$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/c1d00dc9-feb5-357a-bd96-8cd216083d3b.roa File: c1d00dc9-feb5-357a-bd96-8cd216083d3b.roa (raw, json) Hash identifier: ml+ynGQXI2GxvfQeK7q0i6q0sZCWY0uieCKEff6OpJI= Subject key identifier: BA:EF:DD:CD:29:9A:34:27:DC:29:72:52:9E:19:46:64:8E:82:9A:83 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E8FFDC19D227535694A35D320 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/c1d00dc9-feb5-357a-bd96-8cd216083d3b.roa Signing time: Mon 20 Jul 2026 14:40:24 +0000 ROA not before: Mon 20 Jul 2026 14:40:24 +0000 ROA not after: Sun 18 Oct 2026 14:40:24 +0000 asID: 10279 IP address blocks: 198.13.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:fd:c1:9d:22:75:35:69:4a:35:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 20 14:40:24 2026 GMT Not After : Oct 18 14:40:24 2026 GMT Subject: CN=edbd971b-4160-4149-ac57-b47e48beef21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:c7:97:e2:01:75:ca:84:95:55:39:8b:e6: d3:16:a3:2d:a7:01:51:4b:ca:63:f8:03:0c:63:3c: 6c:eb:ab:19:b3:80:78:ad:5c:4d:88:a0:d3:35:94: bd:b7:29:90:77:d3:2d:6f:36:57:a7:02:a4:27:b1: ac:72:b2:28:5b:e7:25:bd:07:13:89:44:a3:ab:4d: e5:8d:84:70:e5:36:cc:5a:69:78:d0:bd:f2:ae:0f: eb:14:7b:35:fe:4b:ba:10:12:30:f6:b5:fa:e8:b1: c0:58:73:4e:f2:1b:2c:02:16:46:06:c9:3c:b9:8a: aa:2e:e6:86:2f:d5:98:63:17:47:71:b6:38:0d:b1: 85:47:67:e9:9f:ef:2e:3e:b6:a9:3b:eb:3c:7a:2c: 89:83:65:c9:f2:ac:26:ba:ef:a8:cd:50:ad:b5:ca: 28:10:76:35:4b:ec:a8:85:6e:d7:07:50:db:4e:b3: 68:f7:1d:95:ed:a8:ea:34:52:0a:8b:0a:5e:80:f5: 96:25:d8:21:11:1e:52:88:b5:2a:a1:76:0c:32:2c: 56:f0:e4:0a:6a:d8:5e:a0:7d:1f:f7:8a:0d:ab:d2: 30:dc:df:51:a6:11:3e:34:02:8e:34:dd:9f:45:96: cd:de:f8:05:2c:b0:6a:f7:2a:ac:2b:1d:74:f9:ba: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EF:DD:CD:29:9A:34:27:DC:29:72:52:9E:19:46:64:8E:82:9A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/c1d00dc9-feb5-357a-bd96-8cd216083d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 198.13.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:91:0e:4a:0f:14:ce:dc:81:b7:8f:01:e3:74:3e:8d:14:e3: 5e:2a:30:a6:92:3b:9f:c5:ee:d6:15:87:50:87:a7:2e:07:e9: 3b:fe:21:1d:b7:cd:b6:1b:54:18:98:a8:87:64:a9:68:f3:99: 11:bb:1d:88:f2:13:b9:3e:67:25:73:0a:e0:23:05:42:b4:83: 54:eb:2b:77:fc:83:2f:50:78:03:a2:6f:5d:42:2a:52:76:94: 0d:3c:c0:df:89:39:fd:8b:94:0b:bf:05:d2:54:9f:ef:f5:ab: 6e:44:6c:d5:5b:5d:c4:b4:ca:c7:3e:f2:c5:ab:9e:20:5a:35: 54:ca:9c:13:6d:78:3b:26:65:22:b4:71:c5:9b:6f:a8:29:8c: 49:da:20:b6:d6:4d:d2:6b:bb:47:d9:eb:bc:4d:31:b8:c7:50: 6d:0c:7f:aa:72:53:4d:ba:0b:63:b3:a2:54:cd:e9:84:db:b2: 69:0a:a3:70:53:0b:f5:42:fe:18:e7:53:73:36:e7:89:20:0d: 9f:20:6b:cb:da:f2:aa:0f:cd:a7:51:fa:65:e6:f7:a3:ab:20: a1:0a:96:14:96:89:4f:85:2f:e0:d5:79:06:cc:e3:a8:16:cc: 20:43:4a:4d:c5:0a:bf:5d:aa:6a:42:77:88:23:4e:7e:64:79: 71:cf:72:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6P/cGdInU1aUo10yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcyMDE0NDAyNFoXDTI2MTAxODE0NDAyNFowLzEtMCsGA1UEAxMk ZWRiZDk3MWItNDE2MC00MTQ5LWFjNTctYjQ3ZTQ4YmVlZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQrHl+IBdcqElVU5i+bTFqMtpwFRS8pj+AMM Yzxs66sZs4B4rVxNiKDTNZS9tymQd9MtbzZXpwKkJ7GscrIoW+clvQcTiUSjq03l jYRw5TbMWml40L3yrg/rFHs1/ku6EBIw9rX66LHAWHNO8hssAhZGBsk8uYqqLuaG L9WYYxdHcbY4DbGFR2fpn+8uPrapO+s8eiyJg2XJ8qwmuu+ozVCttcooEHY1S+yo hW7XB1DbTrNo9x2V7ajqNFIKiwpegPWWJdghER5SiLUqoXYMMixW8OQKatheoH0f 94oNq9Iw3N9RphE+NAKONN2fRZbN3vgFLLBq9yqsKx10+bohaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrv3c0pmjQn3ClyUp4ZRmSOgpqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvYzFkMDBkYzktZmViNS0z NTdhLWJkOTYtOGNkMjE2MDgzZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGRDkoPFM7cgbePAeN0Po0U414qMKaSO5/F7tYVh1CHpy4H6Tv+IR23 zbYbVBiYqIdkqWjzmRG7HYjyE7k+ZyVzCuAjBUK0g1TrK3f8gy9QeAOib11CKlJ2 lA08wN+JOf2LlAu/BdJUn+/1q25EbNVbXcS0ysc+8sWrniBaNVTKnBNteDsmZSK0 ccWbb6gpjEnaILbWTdJru0fZ67xNMbjHUG0Mf6pyU026C2OzolTN6YTbsmkKo3BT C/VC/hjnU3M254kgDZ8ga8va8qoPzadR+mXm96OrIKEKlhSWiU+FL+DVeQbM46gW zCBDSk3FCr9dqmpCd4gjTn5keXHPcuI= -----END CERTIFICATE-----Generated at Tue Jul 21 20:11:58 2026 by rpki-client