$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa File: a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa (raw, json) Hash identifier: K+8OtcKAh5QsIrJ0eublz4kE089zGvDk+TU9GRT51eU= Subject key identifier: 38:17:86:39:28:6F:97:E0:64:70:C1:97:31:DB:BC:FB:DD:6B:1D:9E Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584F093CEBA51091514C5C875900 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 15164 IP address blocks: 209.71.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:eb:a5:10:91:51:4c:5c:87:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=7b0dcae4-4bd0-4d7b-8d9f-1db6a50082fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:0d:51:b3:c5:65:14:6e:3b:05:50:cc:dd: 3c:33:ba:e0:cd:d3:29:2d:62:24:f1:0f:b5:21:45: 84:6f:45:fb:61:79:b8:75:62:74:fd:7f:fe:44:4c: 7e:00:a0:23:83:99:02:48:9c:6f:e9:6b:3b:be:3f: c8:5b:40:65:96:29:c3:13:83:d7:5e:50:5d:23:bb: 05:23:05:53:fa:21:99:32:d0:73:ad:53:e8:cd:18: 87:bc:f2:9d:65:c0:5b:1c:5b:09:18:5a:2c:89:8c: 9e:70:25:ed:56:b7:cd:4a:1a:63:8d:04:12:70:85: ed:68:46:83:bd:9e:c2:1c:d3:f0:3c:f6:59:8f:8e: d1:09:a4:47:b1:56:41:2b:81:c5:ee:45:1b:dd:3b: 5b:3b:d4:c2:01:25:53:e3:45:a8:6c:b8:ef:1a:c6: 76:20:c7:fc:88:17:bc:13:20:b9:b9:56:bd:f9:e2: 08:a1:e8:13:8a:9c:40:52:a5:bc:2e:18:e2:da:18: 23:95:db:57:d5:55:61:1a:02:3a:8b:fa:a0:e5:b3: 15:5a:c0:98:5e:5e:94:1f:ce:f1:ea:3f:7e:f2:ce: 2f:ec:30:17:b4:58:37:e5:d8:0f:2b:f7:ba:d2:f3: 1b:39:de:4d:fa:8d:19:cf:26:8e:e7:0e:2d:43:ef: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:17:86:39:28:6F:97:E0:64:70:C1:97:31:DB:BC:FB:DD:6B:1D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9b:49:46:1d:d2:bf:80:c4:70:7d:59:0c:1e:22:03:23:2e: 86:a8:54:8b:db:d4:28:d5:3c:8a:40:1e:76:9b:0c:94:3d:9e: dd:9b:1e:5a:a4:f6:97:8a:ce:70:ce:40:c8:5f:ec:b7:6d:70: 17:8c:0a:cc:b6:e5:c0:03:66:87:51:b9:18:1e:57:60:35:91: 11:af:5f:f1:c8:23:83:c5:10:a1:4b:23:c2:9b:94:25:96:fc: e1:71:53:62:5f:2a:68:b8:5b:48:8c:78:c0:07:43:d6:b5:d0: 13:99:7a:9c:e8:22:9b:8e:df:17:79:ab:50:5c:b1:c0:b5:0c: aa:5f:73:7e:09:60:5a:e6:c9:cc:16:02:b1:a4:e8:3b:fd:59: e5:64:fe:0b:8d:9d:a3:d8:36:bd:ff:26:99:5d:1e:41:79:6b: 28:9c:a6:aa:5c:1e:ef:ab:48:b1:45:6c:7c:17:71:2c:4f:d8: 78:3b:d4:20:f3:b0:e7:47:b8:9c:6c:1e:bf:f7:6b:f1:24:99: d3:02:f9:d5:fc:3a:c5:1c:e6:ce:52:61:be:dc:59:68:03:d1: cb:05:ef:09:6e:ae:ee:70:42:b6:d6:80:54:7f:db:b6:17:a5: a4:17:89:cc:11:1c:d9:6c:df:73:9d:2a:3f:1c:0e:a9:e2:4d: dd:95:96:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOulEJFRTFyHWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk N2IwZGNhZTQtNGJkMC00ZDdiLThkOWYtMWRiNmE1MDA4MmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAongNUbPFZRRuOwVQzN08M7rgzdMpLWIk8Q+1 IUWEb0X7YXm4dWJ0/X/+REx+AKAjg5kCSJxv6Ws7vj/IW0BllinDE4PXXlBdI7sF IwVT+iGZMtBzrVPozRiHvPKdZcBbHFsJGFosiYyecCXtVrfNShpjjQQScIXtaEaD vZ7CHNPwPPZZj47RCaRHsVZBK4HF7kUb3TtbO9TCASVT40WobLjvGsZ2IMf8iBe8 EyC5uVa9+eIIoegTipxAUqW8Lhji2hgjldtX1VVhGgI6i/qg5bMVWsCYXl6UH87x 6j9+8s4v7DAXtFg35dgPK/e60vMbOd5N+o0ZzyaO5w4tQ++8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgXhjkob5fgZHDBlzHbvPvdax2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTcwNGMzYTAtNWQ2My0z MGJkLWFlYjktYTgyZmE1MTc4YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKbSUYd0r+AxHB9WQweIgMjLoaoVIvb1CjVPIpAHnabDJQ9nt2bHlqk 9peKznDOQMhf7LdtcBeMCsy25cADZodRuRgeV2A1kRGvX/HII4PFEKFLI8KblCWW /OFxU2JfKmi4W0iMeMAHQ9a10BOZepzoIpuO3xd5q1BcscC1DKpfc34JYFrmycwW ArGk6Dv9WeVk/guNnaPYNr3/JpldHkF5ayicpqpcHu+rSLFFbHwXcSxP2Hg71CDz sOdHuJxsHr/3a/EkmdMC+dX8OsUc5s5SYb7cWWgD0csF7wluru5wQrbWgFR/27YX paQXicwRHNls33OdKj8cDqniTd2VlkQ= -----END CERTIFICATE-----Generated at Sun Sep 13 15:02:47 2026 by rpki-client