$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa File: 7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa (raw, json) Hash identifier: 8ChgL6D5jbPnGiRZ88gb/zR2Qd/lJcnMZ0ORA+pSfrM= Subject key identifier: 5E:AD:AF:43:87:88:D3:32:1B:F5:D1:AC:F3:45:5C:C0:9A:C1:29:CC Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F82ADC56AAF5D87010E31C8A0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 15164 IP address blocks: 209.71.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:c5:6a:af:5d:87:01:0e:31:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=0b0aa323-3310-4cb1-934f-068712339321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:36:6e:f9:cb:72:8a:17:76:2d:3c:13:ca: 9a:3d:ac:bd:62:ad:ec:32:60:c2:b4:3d:54:af:09: 9b:ee:aa:d7:28:f0:36:39:6d:29:0c:43:2b:f7:54: 19:15:58:3e:74:47:71:5b:e8:b5:5e:7d:65:9e:76: 35:d1:1c:29:46:59:7b:6c:a6:5d:4b:f0:e3:ae:42: 91:08:7f:6f:7e:05:9f:85:21:98:4d:fb:35:7d:4d: 61:5b:67:54:97:74:c2:6e:a3:53:46:b1:c0:a7:e1: 08:ec:ac:27:80:2e:6a:43:8c:b3:e9:74:98:37:34: 27:24:fb:94:5d:18:a3:06:4b:f8:29:e2:e1:e1:8a: 29:a4:0f:ea:65:35:de:7a:6d:2a:6f:29:ce:07:2d: 1c:c9:88:86:d7:78:7d:83:9a:2f:31:6c:f6:23:a4: 1e:59:c4:15:7e:fc:a2:72:b7:5a:01:4f:71:8e:3f: 1a:9f:b3:23:ab:7c:2c:ff:95:c9:ca:6b:1f:6f:0f: 51:3c:b4:1c:1c:7a:27:18:44:ca:fb:8c:ef:82:56: 31:3d:2f:3b:80:03:b7:2b:39:ba:05:0d:e1:7c:35: 38:89:82:b9:07:20:6e:29:e3:5d:c1:09:61:c9:55: 0c:19:e2:e5:02:5e:8b:4b:66:12:12:94:69:02:74: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AD:AF:43:87:88:D3:32:1B:F5:D1:AC:F3:45:5C:C0:9A:C1:29:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/7f8cd203-dfe5-3d69-8e5a-1f442f31f92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:cd:81:16:c7:a3:b8:0a:74:eb:16:1a:5e:9d:78:79:68:01: 0b:02:2c:a9:5d:e2:b8:cd:62:86:71:3e:c1:3c:89:a3:89:30: d2:5a:65:b8:2f:12:1b:4a:bf:5d:64:0e:2f:85:16:79:9d:77: 3b:1b:f5:04:f7:f5:9a:de:ff:de:be:ff:3b:73:0e:4d:85:8d: d3:82:0c:4b:5c:48:b3:f0:6d:c9:f9:87:05:75:bf:8b:b8:d0: 7c:f3:24:4f:7f:69:9b:d5:87:b0:ae:8e:cc:c7:1d:d8:d3:40: 6c:1a:32:4e:c8:8f:2d:b1:4d:b9:f6:cf:37:b6:e0:d5:5b:a8: 5d:29:de:a0:58:4a:bb:1c:18:25:bc:bd:50:2e:6e:16:bc:6e: c4:cb:01:f1:2d:de:7d:83:04:b4:3f:a2:b8:9b:68:43:7d:ff: 23:02:0f:a3:57:b3:20:7b:35:d5:c8:42:25:65:12:92:49:ae: f4:e5:11:52:1c:4b:fa:7d:8d:86:9a:53:8c:79:1f:4e:65:3f: c4:98:09:fb:3e:6d:d2:5e:fa:c3:6e:24:e7:d7:f2:5c:23:c9: 73:8e:f5:ac:cb:af:30:bd:e3:e2:6f:e0:a8:c6:46:a2:92:d7: 90:3c:2e:18:c0:37:f0:9e:66:15:be:0b:3f:0d:82:9b:bd:69: 1c:0b:36:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrcVqr12HAQ4xyKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk MGIwYWEzMjMtMzMxMC00Y2IxLTkzNGYtMDY4NzEyMzM5MzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIE2bvnLcooXdi08E8qaPay9Yq3sMmDCtD1U rwmb7qrXKPA2OW0pDEMr91QZFVg+dEdxW+i1Xn1lnnY10RwpRll7bKZdS/DjrkKR CH9vfgWfhSGYTfs1fU1hW2dUl3TCbqNTRrHAp+EI7KwngC5qQ4yz6XSYNzQnJPuU XRijBkv4KeLh4YoppA/qZTXeem0qbynOBy0cyYiG13h9g5ovMWz2I6QeWcQVfvyi crdaAU9xjj8an7Mjq3ws/5XJymsfbw9RPLQcHHonGETK+4zvglYxPS87gAO3Kzm6 BQ3hfDU4iYK5ByBuKeNdwQlhyVUMGeLlAl6LS2YSEpRpAnTT2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6tr0OHiNMyG/XRrPNFXMCawSnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvN2Y4Y2QyMDMtZGZlNS0z ZDY5LThlNWEtMWY0NDJmMzFmOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3NgRbHo7gKdOsWGl6deHloAQsCLKld4rjNYoZxPsE8iaOJMNJaZbgv EhtKv11kDi+FFnmddzsb9QT39Zre/96+/ztzDk2FjdOCDEtcSLPwbcn5hwV1v4u4 0HzzJE9/aZvVh7CujszHHdjTQGwaMk7Ijy2xTbn2zze24NVbqF0p3qBYSrscGCW8 vVAubha8bsTLAfEt3n2DBLQ/oribaEN9/yMCD6NXsyB7NdXIQiVlEpJJrvTlEVIc S/p9jYaaU4x5H05lP8SYCfs+bdJe+sNuJOfX8lwjyXOO9azLrzC94+Jv4KjGRqKS 15A8LhjAN/CeZhW+Cz8Ngpu9aRwLNlM= -----END CERTIFICATE-----Generated at Sun Nov 1 23:20:16 2026 by rpki-client