$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89fa792f-ace9-3717-b0d1-56deb16571ef.roa File: 89fa792f-ace9-3717-b0d1-56deb16571ef.roa (raw, json) Hash identifier: 7I/NjrxNxXv54B3Y577xjQHXwTKgnl2RlGNA3+XIQ3A= Subject key identifier: 1D:DC:05:E1:6D:F0:D9:A2:BF:41:4E:7A:ED:7D:1B:C9:63:2C:47:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF44CB3796FC4C7611B0488C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89fa792f-ace9-3717-b0d1-56deb16571ef.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 173.222.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b3:79:6f:c4:c7:61:1b:04:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=08b7bc6f-d943-43cb-944a-01db3855b463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:64:b0:00:1e:a2:c0:1a:d4:b9:d4:5c:db:ba: 2d:78:01:38:8f:44:d9:f5:ff:9f:c5:d5:e1:9a:16: 43:1e:83:07:85:3e:e0:03:af:e0:92:eb:10:40:7e: 2d:5d:de:ba:3f:5c:66:67:de:48:be:d9:35:85:78: 9f:fa:a5:50:ee:df:2b:a0:ae:55:2b:9a:93:2c:c9: 49:be:d8:5d:e3:c6:ff:2d:43:40:59:b2:6e:52:b4: 34:18:1a:a9:31:50:02:19:eb:0e:7d:d0:c4:12:8a: 16:9d:8d:e4:05:a6:28:a5:16:a7:d5:48:ce:94:1f: b0:12:24:a6:5e:bb:c0:b5:2d:99:d7:64:7c:cf:e8: 71:a9:1e:5b:a6:b7:9f:ff:40:ad:02:f5:0c:8c:07: 38:c1:95:36:cb:bb:37:e5:c8:19:52:9d:e1:f7:be: 5e:11:4f:bb:30:5b:46:4a:54:4b:f1:e4:72:a8:18: b4:bc:66:cb:a8:29:39:21:c4:38:31:80:63:fa:57: 75:19:62:92:13:26:16:6c:5e:ca:b8:5d:0f:c1:91: ec:23:d1:f4:cd:4b:87:50:e5:21:a2:03:b1:22:77: 7d:d3:26:0a:57:d8:12:2d:8f:40:c2:9c:00:e0:32: a2:69:2e:5b:3f:e7:36:2f:5c:a2:2f:91:c4:14:e4: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DC:05:E1:6D:F0:D9:A2:BF:41:4E:7A:ED:7D:1B:C9:63:2C:47:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89fa792f-ace9-3717-b0d1-56deb16571ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:81:4f:2c:c6:e6:da:fa:86:f9:50:cb:39:63:66:72:7a:9c: bc:58:a6:67:e7:a9:57:e7:6e:44:e9:1d:cb:aa:76:14:1c:2b: 5b:b6:a8:35:0a:20:dd:67:12:be:6f:48:9e:51:ed:31:f8:a9: 65:e9:22:de:f3:04:15:8e:68:da:a7:6c:33:17:8d:42:ec:5a: 86:4f:db:98:b4:83:ef:15:e6:23:88:08:22:f3:ef:b9:69:62: b1:90:19:e8:aa:4c:c0:13:b1:a9:35:15:4a:b7:71:be:63:43: c2:2a:a6:4f:34:61:8d:7f:b1:49:d2:0f:db:a1:eb:d0:fc:1f: 3e:79:f9:4a:01:9f:8a:ae:77:ad:f9:39:a2:b5:89:ea:df:0e: 8d:ae:82:ec:7e:5d:79:b2:ea:83:c4:4e:ea:03:7b:f9:f3:86: 4a:dc:18:ab:df:97:37:9f:05:9a:57:da:c0:43:22:d7:5c:b2: cd:3c:26:41:9b:17:89:21:3c:99:26:07:86:93:74:b3:3e:e5: 36:2e:5c:74:08:7f:6e:79:0b:13:67:7f:db:b1:00:2a:bf:71: 18:8c:d0:3b:1f:bc:75:d9:31:d3:2b:d6:f8:b2:59:b1:eb:4b: b9:57:a9:f2:f3:b2:01:74:dd:b3:7a:a1:23:6e:92:b8:2f:19: fc:c2:e2:a5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE70TLN5b8THYRsEiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MDhiN2JjNmYtZDk0My00M2NiLTk0NGEtMDFkYjM4NTViNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2SwAB6iwBrUudRc27oteAE4j0TZ9f+fxdXh mhZDHoMHhT7gA6/gkusQQH4tXd66P1xmZ95Ivtk1hXif+qVQ7t8roK5VK5qTLMlJ vthd48b/LUNAWbJuUrQ0GBqpMVACGesOfdDEEooWnY3kBaYopRan1UjOlB+wEiSm XrvAtS2Z12R8z+hxqR5bpref/0CtAvUMjAc4wZU2y7s35cgZUp3h975eEU+7MFtG SlRL8eRyqBi0vGbLqCk5IcQ4MYBj+ld1GWKSEyYWbF7KuF0PwZHsI9H0zUuHUOUh ogOxInd90yYKV9gSLY9AwpwA4DKiaS5bP+c2L1yiL5HEFOTbwQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB3cBeFt8Nmiv0FOeu19G8ljLEfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlmYTc5MmYtYWNlOS0z NzE3LWIwZDEtNTZkZWIxNjU3MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBrd4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHIFPLMbm2vqG+VDLOWNmcnqcvFimZ+epV+duROkdy6p2FBwrW7aoNQog 3WcSvm9InlHtMfipZeki3vMEFY5o2qdsMxeNQuxahk/bmLSD7xXmI4gIIvPvuWli sZAZ6KpMwBOxqTUVSrdxvmNDwiqmTzRhjX+xSdIP26Hr0PwfPnn5SgGfiq53rfk5 orWJ6t8Oja6C7H5debLqg8RO6gN7+fOGStwYq9+XN58FmlfawEMi11yyzTwmQZsX iSE8mSYHhpN0sz7lNi5cdAh/bnkLE2d/27EAKr9xGIzQOx+8ddkx0yvW+LJZsetL uVep8vOyAXTds3qhI26SuC8Z/MLipQ== -----END CERTIFICATE-----Generated at Sat Sep 5 04:04:54 2026 by rpki-client