$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/57d97e63-0f1a-3df1-8ca3-e4f065a97796.roa File: 57d97e63-0f1a-3df1-8ca3-e4f065a97796.roa (raw, json) Hash identifier: HXxioYEjNOV9iQ4ppKpSw8AsxAE3ba565B3K/wuZens= Subject key identifier: 24:79:81:75:4E:F1:AB:03:EA:FB:35:E0:45:C0:CF:DE:0C:73:3F:FD Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584ED431E51CEECF4FB23F7EDD00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/57d97e63-0f1a-3df1-8ca3-e4f065a97796.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 15164 IP address blocks: 209.71.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e5:1c:ee:cf:4f:b2:3f:7e:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=e9d585ad-ae22-442a-9e6d-d29e2511c23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:fc:b0:d3:eb:3b:5e:ff:d8:32:85:34:3d: bd:c2:15:de:fa:14:8b:0f:3c:0f:bb:55:70:38:1b: b7:68:09:d8:09:57:7f:f9:2f:9f:5b:d0:ac:3b:78: ec:a0:be:9f:61:96:05:fd:f8:c7:15:ba:fa:9a:8c: fa:31:e4:b9:27:a5:82:2a:89:27:35:48:b7:fb:59: e8:83:97:8e:29:56:07:1a:30:41:ed:64:46:48:a3: c7:ab:8c:9d:65:db:1e:4a:9e:cb:73:ba:15:3e:c9: f5:9e:25:5e:00:71:b8:33:dd:07:1b:56:15:24:72: f7:a4:e4:10:76:1c:c9:27:93:62:ca:b1:d1:50:9d: 85:c9:c2:63:30:c1:ca:07:d8:59:c7:09:b8:4b:cb: 52:c2:04:88:91:66:81:1f:10:01:4f:f9:4e:42:89: a2:9c:d3:86:21:f6:e8:29:b3:d9:89:a5:45:57:62: b0:e1:f9:fb:39:5b:8a:0e:f3:c2:d2:21:4d:10:84: a9:d1:83:47:98:bd:e4:c4:b4:64:c5:f2:c7:ac:44: 69:54:36:98:0b:89:16:77:80:b9:ce:77:c9:ed:0e: 05:dd:fb:a7:1c:40:3f:9c:af:5d:c1:17:ca:0b:38: a3:70:40:ea:49:d5:36:a7:70:db:25:4f:63:71:84: 6a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:79:81:75:4E:F1:AB:03:EA:FB:35:E0:45:C0:CF:DE:0C:73:3F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/57d97e63-0f1a-3df1-8ca3-e4f065a97796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8d:65:b5:92:00:6a:13:ac:68:b2:38:f2:6e:72:e7:5a:41: 53:36:1c:c3:07:86:28:fe:de:a2:7e:9b:1d:99:99:d5:a7:fb: 53:fa:8e:6f:ec:ab:84:2e:fd:ee:c2:6c:d5:7a:80:37:4c:e2: 1b:d5:6d:03:4f:52:4f:6f:dd:a5:56:c6:3d:44:fa:b4:72:ec: 13:4c:af:2e:9e:a0:d2:52:d7:36:5e:be:25:4f:b7:a8:95:d9: bb:ca:cc:f8:9f:cc:07:1e:1d:c0:c4:f9:22:ec:e5:13:1f:b1: 31:72:f8:77:37:99:6b:72:a3:18:83:37:13:e0:3b:b2:8e:e5: c8:ec:95:40:ff:c7:6b:14:4a:3d:35:d5:77:1d:f6:cc:55:f1: 79:ee:06:27:43:16:9a:a0:08:c1:b6:c6:27:2a:95:4f:f7:a1: 08:ca:69:0a:49:99:5b:0b:9c:38:93:f5:d2:7e:ef:dc:49:2f: 9b:42:1d:6d:4f:8f:af:2b:77:ce:bc:29:c6:c4:1b:62:8b:c0: 3c:9a:46:21:1f:57:5f:07:8e:12:42:ff:d5:1a:2e:c4:91:e2: a4:b1:b9:51:52:4a:ec:84:77:a2:25:1a:26:be:b7:6d:d9:f6: ec:5c:f5:3f:fe:7a:ea:18:6d:4c:c0:ab:29:4a:55:a7:91:68: ad:44:3a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeUc7s9Psj9+3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTlkNTg1YWQtYWUyMi00NDJhLTllNmQtZDI5ZTI1MTFjMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY/8sNPrO17/2DKFND29whXe+hSLDzwPu1Vw OBu3aAnYCVd/+S+fW9CsO3jsoL6fYZYF/fjHFbr6moz6MeS5J6WCKoknNUi3+1no g5eOKVYHGjBB7WRGSKPHq4ydZdseSp7Lc7oVPsn1niVeAHG4M90HG1YVJHL3pOQQ dhzJJ5NiyrHRUJ2FycJjMMHKB9hZxwm4S8tSwgSIkWaBHxABT/lOQominNOGIfbo KbPZiaVFV2Kw4fn7OVuKDvPC0iFNEISp0YNHmL3kxLRkxfLHrERpVDaYC4kWd4C5 znfJ7Q4F3funHEA/nK9dwRfKCzijcEDqSdU2p3DbJU9jcYRqqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR5gXVO8asD6vs14EXAz94Mcz/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTdkOTdlNjMtMGYxYS0z ZGYxLThjYTMtZTRmMDY1YTk3Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiNZbWSAGoTrGiyOPJucudaQVM2HMMHhij+3qJ+mx2ZmdWn+1P6jm/s q4Qu/e7CbNV6gDdM4hvVbQNPUk9v3aVWxj1E+rRy7BNMry6eoNJS1zZeviVPt6iV 2bvKzPifzAceHcDE+SLs5RMfsTFy+Hc3mWtyoxiDNxPgO7KO5cjslUD/x2sUSj01 1Xcd9sxV8XnuBidDFpqgCMG2xicqlU/3oQjKaQpJmVsLnDiT9dJ+79xJL5tCHW1P j68rd868KcbEG2KLwDyaRiEfV18HjhJC/9UaLsSR4qSxuVFSSuyEd6IlGia+t23Z 9uxc9T/+euoYbUzAqylKVaeRaK1EOnc= -----END CERTIFICATE-----Generated at Sun Sep 13 17:25:14 2026 by rpki-client