$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa File: 89690801-3877-35af-874c-1b06e4cd1f4a.roa (raw, json) Hash identifier: 34rHZol4XMtl6q7udBkhH8bmMv7SMftK3LSCdQvt9W0= Subject key identifier: 12:A0:32:D3:1E:D7:D4:DE:0C:36:AD:92:B2:42:38:30:AA:ED:2E:59 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584F0672438394FFC1365BFBB980 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 62467 IP address blocks: 204.197.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:43:83:94:ff:c1:36:5b:fb:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=b9288ba9-6b26-4ecf-92e7-b038de2f9307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:7c:43:be:5e:6e:4e:c1:43:37:d8:d9:be: e7:dc:0a:e8:30:d9:9e:33:83:d1:73:89:c5:0f:4f: af:88:e7:b3:74:21:36:f5:f9:4a:38:93:50:d1:67: 56:bc:55:89:20:f1:db:b4:50:98:4c:59:cb:76:36: 26:6a:6b:c3:22:82:a8:1f:5c:ab:89:c2:50:3c:2b: dd:ee:28:4d:35:6b:a6:d9:c3:1a:20:26:69:e7:36: ae:74:5e:b6:5d:b4:d4:74:76:e4:e0:e4:43:a3:6f: 1b:79:92:ce:8a:da:4b:f6:47:86:1c:14:48:4f:75: 68:65:f0:1c:53:0b:2d:c9:11:2f:b5:42:4d:53:d9: f2:a3:99:2f:f9:ee:45:ab:ce:59:0f:18:a2:7b:33: 3c:10:7a:e0:e8:b9:da:7c:bc:36:54:46:d7:08:3c: 2b:13:7f:4e:ad:30:8b:10:99:74:45:78:72:98:44: a1:41:3b:46:c0:58:54:3e:00:da:c3:d7:cd:dd:d0: ef:c6:4f:cc:42:73:d5:10:c1:b0:6c:17:ab:3e:49: 83:51:d1:4b:77:3e:d2:ad:68:10:7e:eb:6f:08:62: 71:09:f6:f2:05:45:92:85:51:c3:48:87:31:55:90: 11:02:b3:7c:c5:99:0f:75:8b:c1:fc:60:33:6e:58: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A0:32:D3:1E:D7:D4:DE:0C:36:AD:92:B2:42:38:30:AA:ED:2E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:07:f1:3e:1b:e0:df:bd:01:db:9a:5e:a5:b6:0c:81:91:b2: 7d:e3:00:10:82:34:ea:37:65:7d:d2:1f:d2:74:85:61:29:d1: 73:50:ae:eb:58:20:c1:7b:8b:43:78:f0:78:7f:91:c3:cf:ac: 37:11:52:14:50:59:6b:93:88:d2:6c:f3:95:27:ea:3c:14:09: 2a:62:ae:b0:c5:9f:fa:cb:a5:ad:82:bb:b0:9d:16:2e:42:8a: 27:a1:34:23:57:4b:91:39:b4:ba:b2:f0:5c:12:6f:45:2d:6b: c1:ab:ae:1d:ce:1e:a9:07:b7:0c:0c:5f:b0:b7:85:34:95:ba: f5:92:35:00:bb:ba:c6:ca:60:e2:a6:a2:af:d9:5b:9f:29:15: da:f8:aa:c3:f6:57:00:7c:db:7f:a6:0c:a5:f7:af:1d:3c:95: 84:34:3d:b9:59:04:b4:19:4c:d0:6c:2a:56:16:11:d8:18:86: 3d:73:59:5d:63:a5:92:69:1b:81:4f:0e:93:6f:da:71:0c:1c: 12:5c:e2:9f:05:9e:9d:20:37:47:16:bc:62:f3:f6:12:e8:d8: 02:13:c3:13:5c:9f:6c:5c:c8:b7:76:d0:15:8a:73:d8:97:49: c1:39:33:43:ac:dd:81:46:00:1a:2d:6b:fa:41:cd:33:38:6a: 08:77:8c:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckODlP/BNlv7uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjkyODhiYTktNmIyNi00ZWNmLTkyZTctYjAzOGRlMmY5MzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBJ8Q75ebk7BQzfY2b7n3AroMNmeM4PRc4nF D0+viOezdCE29flKOJNQ0WdWvFWJIPHbtFCYTFnLdjYmamvDIoKoH1yricJQPCvd 7ihNNWum2cMaICZp5zaudF62XbTUdHbk4ORDo28beZLOitpL9keGHBRIT3VoZfAc UwstyREvtUJNU9nyo5kv+e5Fq85ZDxiiezM8EHrg6LnafLw2VEbXCDwrE39OrTCL EJl0RXhymEShQTtGwFhUPgDaw9fN3dDvxk/MQnPVEMGwbBerPkmDUdFLdz7SrWgQ futvCGJxCfbyBUWShVHDSIcxVZARArN8xZkPdYvB/GAzbljhCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKgMtMe19TeDDatkrJCODCq7S5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvODk2OTA4MDEtMzg3Ny0z NWFmLTg3NGMtMWIwNmU0Y2QxZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkH8T4b4N+9AduaXqW2DIGRsn3jABCCNOo3ZX3SH9J0hWEp0XNQrutY IMF7i0N48Hh/kcPPrDcRUhRQWWuTiNJs85Un6jwUCSpirrDFn/rLpa2Cu7CdFi5C iiehNCNXS5E5tLqy8FwSb0Uta8Grrh3OHqkHtwwMX7C3hTSVuvWSNQC7usbKYOKm oq/ZW58pFdr4qsP2VwB823+mDKX3rx08lYQ0PblZBLQZTNBsKlYWEdgYhj1zWV1j pZJpG4FPDpNv2nEMHBJc4p8Fnp0gN0cWvGLz9hLo2AITwxNcn2xcyLd20BWKc9iX ScE5M0Os3YFGABota/pBzTM4agh3jKo= -----END CERTIFICATE-----Generated at Sun Sep 13 16:41:38 2026 by rpki-client