$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa File: 89690801-3877-35af-874c-1b06e4cd1f4a.roa (raw, json) Hash identifier: mBZCz1RvfmYP0TQXYfy/2qxdvUkXQmVioBz9Bib3Ozc= Subject key identifier: 06:DB:DB:29:8C:64:CE:5C:FC:42:1F:3C:BF:D7:A3:BA:9E:3C:60:5F Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584FA85DF4C553C18A0CF60ACE00 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 62467 IP address blocks: 204.197.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5d:f4:c5:53:c1:8a:0c:f6:0a:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=bb826c21-185a-499d-8947-c1e57d622727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:95:d6:f8:3f:72:c9:9c:0a:7e:93:46:93: 97:53:8b:bb:f3:08:8b:6c:f0:c7:78:89:35:82:34: e0:83:d3:d0:de:20:79:c3:b6:64:6b:ed:7d:f1:74: f1:dc:fc:8e:b6:96:fd:1c:7f:e3:70:ee:62:d2:19: 50:66:b4:98:61:61:ec:16:53:7d:37:9d:7e:d4:09: a3:54:89:32:f2:60:81:51:82:af:dd:ea:7c:97:33: 35:f2:40:14:a6:c0:c5:71:9d:57:ae:5f:99:62:06: 03:aa:58:f4:a4:43:7f:05:b0:ea:66:3d:88:51:4a: f3:51:bb:fc:94:6f:77:75:de:26:56:2e:d2:25:9d: b7:ab:bd:8e:99:1e:2e:2a:e6:9c:51:d3:03:8a:5c: dd:4e:68:45:88:97:bf:1c:0c:4f:d5:3f:73:b3:a9: 20:76:a3:05:16:98:46:90:35:db:af:c8:62:ae:b6: 55:1e:33:06:f7:20:97:b6:df:f3:fe:60:ed:f7:0d: bd:f9:6b:b2:97:b6:32:b4:79:7e:2d:4e:41:ff:8a: a1:ca:1f:1c:e5:90:ce:63:08:af:f5:82:84:3e:04: ab:36:36:6e:f4:c6:e2:54:4b:e8:5c:e0:b8:84:3a: 5b:50:a5:13:06:de:eb:ce:aa:b3:43:ac:6b:ee:35: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DB:DB:29:8C:64:CE:5C:FC:42:1F:3C:BF:D7:A3:BA:9E:3C:60:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c3:16:25:2f:11:f7:a3:77:5c:3a:77:58:7c:f0:27:eb:c8: 34:ae:24:42:76:19:0c:1a:fb:ed:70:03:c3:b5:c7:26:86:f5: 9d:2d:01:16:b6:78:fe:2f:5d:04:66:56:11:4c:48:72:bc:c1: 95:68:a0:79:37:58:3c:c2:f2:70:0f:f5:32:c9:2b:ec:71:e7: 17:60:9e:ab:87:45:15:7c:34:7b:47:6f:d3:92:48:d7:aa:90: bc:0f:77:c5:96:52:d4:a7:6c:1d:c3:d5:ae:b5:2a:67:55:69: f4:02:58:27:c4:d9:a8:ae:e6:f1:4b:6f:fc:56:a6:18:97:45: 81:f5:b9:70:63:63:c0:05:19:86:f8:6f:7e:b9:8a:d0:52:a1: 25:66:cc:bf:d6:6b:f2:34:94:82:f5:34:de:30:fb:6e:5b:d4: 5b:0b:dd:a2:cc:41:af:74:0d:fd:1e:ce:a5:60:66:9d:6a:09: e9:35:80:81:3f:fd:b2:54:23:0d:27:a1:4d:79:66:a8:c6:e3: eb:8b:25:5f:12:14:b7:7f:c9:3c:95:0a:b2:9c:69:01:19:48: df:7a:90:a1:13:9b:a1:12:35:c1:7b:07:d7:e8:bc:d4:41:e8: 5d:25:07:66:c6:9c:bf:d0:2c:b8:4c:d0:58:85:e1:f3:f0:39: da:2c:42:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXfTFU8GKDPYKzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YmI4MjZjMjEtMTg1YS00OTlkLTg5NDctYzFlNTdkNjIyNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeCV1vg/csmcCn6TRpOXU4u78wiLbPDHeIk1 gjTgg9PQ3iB5w7Zka+198XTx3PyOtpb9HH/jcO5i0hlQZrSYYWHsFlN9N51+1Amj VIky8mCBUYKv3ep8lzM18kAUpsDFcZ1Xrl+ZYgYDqlj0pEN/BbDqZj2IUUrzUbv8 lG93dd4mVi7SJZ23q72OmR4uKuacUdMDilzdTmhFiJe/HAxP1T9zs6kgdqMFFphG kDXbr8hirrZVHjMG9yCXtt/z/mDt9w29+Wuyl7YytHl+LU5B/4qhyh8c5ZDOYwiv 9YKEPgSrNjZu9MbiVEvoXOC4hDpbUKUTBt7rzqqzQ6xr7jVZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbb2ymMZM5c/EIfPL/Xo7qePGBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvODk2OTA4MDEtMzg3Ny0z NWFmLTg3NGMtMWIwNmU0Y2QxZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3DFiUvEfejd1w6d1h88CfryDSuJEJ2GQwa++1wA8O1xyaG9Z0tARa2 eP4vXQRmVhFMSHK8wZVooHk3WDzC8nAP9TLJK+xx5xdgnquHRRV8NHtHb9OSSNeq kLwPd8WWUtSnbB3D1a61KmdVafQCWCfE2aiu5vFLb/xWphiXRYH1uXBjY8AFGYb4 b365itBSoSVmzL/Wa/I0lIL1NN4w+25b1FsL3aLMQa90Df0ezqVgZp1qCek1gIE/ /bJUIw0noU15ZqjG4+uLJV8SFLd/yTyVCrKcaQEZSN96kKETm6ESNcF7B9fovNRB 6F0lB2bGnL/QLLhM0FiF4fPwOdosQlk= -----END CERTIFICATE-----Generated at Sun Nov 1 09:18:49 2026 by rpki-client