$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa File: 91cf1c00-289f-3473-9f95-b903e535a230.roa (raw, json) Hash identifier: OjpX7lRi3DhtPjpBinH1Kv4r5pwwrMlfFCOOHWkHcYc= Subject key identifier: 2B:15:2B:99:70:99:23:38:47:8C:53:B0:91:C9:5E:19:51:20:0A:9C Certificate issuer: /CN=9b7383ca-74b1-4e8a-b79d-f791e631c059 Certificate serial: 010D0C9F4328584F549D6A6F96628D7BE76222C0 Authority key identifier: 48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 22056 IP address blocks: 204.153.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:6a:6f:96:62:8d:7b:e7:62:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7383ca-74b1-4e8a-b79d-f791e631c059 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=e0477ab4-1ed9-4f08-9ef4-5bbe92bf6b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:ba:21:f2:51:26:64:b6:27:34:66:d8:e6: 9f:a9:81:94:da:19:5d:f5:91:51:a6:b6:c5:52:b8: d4:f6:37:f5:bd:7c:2a:55:9f:3c:ca:11:de:ec:e3: 30:32:08:59:80:59:7b:be:70:c4:a1:f8:6b:f5:b3: 0e:2d:90:23:5b:60:bb:d8:da:ae:56:4f:1d:15:4c: 8b:cf:20:4a:a3:29:2e:68:48:98:f2:7e:eb:09:db: 2a:b4:5b:52:3d:87:48:6a:b1:52:98:60:1b:72:58: 2a:94:e5:c8:d7:3e:ef:d8:86:6b:bf:af:da:ed:48: 81:a3:94:3c:15:3f:93:80:65:7b:8f:23:2c:b6:c0: 75:5e:1d:f1:0a:c5:ff:aa:b0:97:26:47:6e:ff:93: 9b:eb:6e:95:1b:ca:83:60:fa:c8:c1:6b:29:0a:c4: d9:4d:59:30:28:8f:6a:82:e8:6b:5d:40:68:9c:92: c4:a7:86:a7:07:4d:9d:d6:71:d6:e8:a7:63:e5:69: 57:0c:ec:91:91:f9:d2:b1:41:cd:50:08:f5:06:a2: 5c:05:4e:d0:77:99:53:76:07:00:f5:52:97:81:e8: ab:d5:36:85:24:64:8e:63:c4:c8:6b:f3:77:56:44: de:5f:4c:8c:07:80:ce:d1:5f:ce:0b:f2:c0:92:c1: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:15:2B:99:70:99:23:38:47:8C:53:B0:91:C9:5E:19:51:20:0A:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/91cf1c00-289f-3473-9f95-b903e535a230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.crl X509v3 Authority Key Identifier: keyid:48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer sbgp-ipAddrBlock: critical IPv4: 204.153.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:27:49:92:4b:71:8e:1a:71:69:80:b2:3a:d6:09:31:58:cf: d5:44:b0:dd:97:65:4a:46:ca:bd:55:28:d4:d1:d3:70:9c:a8: ac:1f:1a:72:40:f3:5a:7f:c5:b9:53:b6:71:f4:f2:0e:15:87: 44:77:7c:d6:20:bb:8c:6b:eb:b5:87:e6:ed:0e:e2:cf:1d:6a: 2f:27:4e:1c:18:5a:fc:dc:ff:54:b6:c5:62:d3:bd:0e:1b:c9: 04:17:94:72:de:0e:9d:54:c5:22:d1:e3:99:61:e5:47:34:bf: a7:9f:bb:ba:63:47:aa:7b:b4:1a:58:14:60:6a:78:d2:fb:2a: 12:40:5a:7a:4b:0a:1c:a5:19:3d:e8:4e:3a:f9:5c:1b:fd:b9: 3f:3c:a7:2f:c4:f3:74:21:90:a6:e0:f9:ba:fc:33:64:63:25: 57:12:42:d6:5f:22:22:41:5d:68:b9:fc:bb:54:fd:3f:ea:7c: 37:54:54:9c:bc:9a:96:2c:e0:c0:25:b5:24:a6:be:0a:d5:8c: 47:24:41:61:81:74:0e:93:b4:59:b6:ef:36:1d:6b:de:03:dc: a9:54:30:9e:9e:6e:f0:41:04:76:07:8f:4c:2f:b6:69:d1:cf: 45:86:3a:ac:dc:76:7e:37:24:47:36:dc:54:bc:83:48:b5:54: 05:f2:cd:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWpvlmKNe+diIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI3MzgzY2EtNzRiMS00ZThhLWI3OWQtZjc5MWU2MzFj MDU5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZTA0NzdhYjQtMWVkOS00ZjA4LTllZjQtNWJiZTkyYmY2YjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/m6IfJRJmS2JzRm2OafqYGU2hld9ZFRprbF UrjU9jf1vXwqVZ88yhHe7OMwMghZgFl7vnDEofhr9bMOLZAjW2C72NquVk8dFUyL zyBKoykuaEiY8n7rCdsqtFtSPYdIarFSmGAbclgqlOXI1z7v2IZrv6/a7UiBo5Q8 FT+TgGV7jyMstsB1Xh3xCsX/qrCXJkdu/5Ob626VG8qDYPrIwWspCsTZTVkwKI9q guhrXUBonJLEp4anB02d1nHW6Kdj5WlXDOyRkfnSsUHNUAj1BqJcBU7Qd5lTdgcA 9VKXgeir1TaFJGSOY8TIa/N3VkTeX0yMB4DO0V/OC/LAksEN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsVK5lwmSM4R4xTsJHJXhlRIAqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85Yjcz ODNjYS03NGIxLTRlOGEtYjc5ZC1mNzkxZTYzMWMwNTkvOTFjZjFjMDAtMjg5Zi0z NDczLTlmOTUtYjkwM2U1MzVhMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWI3MzgzY2EtNzRiMS00ZThhLWI3 OWQtZjc5MWU2MzFjMDU5LzliNzM4M2NhLTc0YjEtNGU4YS1iNzlkLWY3OTFlNjMx YzA1OS5jcmwwHwYDVR0jBBgwFoAUSN+6uqwGs94NQMabZgapmi474ScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85YjczODNjYS03NGIxLTRlOGEtYjc5ZC1mNzkx ZTYzMWMwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4nSZJLcY4acWmAsjrWCTFYz9VEsN2XZUpGyr1VKNTR03CcqKwfGnJA 81p/xblTtnH08g4Vh0R3fNYgu4xr67WH5u0O4s8dai8nThwYWvzc/1S2xWLTvQ4b yQQXlHLeDp1UxSLR45lh5Uc0v6efu7pjR6p7tBpYFGBqeNL7KhJAWnpLChylGT3o Tjr5XBv9uT88py/E83QhkKbg+br8M2RjJVcSQtZfIiJBXWi5/LtU/T/qfDdUVJy8 mpYs4MAltSSmvgrVjEckQWGBdA6TtFm27zYda94D3KlUMJ6ebvBBBHYHj0wvtmnR z0WGOqzcdn43JEc23FS8g0i1VAXyzUQ= -----END CERTIFICATE-----Generated at Sun Oct 11 06:52:12 2026 by rpki-client