$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa File: a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa (raw, json) Hash identifier: xXvGR+9ycAAqkGUn7/CoMK1oM6aAdkBTzdGZpasvRHY= Subject key identifier: 1E:E6:EE:2C:72:0B:98:49:31:5D:CF:39:A4:C4:30:D3:14:0F:42:06 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D100CF6EB1EECA2B8E920F4B0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 15164 IP address blocks: 199.200.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f6:eb:1e:ec:a2:b8:e9:20:f4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=0480e6b9-2ca0-4d5a-a7d0-3b23d85363ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:53:13:43:c2:28:4b:fa:28:7c:0b:f8:61: 89:f6:0c:f7:00:d2:5c:50:f1:33:6c:53:e4:10:3a: 08:42:6f:53:88:5f:68:53:51:a7:27:35:c1:29:41: 30:b6:3c:f3:ca:7d:7e:98:2f:1b:8d:30:98:a4:07: 81:22:f7:b9:19:05:58:51:db:f5:83:dc:50:b7:6d: b8:e8:58:01:dc:05:8c:a9:2d:42:29:7c:c6:ef:41: 71:05:c5:6b:b6:f6:66:5d:0a:73:0f:61:2c:97:87: 61:e7:53:d8:43:73:10:a8:e3:3c:cd:57:77:48:4d: 6d:b6:89:ca:a4:ed:61:ec:61:76:6a:73:e0:d8:af: 8a:9e:c1:5f:e0:d9:eb:59:b0:81:62:5d:ee:f8:bd: c5:31:b9:b2:37:3d:96:12:88:16:64:97:69:56:1d: 50:ad:98:8f:4d:04:e3:4b:fc:ac:f5:fe:50:7e:1c: 49:49:79:82:0c:fe:77:d6:48:48:ae:8c:83:15:9d: 56:f5:27:e6:bc:20:0a:db:27:9e:ca:af:02:43:c3: d0:e0:4f:4e:db:da:f1:3d:32:eb:e5:83:98:ce:ec: 3e:50:59:09:19:a5:0d:3d:fd:04:aa:d5:84:37:20: ca:8b:ba:05:6a:a6:ce:ba:19:7d:ee:61:ff:e8:b4: 8e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E6:EE:2C:72:0B:98:49:31:5D:CF:39:A4:C4:30:D3:14:0F:42:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a18ffaee-2e0e-3f67-9c6f-52e6f89bbe4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:19:36:16:bd:6c:d8:bb:ae:35:94:00:7f:be:f0:13:f2:72: 79:8b:09:85:81:4e:2b:59:bd:f6:c7:2b:f0:91:80:c1:9d:73: 3f:f2:f4:06:22:b8:55:ce:62:19:a5:bc:af:c8:4d:c1:44:20: 0a:a1:ff:c4:86:d8:09:1d:4e:7e:20:48:9d:32:1b:83:c7:9e: 6a:da:87:02:e7:7f:e9:0a:c4:84:b0:9f:c3:1d:ac:c3:15:09: a9:0d:98:84:66:fb:45:47:74:e3:07:b2:ea:94:c2:b5:57:84: c6:91:0d:6b:c1:25:50:8c:f4:1c:80:8a:3d:83:39:cd:c8:c9: a7:44:b2:2d:e3:90:27:5f:57:17:ec:e9:41:46:c8:5b:8d:d3: 6a:2c:33:fb:7f:2f:08:28:46:39:74:5e:2a:74:34:80:fc:ba: d3:ef:ce:a2:f4:97:05:0f:27:33:30:b1:c4:95:4b:ca:e0:f9: 91:89:45:31:63:8f:75:24:e7:8a:9b:91:ad:9f:f6:76:f5:14: c2:d0:77:dd:15:2b:97:29:94:54:ea:72:a8:9c:20:83:73:b7: 19:d2:a8:ff:0f:a9:56:de:d8:91:44:7b:8f:7a:10:a5:9a:a1: 8d:9f:dc:07:84:3a:08:d2:99:f7:25:40:4d:ec:ae:59:fa:33: d5:b3:69:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPbrHuyiuOkg9LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk MDQ4MGU2YjktMmNhMC00ZDVhLWE3ZDAtM2IyM2Q4NTM2M2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwchTE0PCKEv6KHwL+GGJ9gz3ANJcUPEzbFPk EDoIQm9TiF9oU1GnJzXBKUEwtjzzyn1+mC8bjTCYpAeBIve5GQVYUdv1g9xQt224 6FgB3AWMqS1CKXzG70FxBcVrtvZmXQpzD2Esl4dh51PYQ3MQqOM8zVd3SE1ttonK pO1h7GF2anPg2K+KnsFf4NnrWbCBYl3u+L3FMbmyNz2WEogWZJdpVh1QrZiPTQTj S/ys9f5QfhxJSXmCDP531khIroyDFZ1W9SfmvCAK2yeeyq8CQ8PQ4E9O29rxPTLr 5YOYzuw+UFkJGaUNPf0EqtWENyDKi7oFaqbOuhl97mH/6LSO6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7m7ixyC5hJMV3POaTEMNMUD0IGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTE4ZmZhZWUtMmUwZS0z ZjY3LTljNmYtNTJlNmY4OWJiZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwZNha9bNi7rjWUAH++8BPycnmLCYWBTitZvfbHK/CRgMGdcz/y9AYi uFXOYhmlvK/ITcFEIAqh/8SG2AkdTn4gSJ0yG4PHnmrahwLnf+kKxISwn8MdrMMV CakNmIRm+0VHdOMHsuqUwrVXhMaRDWvBJVCM9ByAij2DOc3IyadEsi3jkCdfVxfs 6UFGyFuN02osM/t/LwgoRjl0Xip0NID8utPvzqL0lwUPJzMwscSVS8rg+ZGJRTFj j3Uk54qbka2f9nb1FMLQd90VK5cplFTqcqicIINztxnSqP8PqVbe2JFEe496EKWa oY2f3AeEOgjSmfclQE3srln6M9WzaZE= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:04 2026 by rpki-client