$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa File: 528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa (raw, json) Hash identifier: QTgRTgfF+K5rCU2DtSqm2hE0vcNReTG5+l4GTc/oaDc= Subject key identifier: 49:06:3C:61:73:AF:2F:24:17:93:DD:6B:3C:1A:BE:AB:0B:71:C0:6D Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D100CF66B359EB72F43B79200 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 15164 IP address blocks: 199.200.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f6:6b:35:9e:b7:2f:43:b7:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=2eb19e2b-7118-4ce6-8152-cfccf0da91b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f0:e2:d8:f5:07:5c:f9:a1:4d:f7:60:39:9a: bf:6b:d0:a3:ad:d7:61:9e:f5:b1:66:af:2f:e6:04: 84:07:48:ac:6b:53:7a:f1:e7:28:4f:27:77:d3:83: 0a:6b:4f:69:98:3e:74:15:cd:22:69:6b:4c:18:9c: 39:fb:f2:d5:b0:2f:95:66:77:c6:9f:fa:e0:41:7a: ff:53:0b:65:ef:49:c7:68:85:a0:d5:64:66:7b:e7: d8:81:59:b3:34:02:48:9a:d3:6e:84:8f:d0:ac:07: 49:4f:23:21:db:4e:3e:0e:a9:aa:e6:16:8f:1c:c7: 71:08:12:af:17:8e:02:9e:fe:7c:53:56:d6:92:52: 72:76:f0:ae:f9:fc:cb:b3:9c:c5:11:7b:40:9f:2e: 42:87:22:90:10:e3:40:d3:a1:5e:bf:a6:18:d1:03: 97:f2:a8:d5:3d:c4:fe:e3:eb:47:91:c9:4b:41:92: 69:b4:2b:ac:6b:d2:8f:b5:cc:f9:ed:a4:d0:fc:26: 78:ba:4c:c0:43:40:2c:c8:50:e4:7c:b2:a9:e6:e2: 9b:a4:77:f7:23:b0:1c:a6:d1:10:03:82:59:7e:77: 9f:a5:96:ba:7d:91:73:f9:b2:08:41:4a:7b:95:57: c6:15:bb:eb:4c:8b:c0:08:8a:66:98:07:d0:9a:d4: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:06:3C:61:73:AF:2F:24:17:93:DD:6B:3C:1A:BE:AB:0B:71:C0:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c4:ab:35:8c:03:ae:02:e7:1d:d8:ee:a1:a1:db:16:4f:b2: 6a:79:05:0e:9a:af:e9:86:9b:cd:56:6b:0c:1d:37:90:fb:26: a5:e4:df:35:68:80:52:b8:81:53:72:aa:5f:76:85:a4:84:30: b5:e0:80:1d:8a:1b:bb:94:d1:d0:10:b0:d0:38:d8:39:1e:1b: 18:5f:54:f3:f2:35:41:89:0a:28:20:1c:45:04:81:e5:34:d1: 4a:4d:9f:19:f6:65:4e:64:a8:36:bc:3f:e7:c8:ff:be:01:57: 0c:87:27:04:9f:b5:9d:10:06:2b:63:65:06:89:e1:7c:3b:a9: 84:e3:fe:b6:47:9e:40:36:68:d4:5a:5f:9a:0f:43:bf:5a:ca: 54:a0:93:81:6a:b3:91:35:50:7d:21:06:35:a7:b6:82:51:80: 3c:ff:87:6a:65:b0:10:9f:9b:6d:81:6f:f5:6e:de:87:89:5e: 7b:34:1a:05:74:60:16:07:a4:56:ec:af:19:1b:ab:70:2b:25: 7d:64:ea:41:36:00:e4:99:8f:59:4e:bc:56:d4:00:68:ea:c9: 5d:69:e1:22:13:80:cf:ff:48:94:df:2e:c8:ff:e9:64:09:29: fd:2b:15:22:d8:57:96:43:d3:e7:ad:7c:3d:dc:69:37:fd:0d: 78:fe:0f:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPZrNZ63L0O3kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk MmViMTllMmItNzExOC00Y2U2LTgxNTItY2ZjY2YwZGE5MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfDi2PUHXPmhTfdgOZq/a9CjrddhnvWxZq8v 5gSEB0isa1N68ecoTyd304MKa09pmD50Fc0iaWtMGJw5+/LVsC+VZnfGn/rgQXr/ Uwtl70nHaIWg1WRme+fYgVmzNAJImtNuhI/QrAdJTyMh204+Dqmq5haPHMdxCBKv F44Cnv58U1bWklJydvCu+fzLs5zFEXtAny5ChyKQEONA06Fev6YY0QOX8qjVPcT+ 4+tHkclLQZJptCusa9KPtcz57aTQ/CZ4ukzAQ0AsyFDkfLKp5uKbpHf3I7AcptEQ A4JZfnefpZa6fZFz+bIIQUp7lVfGFbvrTIvACIpmmAfQmtR5BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkGPGFzry8kF5PdazwavqsLccBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTI4YmM1MTEtMjIwNC0z NGJmLThmNzQtZjBmZmVkN2RjZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7EqzWMA64C5x3Y7qGh2xZPsmp5BQ6ar+mGm81WawwdN5D7JqXk3zVo gFK4gVNyql92haSEMLXggB2KG7uU0dAQsNA42DkeGxhfVPPyNUGJCiggHEUEgeU0 0UpNnxn2ZU5kqDa8P+fI/74BVwyHJwSftZ0QBitjZQaJ4Xw7qYTj/rZHnkA2aNRa X5oPQ79aylSgk4Fqs5E1UH0hBjWntoJRgDz/h2plsBCfm22Bb/Vu3oeJXns0GgV0 YBYHpFbsrxkbq3ArJX1k6kE2AOSZj1lOvFbUAGjqyV1p4SITgM//SJTfLsj/6WQJ Kf0rFSLYV5ZD0+etfD3caTf9DXj+Dxw= -----END CERTIFICATE-----Generated at Fri Mar 13 13:33:51 2026 by rpki-client