:49:8e:54:b0:0f:79:b1:df:76: a5:5d:5d:aa:2b:00:2c:19:f8:60:3d:83:1e:16:0d:bc:af:58: df:ed:30:d7:d2:13:be:7d:e6:8d:99:6f:37:7c:40:f6:fb:94: 4d:f0:eb:d9:e3:40:b9:29:de:13:95:52:ba:cc:fe:1a:5a:54: 6a:cb:1e:80:4d:38:82:fc:3c:ed:e0:dc:19:a7:bd:17:49:12: ca:c1:2f:93:d7:17:44:30:6d:f7:70:c0:04:d6:4d:48:19:f2: 1b:9d:9c:c9:c3:28:8d:13:6c:86:bb:ad:9c:f4:a4:d9:28:28: 94:5e:e2:85:3c:fe:70:ad:72:ee:cf:57:61:bf:41:44:53:18: ac:40:b5:cf:21:35:da:db:1d:09:67:20:a6:2f:3d:ca:80:5f: e4:69:31:b8:e4:05:ee:c1:ea:8d:0b:88:62:09:4a:ec:17:3f: e8:02:04:76:5c:48:4c:19:d3:ff:cb:4c:14:53:22:0e:19:01: 6c:08:73:43:79:d8:33:6a:b1:6a:5c:68:26:2d:2e:88:06:01: 57:7c:66:b3:97:bd:40:ee:f8:55:d1:7d:4a:40:26:8b:f1:58: f7:2f:95:0b:31:2c:df:a3:0a:09:63:2e:88:f1:fb:d9:d5:d4: 8d:dd:7c:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njyZSa2eT+1/niwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzY1ZTEyYTQtNzc4My00NmJiLTk0YzQtMGYwMGY4ZTE2NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ9MRaQ0vCDOd+EmCL8uA4INKQF7yfj2yq5r XIVDGs9Seaoz8uldEMyKjXyjiLFqBVDs/Jw9na6ldjvyt3d7n2xMrGGW7Xqo7cGd vdeW6H/Yag4ctA/jby0Lf8QKM9890QTX1vJw5QCZmrITY2MoEZRSTvLwkkBP1g+H u1lJzGzhnfaeuUqEPWuhGBm5JaG98d3HLNVhXh32xoPJps30XJ3WqcJU2q/gHr3i uGfRjxcZOyRKMPbwKN1vQs5FtRac4OT/LP2oM+rnBwf0zmBVOlHtkZOLKCmKCE3z YeyT4tgAUbZWx+OhvywguaGglZTQekvBP89G/6SYA4HN+vGtaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgz5ugUpmEWuNpHl4T/YtmxvPgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMmEzMmMwYTEtZWQxYi0z YTNlLWIzODAtOTE4Mzc0ZDc3Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNqeKEy6yqyHUmOVLAPebHfdqVdXaorACwZ+GA9gx4WDbyvWN/tMNfS E7595o2Zbzd8QPb7lE3w69njQLkp3hOVUrrM/hpaVGrLHoBNOIL8PO3g3BmnvRdJ EsrBL5PXF0QwbfdwwATWTUgZ8hudnMnDKI0TbIa7rZz0pNkoKJRe4oU8/nCtcu7P V2G/QURTGKxAtc8hNdrbHQlnIKYvPcqAX+RpMbjkBe7B6o0LiGIJSuwXP+gCBHZc SEwZ0//LTBRTIg4ZAWwIc0N52DNqsWpcaCYtLogGAVd8ZrOXvUDu+FXRfUpAJovx WPcvlQsxLN+jCgljLojx+9nV1I3dfLM= -----END CERTIFICATE-----Generated at Wed Jul 29 22:46:09 2026 by rpki-client