$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/833c14c8-6d2c-3fe5-9c0f-6b9a3fd63c08.roa File: 833c14c8-6d2c-3fe5-9c0f-6b9a3fd63c08.roa (raw, json) Hash identifier: +cQ1wZI/6LpVsw0mrAiyrfYftNPoX608+FyVVljY9mw= Subject key identifier: 63:1B:F2:57:81:23:3E:C6:DC:AA:F5:1A:E0:6B:D3:06:D9:66:C0:5D Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F225CFBE845F91BC99F1A6E00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/833c14c8-6d2c-3fe5-9c0f-6b9a3fd63c08.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 209.71.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fb:e8:45:f9:1b:c9:9f:1a:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=5a00a56f-088e-4795-a6a8-1cce4c9d7d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:59:aa:a0:d3:2f:ce:92:60:ab:3c:a7:64:6a: 65:20:c4:0b:32:77:d4:01:44:66:00:a6:d0:59:5d: 53:b5:dc:70:5c:31:97:b4:6d:bb:7f:9c:c8:ac:de: 62:97:f6:7c:0c:7f:fe:15:95:ad:96:0e:b7:8d:e5: 5f:82:b8:61:19:bd:8e:84:08:11:d7:fb:50:0f:f1: 8d:ed:64:78:80:5b:cb:4c:21:02:79:a4:93:5e:80: 3e:53:08:7b:d4:2d:8c:5a:58:c0:d3:16:d1:c4:8d: 6f:78:1e:17:b6:1e:94:59:54:0e:0c:a7:1f:5d:d4: 58:80:f2:29:1d:b8:fc:72:10:60:58:fc:96:2e:98: 16:07:b7:a5:11:51:19:4c:1f:fb:79:b7:d4:dd:6e: cc:8c:57:45:dc:3f:b3:a8:9a:69:0e:67:23:a0:c1: d8:f7:ad:87:f7:ef:d2:10:44:5e:2f:b9:b5:b9:bd: e2:67:14:02:5d:4c:da:dd:b2:21:7d:cf:14:1a:51: ef:47:5b:da:6c:b0:b3:18:d6:49:cb:d2:a6:bc:cc: 62:35:d8:76:b1:17:01:6e:7d:22:e1:bc:ce:e0:a5: 5a:7d:ad:a6:7d:2c:44:9a:07:d7:21:75:01:13:46: 81:48:ce:7c:a2:54:b2:02:63:99:62:f1:e3:dc:f6: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1B:F2:57:81:23:3E:C6:DC:AA:F5:1A:E0:6B:D3:06:D9:66:C0:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/833c14c8-6d2c-3fe5-9c0f-6b9a3fd63c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5b:7f:22:bd:fc:39:b2:81:6c:f1:af:05:b2:d2:6e:98:4f: b5:e9:ff:8d:9c:69:c5:bb:91:0a:84:cc:5c:40:e4:e6:c3:ba: 00:55:f2:49:65:6f:2a:dc:c4:c1:08:8d:19:e2:cb:67:99:4c: 01:ed:1b:be:ff:94:41:9f:b6:93:03:eb:75:a6:a6:82:aa:e3: 1e:8a:9f:98:35:ff:d7:1d:4c:c3:05:74:df:38:e9:ff:0e:14: a7:3e:19:58:84:20:39:5f:d5:82:07:a9:d3:aa:e3:32:27:df: 38:77:54:55:94:92:70:79:3c:07:21:eb:f6:41:e6:05:e4:bd: ae:63:6c:b0:b1:16:83:59:2a:63:c4:44:ac:0c:99:c0:cd:36: 44:67:ac:2c:11:9d:a5:71:ae:23:3f:83:fd:8b:be:7b:e8:97: 12:51:8a:eb:ca:f0:cf:43:28:9d:6c:f6:18:67:1a:18:31:23: c7:19:83:74:97:b5:f0:da:92:42:e9:b8:32:c5:9b:6a:c3:66: ae:ad:58:33:37:40:28:fa:8a:e3:5b:c4:09:7d:e8:31:86:a3: 44:d0:ad:a4:08:f2:7f:82:2e:6f:b0:b4:1f:3e:79:a4:9b:6f: c7:dd:4b:3f:24:78:9d:13:fe:d1:0c:63:8d:1b:5f:72:a6:16: c2:2d:7d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPvoRfkbyZ8abgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NWEwMGE1NmYtMDg4ZS00Nzk1LWE2YTgtMWNjZTRjOWQ3ZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVmqoNMvzpJgqzynZGplIMQLMnfUAURmAKbQ WV1TtdxwXDGXtG27f5zIrN5il/Z8DH/+FZWtlg63jeVfgrhhGb2OhAgR1/tQD/GN 7WR4gFvLTCECeaSTXoA+Uwh71C2MWljA0xbRxI1veB4Xth6UWVQODKcfXdRYgPIp Hbj8chBgWPyWLpgWB7elEVEZTB/7ebfU3W7MjFdF3D+zqJppDmcjoMHY962H9+/S EEReL7m1ub3iZxQCXUza3bIhfc8UGlHvR1vabLCzGNZJy9KmvMxiNdh2sRcBbn0i 4bzO4KVafa2mfSxEmgfXIXUBE0aBSM58olSyAmOZYvHj3PYOZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMb8leBIz7G3Kr1GuBr0wbZZsBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvODMzYzE0YzgtNmQyYy0z ZmU1LTljMGYtNmI5YTNmZDYzYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJbfyK9/DmygWzxrwWy0m6YT7Xp/42cacW7kQqEzFxA5ObDugBV8kll byrcxMEIjRniy2eZTAHtG77/lEGftpMD63WmpoKq4x6Kn5g1/9cdTMMFdN846f8O FKc+GViEIDlf1YIHqdOq4zIn3zh3VFWUknB5PAch6/ZB5gXkva5jbLCxFoNZKmPE RKwMmcDNNkRnrCwRnaVxriM/g/2LvnvolxJRiuvK8M9DKJ1s9hhnGhgxI8cZg3SX tfDakkLpuDLFm2rDZq6tWDM3QCj6iuNbxAl96DGGo0TQraQI8n+CLm+wtB8+eaSb b8fdSz8keJ0T/tEMY40bX3KmFsItfWM= -----END CERTIFICATE-----Generated at Sun Sep 13 18:10:08 2026 by rpki-client