$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa File: fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa (raw, json) Hash identifier: kwZYrM5Ngz0ZD8WFx8txGHsa0jJdIjxA6mRD48mXTGM= Subject key identifier: 5B:21:B7:36:17:81:B2:94:6D:5F:1D:37:BF:44:04:3F:3C:C5:E8:43 Certificate issuer: /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Certificate serial: 010D0C9F4328584F698D89F7508A5203BAB15EC0 Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 173.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:89:f7:50:8a:52:03:ba:b1:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=6474ab01-48da-4844-a4a1-05fc2d28a002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:fa:af:2e:79:97:c8:c2:7b:67:ac:6e:7c: 28:1b:68:d9:07:fb:66:20:72:f4:54:1b:37:4e:73: 81:a4:a5:dd:ce:0d:d2:1b:e5:96:b1:7b:28:25:a9: 4c:5f:c6:68:aa:78:6b:8b:c1:2f:c6:43:0d:a4:d4: a4:e1:5b:eb:4a:3b:1b:91:ca:48:be:6f:b3:fa:e4: 20:21:d9:ac:f4:77:c5:82:cf:ca:62:6a:d0:cc:d0: 4d:9a:7d:71:36:de:de:1f:a7:bb:dd:a4:ca:49:0b: 07:17:3f:e4:33:f2:f1:c9:7a:93:98:f5:b6:a4:06: ee:73:e4:5c:df:31:80:7e:79:ac:17:45:0c:10:8f: 15:c2:f7:db:0c:b3:b8:ce:31:c1:cc:02:6f:5a:e3: 5c:1d:b9:70:d5:9d:41:c1:3a:a8:75:40:df:ba:b2: b0:38:6e:66:78:c9:fc:5a:f6:56:bb:3a:4c:2e:ae: 91:dd:9d:b5:5b:fa:96:07:a4:88:42:dc:03:bc:ea: f0:3f:82:ce:c2:81:fb:27:00:2c:9c:88:14:ed:e3: 91:22:9e:4e:21:29:d3:fe:5f:52:c2:9d:85:b1:f7: c3:62:3c:e3:8c:7e:db:60:12:72:c9:bf:f3:52:82: 38:12:72:c0:df:53:d9:05:33:d4:b9:de:7d:35:f9: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:B7:36:17:81:B2:94:6D:5F:1D:37:BF:44:04:3F:3C:C5:E8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/fc872b64-dfea-3313-9c57-cf28a8ad0f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl X509v3 Authority Key Identifier: keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer sbgp-ipAddrBlock: critical IPv4: 173.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:a8:89:1d:80:4a:d9:d5:94:22:aa:c3:a4:41:75:0a:77:e9: 63:da:62:d5:39:7c:b5:aa:37:1b:41:14:76:43:79:3d:a5:96: 79:ca:b1:71:63:c2:14:f3:fe:6b:b1:bf:f8:ce:50:70:db:96: ed:88:79:6c:81:0d:5d:08:f8:bc:20:be:31:d9:c8:3e:ad:ff: 46:41:7a:62:91:06:83:98:27:d7:47:09:8c:35:62:67:0c:8a: 07:6c:c2:a5:d5:c0:69:ce:2d:21:3e:9e:4e:8e:b6:04:8d:94: bb:98:b7:24:ce:bf:5b:d5:d0:ec:62:e3:eb:8a:77:0e:ce:f9: 2b:63:4b:5e:ff:01:26:5e:eb:38:fd:ea:69:8d:d8:9c:f1:bd: 96:3c:6e:0b:99:2b:d6:ca:15:16:b4:bc:2a:ac:20:af:fd:e8: 51:53:b3:af:3c:3d:f6:05:d0:ab:e4:5a:0a:85:17:00:09:68: f5:ad:0b:d9:22:87:5c:36:ee:20:10:04:ec:47:62:62:5f:72: 37:a2:d1:21:65:9f:87:28:02:c0:ff:f4:06:b4:94:89:89:5e: c9:45:ab:74:3e:a1:63:1b:b3:0c:49:63:2f:86:fb:95:af:e3: a0:dd:2c:7f:5f:18:49:c0:b3:df:d7:34:2f:1f:0a:e8:b2:25: c3:7e:46:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYn3UIpSA7qxXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUw MGJjMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NjQ3NGFiMDEtNDhkYS00ODQ0LWE0YTEtMDVmYzJkMjhhMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYb6ry55l8jCe2esbnwoG2jZB/tmIHL0VBs3 TnOBpKXdzg3SG+WWsXsoJalMX8Zoqnhri8EvxkMNpNSk4VvrSjsbkcpIvm+z+uQg Idms9HfFgs/KYmrQzNBNmn1xNt7eH6e73aTKSQsHFz/kM/LxyXqTmPW2pAbuc+Rc 3zGAfnmsF0UMEI8VwvfbDLO4zjHBzAJvWuNcHblw1Z1BwTqodUDfurKwOG5meMn8 WvZWuzpMLq6R3Z21W/qWB6SIQtwDvOrwP4LOwoH7JwAsnIgU7eORIp5OISnT/l9S wp2FsffDYjzjjH7bYBJyyb/zUoI4EnLA31PZBTPUud59NfmcawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFshtzYXgbKUbV8dN79EBD88xehDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OWIw ODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvZmM4NzJiNjQtZGZlYS0z MzEzLTljNTctY2YyOGE4YWQwZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODliMDg3N2YtZjdhYy00YzEzLTlh MTAtYjAyMzU4ZWUwMGJjLzg5YjA4NzdmLWY3YWMtNGMxMy05YTEwLWIwMjM1OGVl MDBiYy5jcmwwHwYDVR0jBBgwFoAU4qqXMdzDv7nFqcRXYAVtTrwbvKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIz NThlZTAwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuoiR2AStnVlCKqw6RBdQp36WPaYtU5fLWqNxtBFHZDeT2llnnKsXFj whTz/muxv/jOUHDblu2IeWyBDV0I+LwgvjHZyD6t/0ZBemKRBoOYJ9dHCYw1YmcM igdswqXVwGnOLSE+nk6OtgSNlLuYtyTOv1vV0Oxi4+uKdw7O+StjS17/ASZe6zj9 6mmN2JzxvZY8bguZK9bKFRa0vCqsIK/96FFTs688PfYF0KvkWgqFFwAJaPWtC9ki h1w27iAQBOxHYmJfcjei0SFln4coAsD/9Aa0lImJXslFq3Q+oWMbswxJYy+G+5Wv 46DdLH9fGEnAs9/XNC8fCuiyJcN+RkU= -----END CERTIFICATE-----Generated at Wed Oct 7 17:06:55 2026 by rpki-client