$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa File: defae92a-38aa-3188-8dfa-60a7fa4efaff.roa (raw, json) Hash identifier: QzFJXdKz8eaSKw0rGZABV57OPxgVA0gLWCh/ISH71Ng= Subject key identifier: D5:1C:DF:66:8F:F9:A1:0A:8C:A0:AF:F6:B2:DF:76:32:CB:4C:3C:0C Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584D100CF7A6AF6E9938EAC32848 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 15164 IP address blocks: 199.200.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f7:a6:af:6e:99:38:ea:c3:28:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=88cba50f-c57c-4b10-9be9-4f64b9b5ffbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:70:b0:5f:14:64:b8:9c:c4:09:15:32:75: d5:7c:0c:bd:2d:d7:35:4d:ee:3a:43:b1:70:c0:32: ca:f1:78:af:93:fb:93:9b:df:89:50:49:d6:ad:7e: 06:5a:2a:00:de:71:30:8e:1a:50:9e:31:27:87:de: 9c:26:99:4e:b2:84:e5:4d:29:60:22:4a:2b:68:92: cf:3f:46:1d:e5:92:fb:66:d7:c2:c1:00:95:46:92: bd:d2:f2:5d:37:b1:71:4b:80:d4:2d:48:d4:19:99: 97:b4:b1:4e:f2:bd:87:f7:f3:28:19:46:60:3a:84: 82:aa:75:f0:ab:8a:47:61:e5:5c:e9:19:65:98:12: 1b:4f:72:93:5c:37:2d:dd:5f:7a:04:19:37:83:85: a4:93:25:d9:5c:61:ae:b8:ab:a8:61:e8:4f:3f:dd: 91:35:11:ef:4a:38:4d:03:ec:7b:fb:6e:01:a2:d4: 7a:ee:e3:2e:c9:7b:d6:59:66:4f:f3:8c:5c:79:ac: 26:7d:a5:8b:6c:77:cd:d0:c6:9a:90:9c:50:d3:af: f7:70:98:9f:74:4c:42:5f:47:4a:c7:01:44:ca:f5: 86:ea:4b:cd:c3:4a:d4:5c:63:0e:1c:7d:96:67:4a: 6f:aa:e9:bb:a3:f1:17:16:aa:82:9a:9c:c0:c4:49: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:DF:66:8F:F9:A1:0A:8C:A0:AF:F6:B2:DF:76:32:CB:4C:3C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/defae92a-38aa-3188-8dfa-60a7fa4efaff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 199.200.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:00:ed:09:5d:d7:67:3a:b8:20:4c:75:c0:9c:40:33:b5:bb: f7:e2:8e:73:dd:92:f5:66:58:23:20:80:87:c5:17:4e:ef:9c: b4:db:3d:6f:e3:cc:ee:e3:a3:d7:71:78:dc:28:04:46:11:4c: 47:d9:91:d1:c0:43:22:ea:bf:8c:84:c7:90:70:93:76:98:e2: b9:84:5a:d3:24:56:c7:74:53:b9:be:b4:9a:d8:22:96:89:2f: 71:65:5f:59:3a:d0:8c:ce:cb:2a:a0:13:42:34:2d:f2:8c:20: dd:3b:c2:e5:1e:d9:d3:a7:af:19:cd:15:e9:b3:8f:75:cb:db: c1:c3:04:a8:1c:51:4a:c1:3b:c1:10:01:65:6a:ed:15:91:7a: 60:57:3c:5e:79:45:4f:4e:0e:06:ad:f3:9c:6c:e8:6c:c7:1e: 77:91:65:51:96:70:68:28:61:cc:bd:ad:90:c9:e5:f9:45:da: 5e:02:66:86:a8:c4:91:fb:1f:b3:7e:0e:e2:f1:62:19:8e:8b: 5f:7f:ae:53:08:af:fc:0e:45:50:45:80:68:28:8b:1a:05:61: c9:db:ff:98:7a:4a:7a:10:2c:15:22:26:b0:90:03:9e:eb:86: 45:c4:4d:17:9f:af:b2:bb:98:e6:e6:6e:f1:9c:59:d3:8a:34: 3a:51:8d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPemr26ZOOrDKEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk ODhjYmE1MGYtYzU3Yy00YjEwLTliZTktNGY2NGI5YjVmZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNhwsF8UZLicxAkVMnXVfAy9Ldc1Te46Q7Fw wDLK8Xivk/uTm9+JUEnWrX4GWioA3nEwjhpQnjEnh96cJplOsoTlTSlgIkoraJLP P0Yd5ZL7ZtfCwQCVRpK90vJdN7FxS4DULUjUGZmXtLFO8r2H9/MoGUZgOoSCqnXw q4pHYeVc6RllmBIbT3KTXDct3V96BBk3g4WkkyXZXGGuuKuoYehPP92RNRHvSjhN A+x7+24BotR67uMuyXvWWWZP84xceawmfaWLbHfN0MaakJxQ06/3cJifdExCX0dK xwFEyvWG6kvNw0rUXGMOHH2WZ0pvqum7o/EXFqqCmpzAxEkHDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUc32aP+aEKjKCv9rLfdjLLTDwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGVmYWU5MmEtMzhhYS0z MTg4LThkZmEtNjBhN2ZhNGVmYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8heMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgA7Qld12c6uCBMdcCcQDO1u/fijnPdkvVmWCMggIfFF07vnLTbPW/j zO7jo9dxeNwoBEYRTEfZkdHAQyLqv4yEx5Bwk3aY4rmEWtMkVsd0U7m+tJrYIpaJ L3FlX1k60IzOyyqgE0I0LfKMIN07wuUe2dOnrxnNFemzj3XL28HDBKgcUUrBO8EQ AWVq7RWRemBXPF55RU9ODgat85xs6GzHHneRZVGWcGgoYcy9rZDJ5flF2l4CZoao xJH7H7N+DuLxYhmOi19/rlMIr/wORVBFgGgoixoFYcnb/5h6SnoQLBUiJrCQA57r hkXETRefr7K7mObmbvGcWdOKNDpRjWI= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:49 2026 by rpki-client