$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa File: c84238dc-4927-30ce-80e8-d4213dd4be12.roa (raw, json) Hash identifier: dzP7MCy2e4sPBrUhsKa3ITwhoigZib2+PO4WwgwN0ng= Subject key identifier: 0B:27:DC:67:83:9E:01:30:C1:20:A5:2B:40:B0:4D:33:B9:14:C8:24 Certificate issuer: /CN=fb8e9f00-13c9-406e-9c03-d71cd386c086 Certificate serial: 010D0C9F4328584B1C36C577CE4DA710ED626080 Authority key identifier: 88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 198.89.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c5:77:ce:4d:a7:10:ed:62:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb8e9f00-13c9-406e-9c03-d71cd386c086 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=d5a3a5e5-29d6-4ecc-bb28-191edd655f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:ae:69:f8:09:76:42:dc:5c:45:71:01:b1: 33:39:3c:85:72:a4:f8:21:69:c0:d0:f6:ab:70:fa: 84:92:5f:f8:19:67:35:64:59:5a:f8:af:0b:6a:3d: 46:d5:94:17:02:02:84:2a:c4:e0:af:70:5a:4f:e9: 93:79:52:02:5a:fd:d3:bd:00:eb:df:04:16:f8:1f: 5f:1e:48:83:2e:f6:ea:f6:0d:ad:06:ec:15:80:55: fe:a1:b9:c8:b3:af:6a:a2:97:37:bb:1c:e6:5f:aa: cd:6f:38:b2:87:8a:68:a9:f8:87:78:5d:49:ec:99: 4f:39:d3:94:9a:37:db:3d:0e:19:b9:c2:fe:bd:bc: 01:e8:93:a9:80:70:b4:47:cd:38:8a:71:a6:8e:55: 83:6c:4f:b6:0c:3d:be:d1:d4:23:b5:36:41:ed:b8: a6:ab:f8:72:ae:e9:3e:3b:ab:00:c7:14:40:fa:b2: 6c:ac:13:fa:da:9d:4f:46:b0:92:12:35:f8:3e:3f: de:73:27:cf:30:fd:65:44:7e:b1:2a:ed:f1:5a:2a: b6:90:93:c2:2b:f7:e6:24:36:24:c0:04:49:04:58: 82:51:f6:49:af:f5:eb:76:78:6d:52:71:fa:00:38: c3:7a:34:d5:21:27:c7:dc:91:08:c2:4a:90:5c:c6: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:27:DC:67:83:9E:01:30:C1:20:A5:2B:40:B0:4D:33:B9:14:C8:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/c84238dc-4927-30ce-80e8-d4213dd4be12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086/fb8e9f00-13c9-406e-9c03-d71cd386c086.crl X509v3 Authority Key Identifier: keyid:88:9A:AF:B4:41:CD:EB:C5:CC:85:1D:00:F8:39:57:55:95:34:B4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fb8e9f00-13c9-406e-9c03-d71cd386c086.cer sbgp-ipAddrBlock: critical IPv4: 198.89.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a4:e6:87:df:9f:d3:51:dd:19:16:c6:59:cb:e2:89:4e:0b: c0:c5:50:4a:99:04:0c:2a:9b:c4:a7:39:eb:29:81:7e:22:0b: 15:83:b3:8e:8f:f8:df:c0:69:0a:bf:73:97:a6:45:6c:a5:25: 32:37:3c:12:e0:8a:3f:1d:a0:9b:30:3f:57:56:30:4e:ed:22: e9:de:e5:a5:38:36:b9:f6:50:a6:cc:ab:56:92:5c:4f:4e:b7: 3c:45:d1:3e:46:d5:d1:85:62:6b:40:d4:a9:3a:e2:c0:4e:92: 90:e8:ce:66:b1:6c:37:71:de:e5:df:88:8c:eb:00:22:2c:14: 7b:99:71:b2:df:74:72:a9:58:75:f4:13:a3:1b:86:a9:2b:02: dc:b7:2c:97:8e:c2:a4:9b:cf:96:42:a4:c9:43:7d:5e:d3:8d: 9c:f0:b3:f2:2c:dc:16:1b:f8:ce:6e:4b:01:04:d8:ce:79:61: ba:19:05:f0:ba:92:fc:09:97:e2:b1:34:27:7f:20:5f:af:63: ad:72:33:f6:cd:01:49:87:fa:2d:c0:64:a0:1f:89:da:1d:a1: a0:e3:36:bb:53:5c:db:ae:1d:1d:8d:40:29:3c:53:a7:27:97: f3:c4:00:db:d1:4c:01:67:71:62:9c:cc:1a:15:53:df:a2:e7: e2:dd:60:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsV3zk2nEO1iYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI4ZTlmMDAtMTNjOS00MDZlLTljMDMtZDcxY2QzODZj MDg2MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDVhM2E1ZTUtMjlkNi00ZWNjLWJiMjgtMTkxZWRkNjU1ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtACuafgJdkLcXEVxAbEzOTyFcqT4IWnA0Par cPqEkl/4GWc1ZFla+K8Laj1G1ZQXAgKEKsTgr3BaT+mTeVICWv3TvQDr3wQW+B9f HkiDLvbq9g2tBuwVgFX+obnIs69qopc3uxzmX6rNbziyh4poqfiHeF1J7JlPOdOU mjfbPQ4ZucL+vbwB6JOpgHC0R804inGmjlWDbE+2DD2+0dQjtTZB7bimq/hyruk+ O6sAxxRA+rJsrBP62p1PRrCSEjX4Pj/ecyfPMP1lRH6xKu3xWiq2kJPCK/fmJDYk wARJBFiCUfZJr/XrdnhtUnH6ADjDejTVISfH3JEIwkqQXMbO4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsn3GeDngEwwSClK0CwTTO5FMgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mYjhl OWYwMC0xM2M5LTQwNmUtOWMwMy1kNzFjZDM4NmMwODYvYzg0MjM4ZGMtNDkyNy0z MGNlLTgwZTgtZDQyMTNkZDRiZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmI4ZTlmMDAtMTNjOS00MDZlLTlj MDMtZDcxY2QzODZjMDg2L2ZiOGU5ZjAwLTEzYzktNDA2ZS05YzAzLWQ3MWNkMzg2 YzA4Ni5jcmwwHwYDVR0jBBgwFoAUiJqvtEHN68XMhR0A+DlXVZU0tIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mYjhlOWYwMC0xM2M5LTQwNmUtOWMwMy1kNzFj ZDM4NmMwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlkaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmk5offn9NR3RkWxlnL4olOC8DFUEqZBAwqm8SnOespgX4iCxWDs46P +N/AaQq/c5emRWylJTI3PBLgij8doJswP1dWME7tIune5aU4Nrn2UKbMq1aSXE9O tzxF0T5G1dGFYmtA1Kk64sBOkpDozmaxbDdx3uXfiIzrACIsFHuZcbLfdHKpWHX0 E6MbhqkrAty3LJeOwqSbz5ZCpMlDfV7TjZzws/Is3BYb+M5uSwEE2M55YboZBfC6 kvwJl+KxNCd/IF+vY61yM/bNAUmH+i3AZKAfidodoaDjNrtTXNuuHR2NQCk8U6cn l/PEANvRTAFncWKczBoVU9+i5+LdYOc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:53 2025 by rpki-client