$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/f974b407-6ac0-347b-ae99-24d891d61da0.roa File: f974b407-6ac0-347b-ae99-24d891d61da0.roa (raw, json) Hash identifier: 2giboSriCZVesl9BGc5qu7F07RrKCvQv9v0l7dDrR9g= Subject key identifier: D8:2D:AF:08:17:0C:AD:10:4D:0D:77:91:4F:B4:B2:77:3D:6B:87:44 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584ECD371629915E9F63AB9DF8C0 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/f974b407-6ac0-347b-ae99-24d891d61da0.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 15164 IP address blocks: 209.71.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:16:29:91:5e:9f:63:ab:9d:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=be3a54eb-d702-4b0d-af54-7b064b81bff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3b:5b:8c:e5:8f:33:a5:33:d2:b7:7a:05:e2: 4d:a6:45:a4:5f:34:84:c6:1d:9c:e4:a3:8b:fa:ad: 43:d3:e4:d4:12:79:18:f5:df:ea:3f:1f:5c:95:76: 48:3b:f9:40:f1:1b:aa:6b:d7:bc:25:7d:7c:bb:78: 45:20:27:14:d8:4c:3e:3d:85:f4:76:88:14:e9:03: 4e:38:52:6b:b7:7f:79:0f:67:22:ee:65:59:da:a1: 17:29:3e:de:c4:12:c6:87:fd:93:ba:78:37:f7:5e: 12:02:8b:85:ec:d1:9a:a8:b4:96:7b:23:a9:f5:f1: f3:86:cb:c2:46:b1:22:58:a4:cf:87:e2:49:1a:0c: 02:9e:27:29:4d:bd:b9:48:bf:4a:2f:98:2d:ab:97: 5f:30:60:b9:e5:fa:78:e4:39:36:37:65:ca:c5:8f: aa:98:a6:02:c7:27:73:17:18:41:37:fb:01:8e:7d: f9:31:9f:50:69:e6:32:aa:d9:ae:74:a7:6c:eb:79: 50:36:52:09:53:a9:23:42:19:6b:22:11:1f:82:02: 5c:c4:4e:33:e1:5f:76:c0:26:62:21:92:6c:a7:f9: a6:4c:7c:34:1b:cf:4a:4c:7d:b2:ff:b0:49:90:17: 13:59:ad:9d:59:df:72:2f:dc:4b:c1:a2:8c:a3:4a: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2D:AF:08:17:0C:AD:10:4D:0D:77:91:4F:B4:B2:77:3D:6B:87:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/f974b407-6ac0-347b-ae99-24d891d61da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 209.71.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:27:93:71:be:59:9f:08:8e:1e:d5:c7:99:cc:0a:dc:11:2d: c6:51:73:a1:b9:0a:ae:81:df:5b:af:aa:96:e8:c6:99:66:34: 3f:15:30:21:7f:d7:41:19:b3:d3:41:e9:1b:a1:b7:ec:e1:3d: 14:40:66:98:55:5f:74:1d:b2:20:8d:c3:80:0e:6c:0a:c2:99: 75:42:68:17:51:e8:05:6e:b4:18:40:c9:e0:56:6f:09:e5:7d: a4:22:9c:2e:7a:4a:62:98:62:78:1a:52:7b:65:df:ff:0e:a8: c6:87:db:93:9f:6b:cb:5b:c4:53:04:0b:30:95:22:06:5c:82: b6:ec:c8:c3:d4:bd:6b:05:f1:18:80:a1:48:8d:bd:72:a2:3a: d8:77:9c:70:62:fb:c4:e3:f8:c0:bb:b5:ab:a1:ab:ce:54:37: 93:a4:63:95:8c:b0:9e:ef:58:4d:ba:8e:a4:c9:3f:55:47:90: 81:0f:ad:20:08:67:d2:30:b6:a2:36:c0:45:bd:c0:69:71:2f: 9d:94:fc:1f:21:62:81:ba:ba:45:3a:09:4e:ba:1b:91:b3:0c: 45:32:57:bf:69:07:e8:3f:c1:81:e2:b0:a2:f9:a6:2c:b4:bf: c9:ea:49:75:5f:ae:2a:8b:06:d9:31:94:c9:75:f9:41:72:cb: 47:86:06:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxYpkV6fY6ud+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk YmUzYTU0ZWItZDcwMi00YjBkLWFmNTQtN2IwNjRiODFiZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDtbjOWPM6Uz0rd6BeJNpkWkXzSExh2c5KOL +q1D0+TUEnkY9d/qPx9clXZIO/lA8Ruqa9e8JX18u3hFICcU2Ew+PYX0dogU6QNO OFJrt395D2ci7mVZ2qEXKT7exBLGh/2Tung3914SAouF7NGaqLSWeyOp9fHzhsvC RrEiWKTPh+JJGgwCnicpTb25SL9KL5gtq5dfMGC55fp45Dk2N2XKxY+qmKYCxydz FxhBN/sBjn35MZ9QaeYyqtmudKds63lQNlIJU6kjQhlrIhEfggJcxE4z4V92wCZi IZJsp/mmTHw0G89KTH2y/7BJkBcTWa2dWd9yL9xLwaKMo0oFMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgtrwgXDK0QTQ13kU+0snc9a4dEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZjk3NGI0MDctNmFjMC0z NDdiLWFlOTktMjRkODkxZDYxZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUnk3G+WZ8Ijh7Vx5nMCtwRLcZRc6G5Cq6B31uvqpboxplmND8VMCF/ 10EZs9NB6Ruht+zhPRRAZphVX3QdsiCNw4AObArCmXVCaBdR6AVutBhAyeBWbwnl faQinC56SmKYYngaUntl3/8OqMaH25Ofa8tbxFMECzCVIgZcgrbsyMPUvWsF8RiA oUiNvXKiOth3nHBi+8Tj+MC7tauhq85UN5OkY5WMsJ7vWE26jqTJP1VHkIEPrSAI Z9IwtqI2wEW9wGlxL52U/B8hYoG6ukU6CU66G5GzDEUyV79pB+g/wYHisKL5piy0 v8nqSXVfriqLBtkxlMl1+UFyy0eGBnY= -----END CERTIFICATE-----Generated at Sun Sep 13 16:41:45 2026 by rpki-client