$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa File: a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa (raw, json) Hash identifier: wywlvxtQEVBBaABjkckT5B3+j6KW5Gv/4S5afyj2o/c= Subject key identifier: F7:19:DA:F1:19:82:CE:D1:7E:D9:79:E6:B0:4C:20:56:0C:38:27:94 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584FAB28A8D1238592F6BCFF120E Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 15164 IP address blocks: 209.71.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:a8:d1:23:85:92:f6:bc:ff:12:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=cf23bbd5-0d8e-4f66-a2da-f02fe5dca37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:e9:94:29:cb:25:54:da:20:83:49:90:9c: b2:68:c4:dd:a4:df:39:45:f0:e9:70:d7:88:3d:ae: 5d:69:a0:f9:0c:a2:e8:8a:6e:c9:e6:58:c6:c3:b0: 79:37:01:de:e7:a9:4e:de:cf:44:a9:fe:00:75:bd: 82:63:00:f8:ad:c5:62:22:de:e6:36:96:49:59:25: 56:fa:a6:5f:3a:dd:8f:4b:62:e4:2b:b1:77:53:0c: 0a:c6:81:cd:8f:3d:65:cb:8e:d2:58:92:26:04:35: ba:b4:94:ec:5b:77:3c:f0:d3:fb:3f:61:0b:11:2d: 4b:54:e2:9d:a7:79:04:8b:6b:72:05:99:fa:28:e6: fd:fa:e1:c1:3b:95:6d:b8:e7:29:9c:29:9d:fb:2a: 75:8e:96:a7:c2:c2:c1:80:3f:f8:63:3a:68:bb:a1: 0c:06:de:cf:15:43:d2:34:7e:8b:14:fe:50:1d:f2: 64:59:c0:57:fe:ac:4f:55:92:67:d0:1b:f8:5a:32: 53:4d:ad:de:13:c5:be:81:72:a7:90:34:e0:19:cc: 31:8c:66:ff:82:41:d9:71:59:21:e3:d3:b9:6f:96: 65:1e:91:5c:0a:91:c3:2a:c2:27:ba:2a:c6:7a:7a: e7:ad:1c:11:b6:64:2e:da:05:92:81:62:a8:4e:c8: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:19:DA:F1:19:82:CE:D1:7E:D9:79:E6:B0:4C:20:56:0C:38:27:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/a704c3a0-5d63-30bd-aeb9-a82fa5178b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:62:4a:b6:37:04:22:51:bd:4d:5e:6f:1c:36:13:b2:40:71: fb:9b:fc:ab:86:57:f8:f9:9b:9d:17:32:61:6b:f7:43:ae:73: c5:65:59:bb:a8:0b:39:a1:a0:b2:83:18:74:bd:ee:10:8a:54: 84:da:e8:ba:09:a3:df:68:42:39:94:68:20:43:ab:71:cb:a9: 64:ff:1d:f8:5a:d7:c1:84:f9:53:e7:8f:39:2a:0d:47:13:fa: 07:f7:c2:92:64:9d:cc:5d:7f:40:d0:38:33:58:43:a2:61:bc: 6a:a3:e5:dd:fe:2b:77:ad:65:d7:96:69:2a:17:57:c6:55:ec: fd:31:09:99:10:13:a6:e4:6a:01:86:f9:91:37:0d:8d:23:77: 04:79:cb:b9:d7:f3:b8:2a:fb:aa:88:e6:e0:83:c5:6c:e6:2f: ea:df:a4:65:e5:d2:61:0b:07:46:f4:c5:03:99:0a:2d:43:34: 69:10:d0:b6:47:43:75:b4:c7:38:14:54:96:4b:fc:f2:8b:49: 44:80:d3:24:e2:d8:f5:30:9d:b5:99:85:1e:83:01:c2:d5:1a: cb:ab:a1:8f:20:3c:5c:9e:25:2a:25:cb:6b:16:d8:f4:04:00: db:05:0b:58:cc:ed:aa:65:c5:de:65:21:61:23:2c:59:0b:44: 03:00:f9:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKKjRI4WS9rz/Eg4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk Y2YyM2JiZDUtMGQ4ZS00ZjY2LWEyZGEtZjAyZmU1ZGNhMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nDplCnLJVTaIINJkJyyaMTdpN85RfDpcNeI Pa5daaD5DKLoim7J5ljGw7B5NwHe56lO3s9Eqf4Adb2CYwD4rcViIt7mNpZJWSVW +qZfOt2PS2LkK7F3UwwKxoHNjz1ly47SWJImBDW6tJTsW3c88NP7P2ELES1LVOKd p3kEi2tyBZn6KOb9+uHBO5VtuOcpnCmd+yp1jpanwsLBgD/4Yzpou6EMBt7PFUPS NH6LFP5QHfJkWcBX/qxPVZJn0Bv4WjJTTa3eE8W+gXKnkDTgGcwxjGb/gkHZcVkh 49O5b5ZlHpFcCpHDKsInuirGenrnrRwRtmQu2gWSgWKoTsgzBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcZ2vEZgs7Rftl55rBMIFYMOCeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYTcwNGMzYTAtNWQ2My0z MGJkLWFlYjktYTgyZmE1MTc4YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxiSrY3BCJRvU1ebxw2E7JAcfub/KuGV/j5m50XMmFr90Ouc8VlWbuo CzmhoLKDGHS97hCKVITa6LoJo99oQjmUaCBDq3HLqWT/Hfha18GE+VPnjzkqDUcT +gf3wpJkncxdf0DQODNYQ6JhvGqj5d3+K3etZdeWaSoXV8ZV7P0xCZkQE6bkagGG +ZE3DY0jdwR5y7nX87gq+6qI5uCDxWzmL+rfpGXl0mELB0b0xQOZCi1DNGkQ0LZH Q3W0xzgUVJZL/PKLSUSA0yTi2PUwnbWZhR6DAcLVGsuroY8gPFyeJSoly2sW2PQE ANsFC1jM7aplxd5lIWEjLFkLRAMA+T0= -----END CERTIFICATE-----Generated at Sat Oct 31 23:55:56 2026 by rpki-client