$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/aa1aec27-6c58-39dc-b8b3-d331a322c1d5.roa File: aa1aec27-6c58-39dc-b8b3-d331a322c1d5.roa (raw, json) Hash identifier: tv9kV8rB6dU65P8XkZLLll/ZDwNxomH4YdhVNAviuw4= Subject key identifier: 91:46:9C:9D:85:1D:F8:F8:4F:34:AB:B5:D1:CE:8B:2F:9E:BE:9D:E8 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584F506D43410C2BD1B27FEE1300 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/aa1aec27-6c58-39dc-b8b3-d331a322c1d5.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 22418 IP address blocks: 192.157.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:43:41:0c:2b:d1:b2:7f:ee:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=f90b50ab-b756-4ed7-a2c8-b0e5ce0504de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:a4:19:f2:af:38:a2:ff:da:05:6a:0b:6e: cd:69:3a:96:62:f7:8e:2c:bc:d9:86:84:11:38:12: b0:15:79:23:51:0f:74:47:32:02:ae:07:d8:ac:6f: ff:66:98:fd:7e:34:30:e0:b6:ff:20:c7:83:f9:bb: ed:49:a4:bc:34:91:46:51:0f:72:be:56:e6:84:eb: 5a:6d:5a:c2:f3:e9:71:9a:5d:b5:25:a7:af:8f:a3: 9b:13:ef:e2:c5:ea:07:75:87:10:5e:3e:2e:8d:37: fa:48:f8:6c:68:98:87:dc:ed:09:8c:bc:22:e4:60: 94:62:2d:c9:b1:34:80:57:e2:7a:d0:6d:26:a1:05: de:bc:52:05:a5:da:f6:d0:0d:0d:e4:b5:92:bf:f7: bd:f4:09:03:ec:5c:9f:50:9d:97:8c:f5:3f:f5:f0: d6:ca:a0:c4:3b:39:5b:52:10:66:bf:00:b9:87:c8: 62:a9:d6:95:7d:94:51:7a:e4:39:6e:c1:a7:0f:3b: fd:42:4f:ce:9b:f2:b0:16:2a:4b:b0:c6:1f:e9:d3: be:a7:ee:f8:54:d9:2e:e2:cc:ab:43:df:02:f5:5c: 99:9e:57:7a:ed:44:e7:71:c6:24:e8:ae:d9:22:04: 44:ce:38:bf:4e:95:8f:ea:f2:55:0a:41:d8:ba:07: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:46:9C:9D:85:1D:F8:F8:4F:34:AB:B5:D1:CE:8B:2F:9E:BE:9D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/aa1aec27-6c58-39dc-b8b3-d331a322c1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:50:ec:7f:21:aa:9f:90:33:fc:d3:fd:6d:55:ae:4e:96:ee: af:2c:7b:81:44:6e:f9:ec:cd:00:50:6b:59:9f:dc:50:01:84: 59:00:f5:35:93:50:2a:8c:2e:3f:8b:77:e5:81:6e:a7:e1:3c: ef:4e:2e:a5:aa:5b:93:8a:e8:06:9a:34:54:8e:b8:71:d6:f4: 86:af:01:7c:92:dc:4d:5e:02:87:ab:66:b8:0f:84:66:15:7e: 65:fd:d3:47:7f:16:8a:bd:06:c4:c0:ab:c1:94:9a:1c:af:cc: e5:e9:a7:af:12:86:61:cc:af:d8:5f:1c:6e:d8:eb:51:8e:d3: 1c:1d:70:32:16:bc:d5:77:81:02:90:52:fa:7b:09:c2:62:4d: c2:ce:6d:44:13:f7:9d:7b:df:f2:6c:52:07:15:55:d9:c1:78: 82:a1:40:d6:dd:d1:43:f7:50:eb:37:05:50:8b:09:1b:31:a5: 0d:26:48:ab:f5:57:c3:01:df:f1:02:c6:75:df:15:97:b3:f4: 02:14:b5:3e:de:8c:ff:c2:f9:27:c7:36:d9:17:c2:ef:2d:48: d8:16:1f:06:f4:76:e3:d9:48:81:0b:bf:b9:22:a1:23:1f:72: 8d:0c:87:3d:17:7b:59:70:92:fb:41:1b:7a:29:58:c1:d7:e2: 87:01:0e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUNBDCvRsn/uEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjkwYjUwYWItYjc1Ni00ZWQ3LWEyYzgtYjBlNWNlMDUwNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN+kGfKvOKL/2gVqC27NaTqWYveOLLzZhoQR OBKwFXkjUQ90RzICrgfYrG//Zpj9fjQw4Lb/IMeD+bvtSaS8NJFGUQ9yvlbmhOta bVrC8+lxml21Jaevj6ObE+/ixeoHdYcQXj4ujTf6SPhsaJiH3O0JjLwi5GCUYi3J sTSAV+J60G0moQXevFIFpdr20A0N5LWSv/e99AkD7FyfUJ2XjPU/9fDWyqDEOzlb UhBmvwC5h8hiqdaVfZRReuQ5bsGnDzv9Qk/Om/KwFipLsMYf6dO+p+74VNku4syr Q98C9VyZnld67UTnccYk6K7ZIgREzji/TpWP6vJVCkHYugd1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFGnJ2FHfj4TzSrtdHOiy+evp3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYWExYWVjMjctNmM1OC0z OWRjLWI4YjMtZDMzMWEzMjJjMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlQ7H8hqp+QM/zT/W1Vrk6W7q8se4FEbvnszQBQa1mf3FABhFkA9TWT UCqMLj+Ld+WBbqfhPO9OLqWqW5OK6AaaNFSOuHHW9IavAXyS3E1eAoerZrgPhGYV fmX900d/Foq9BsTAq8GUmhyvzOXpp68ShmHMr9hfHG7Y61GO0xwdcDIWvNV3gQKQ Uvp7CcJiTcLObUQT95173/JsUgcVVdnBeIKhQNbd0UP3UOs3BVCLCRsxpQ0mSKv1 V8MB3/ECxnXfFZez9AIUtT7ejP/C+SfHNtkXwu8tSNgWHwb0duPZSIELv7kioSMf co0Mhz0Xe1lwkvtBG3opWMHX4ocBDqM= -----END CERTIFICATE-----Generated at Sat Oct 31 12:45:58 2026 by rpki-client