$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa File: b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa (raw, json) Hash identifier: L9EtB5xFrx907ZF1CoZ+LWL72xR3H+1KCUqz+5YfGzo= Subject key identifier: AF:71:22:F4:91:55:F0:58:17:EF:80:22:B9:4A:9C:16:83:29:23:AA Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D9B855665381AB22AA7015600 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 15164 IP address blocks: 209.71.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:56:65:38:1a:b2:2a:a7:01:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=11a3c2ce-c72f-4a5f-bf99-5c90b481e226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:63:a0:77:83:a1:be:69:34:5b:99:1b:2d: 64:88:eb:7e:ef:8f:f3:42:ee:83:2a:45:bc:b7:2c: 45:e5:0e:47:bc:1e:33:d5:5a:d4:14:62:c1:f0:e4: ea:ce:4a:cf:5a:1e:4d:05:f1:04:fe:77:35:2b:f3: 65:f3:75:57:63:a5:15:94:2f:fc:1f:41:52:f6:5e: a0:fa:18:83:7c:a8:ce:84:86:6c:83:fe:77:8f:71: f5:98:51:62:63:42:b4:42:e2:c5:61:cc:40:0c:34: fb:bd:d8:74:59:1a:e4:3b:07:bb:88:4c:82:ad:25: b8:20:18:29:40:e9:0f:ab:63:79:ac:cb:cd:ff:80: d2:30:51:f4:f6:3b:d9:9f:85:64:7d:63:d0:39:93: bf:61:a1:93:89:c4:1d:8d:2f:1c:7f:cf:5d:12:33: e8:3d:07:b9:46:16:22:07:61:cc:89:b3:38:62:1e: 7e:2a:75:cd:ab:aa:54:2d:91:bb:62:78:ad:88:b5: 0f:90:ae:45:a2:de:08:d8:1d:4a:c9:a1:2c:bd:91: 54:da:fb:8f:cf:e9:90:dc:69:ac:68:e9:27:d1:1f: a4:2c:70:44:ca:26:89:7a:fb:68:f5:46:b7:3e:d6: 7c:27:9d:bb:e0:06:4c:8c:1a:9b:77:49:e4:e4:66: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:71:22:F4:91:55:F0:58:17:EF:80:22:B9:4A:9C:16:83:29:23:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b2d92ca4-524b-3faf-90e7-dcd70308f84c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:29:a8:e2:8e:fb:21:7a:3b:42:74:ee:b8:f7:34:9d:ae:8e: 4e:cc:59:2d:2c:84:f8:30:3c:99:eb:9e:39:15:4b:f1:3f:8f: d5:2d:bb:8b:64:b9:7c:bb:a4:e6:c6:f4:76:d9:81:ad:6a:72: 26:40:ec:05:e3:a8:d6:ec:6b:cd:c4:97:d0:a2:87:1a:ba:f4: 98:f4:be:2b:68:ee:0a:27:07:8e:31:6b:71:01:af:1f:6b:13: 0c:0e:60:27:4c:79:84:81:fb:b4:f1:d6:74:aa:8b:3c:65:cb: 0b:36:34:ed:7f:1c:25:49:dd:2a:bb:2a:48:1d:3c:a6:2f:8f: 89:dd:78:4c:a9:63:96:f0:01:3a:d5:57:47:c5:ef:0a:a7:3a: 0e:bb:6a:50:9c:33:2c:21:dc:23:57:54:ac:77:12:91:9c:f0: 49:d9:60:68:78:c3:39:44:b1:19:48:2b:b0:36:c6:74:55:99: c6:9c:89:00:b8:ef:a1:52:9f:26:16:22:ce:9c:ad:f7:49:ac: 3b:e0:19:4e:28:92:b8:3e:12:6e:78:96:23:72:86:9e:e6:3e: 31:4c:40:1f:e9:3a:8f:5f:4b:b4:d4:00:fd:b0:7c:89:54:a7: 43:2c:06:ae:79:22:c0:01:49:79:82:d2:ad:1b:44:88:e9:ea: 51:a4:4f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVZlOBqyKqcBVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk MTFhM2MyY2UtYzcyZi00YTVmLWJmOTktNWM5MGI0ODFlMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulljoHeDob5pNFuZGy1kiOt+74/zQu6DKkW8 tyxF5Q5HvB4z1VrUFGLB8OTqzkrPWh5NBfEE/nc1K/Nl83VXY6UVlC/8H0FS9l6g +hiDfKjOhIZsg/53j3H1mFFiY0K0QuLFYcxADDT7vdh0WRrkOwe7iEyCrSW4IBgp QOkPq2N5rMvN/4DSMFH09jvZn4VkfWPQOZO/YaGTicQdjS8cf89dEjPoPQe5RhYi B2HMibM4Yh5+KnXNq6pULZG7YnitiLUPkK5Fot4I2B1KyaEsvZFU2vuPz+mQ3Gms aOkn0R+kLHBEyiaJevto9Ua3PtZ8J5274AZMjBqbd0nk5Gbn8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9xIvSRVfBYF++AIrlKnBaDKSOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvYjJkOTJjYTQtNTI0Yi0z ZmFmLTkwZTctZGNkNzAzMDhmODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIpqOKO+yF6O0J07rj3NJ2ujk7MWS0shPgwPJnrnjkVS/E/j9Utu4tk uXy7pObG9HbZga1qciZA7AXjqNbsa83El9Cihxq69Jj0vito7gonB44xa3EBrx9r EwwOYCdMeYSB+7Tx1nSqizxlyws2NO1/HCVJ3Sq7KkgdPKYvj4ndeEypY5bwATrV V0fF7wqnOg67alCcMywh3CNXVKx3EpGc8EnZYGh4wzlEsRlIK7A2xnRVmcaciQC4 76FSnyYWIs6crfdJrDvgGU4okrg+Em54liNyhp7mPjFMQB/pOo9fS7TUAP2wfIlU p0MsBq55IsABSXmC0q0bRIjp6lGkT7w= -----END CERTIFICATE-----Generated at Tue Apr 28 03:48:31 2026 by rpki-client