$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa File: 1af7f89d-d1da-35f0-bbd2-2132fad40618.roa (raw, json) Hash identifier: skTiayAAhWPHKlWfPcXBVy5eTPvqVMBvZzsvwcfcGSE= Subject key identifier: BB:B3:DE:A5:32:2C:AA:05:87:10:97:52:CE:A1:41:4F:C1:A1:92:A9 Certificate issuer: /CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Certificate serial: 010D0C9F4328584E3E5F2287888C1C0F29B39900 Authority key identifier: 8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 396400 IP address blocks: 204.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:22:87:88:8c:1c:0f:29:b3:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=4522970d-977f-461a-ac90-eb8b70d15bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:44:fb:2b:0a:64:c8:78:0d:30:97:6b:ab: cb:e1:6a:f1:fd:50:08:f0:af:b7:95:e2:a3:0f:36: c3:c4:14:c4:4f:15:22:78:5d:96:64:4d:1e:eb:51: ae:10:17:f2:06:55:35:0f:a4:a8:bc:c9:b9:5c:66: d6:7e:84:b0:3a:8e:ac:f4:d3:fb:c5:55:5c:80:54: 95:0a:1c:4c:bd:18:0d:9c:4d:fa:8a:d9:b6:f3:82: 30:30:db:0a:6b:0c:34:ca:ac:71:9b:d1:22:f0:0f: b1:f4:5e:5c:72:c4:85:52:48:61:8d:93:d1:d5:b5: e8:9d:a7:59:c5:10:c7:43:44:ed:58:1d:64:a9:41: 77:59:fd:12:1f:0b:23:09:a6:e3:93:ab:c3:68:58: c1:66:1a:79:66:6a:4d:e2:42:f5:c2:b1:b7:d5:b8: 0f:6b:a0:2e:fa:93:0f:3e:61:06:3c:49:3d:ce:25: ce:af:f4:18:7c:09:7b:0e:2c:0c:8b:aa:ab:bf:bd: 19:fc:86:4e:d0:5e:8d:97:ca:1b:fd:af:12:dd:cd: 4b:b5:2a:53:bc:c3:62:60:53:55:75:e0:f9:97:4a: 6a:c3:3a:6a:8b:61:d4:45:33:f7:d8:53:d9:49:e7: 7b:21:05:64:15:4e:78:57:52:06:25:e6:1a:88:95: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B3:DE:A5:32:2C:AA:05:87:10:97:52:CE:A1:41:4F:C1:A1:92:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl X509v3 Authority Key Identifier: keyid:8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer sbgp-ipAddrBlock: critical IPv4: 204.89.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:90:6f:77:a3:e6:cd:23:fb:cf:8c:db:b0:c8:3e:01:24:c1: 2a:03:f9:d7:c3:ea:a3:c3:28:12:58:1c:be:42:b0:d5:7b:a4: e3:de:20:8e:23:22:16:e6:da:36:b6:9f:32:3e:26:8d:3d:06: 95:d9:c5:d4:ae:f3:4c:29:ba:bc:b3:86:95:c6:83:e9:16:cd: dc:fb:33:72:8b:36:f1:2d:2d:ea:e5:9a:62:7a:27:9c:ca:c2: 0c:59:67:54:f5:ce:2b:1e:01:5d:ca:36:69:ee:69:62:52:dc: 86:4a:33:da:68:bc:46:60:6e:fe:9f:c5:a8:af:bd:07:83:86: c4:fb:4d:2e:c7:ba:e0:67:3f:1b:b4:db:45:a6:b3:99:ae:43: a6:35:a7:b0:0f:ee:67:02:37:d6:69:3b:f4:42:c1:a7:8a:68: a0:3f:32:7b:3f:17:c6:55:12:7d:67:3c:9a:ca:55:c3:8b:9b: 36:cf:b4:d9:bc:1a:4a:5a:57:72:55:02:f9:90:ce:42:d7:4e: 85:26:e8:26:c2:60:94:41:6f:84:6e:1b:e9:09:4a:79:83:a2: 14:b1:29:31:94:51:ef:0c:f8:dc:8d:cf:ff:8d:65:f2:77:fa: 1b:7a:be:d9:99:01:a3:85:26:80:a7:10:71:95:bc:ea:2b:32: 5c:cc:e4:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XyKHiIwcDymzmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUwZDFiYjktMmVmOS00ODEwLTgxMDktMjVjZGQ1YWZj NGZkMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk NDUyMjk3MGQtOTc3Zi00NjFhLWFjOTAtZWI4YjcwZDE1YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQVE+ysKZMh4DTCXa6vL4Wrx/VAI8K+3leKj DzbDxBTETxUieF2WZE0e61GuEBfyBlU1D6SovMm5XGbWfoSwOo6s9NP7xVVcgFSV ChxMvRgNnE36itm284IwMNsKaww0yqxxm9Ei8A+x9F5ccsSFUkhhjZPR1bXonadZ xRDHQ0TtWB1kqUF3Wf0SHwsjCabjk6vDaFjBZhp5ZmpN4kL1wrG31bgPa6Au+pMP PmEGPEk9ziXOr/QYfAl7DiwMi6qrv70Z/IZO0F6Nl8ob/a8S3c1LtSpTvMNiYFNV deD5l0pqwzpqi2HURTP32FPZSed7IQVkFU54V1IGJeYaiJWJHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuz3qUyLKoFhxCXUs6hQU/BoZKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBk MWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNkZDVhZmM0ZmQvMWFmN2Y4OWQtZDFkYS0z NWYwLWJiZDItMjEzMmZhZDQwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODUwZDFiYjktMmVmOS00ODEwLTgx MDktMjVjZGQ1YWZjNGZkLzg1MGQxYmI5LTJlZjktNDgxMC04MTA5LTI1Y2RkNWFm YzRmZC5jcmwwHwYDVR0jBBgwFoAUi3aXN6k5bQ2eBOg7ZEJtY8aQAHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBkMWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNk ZDVhZmM0ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyQb3ej5s0j+8+M27DIPgEkwSoD+dfD6qPDKBJYHL5CsNV7pOPeII4j Ihbm2ja2nzI+Jo09BpXZxdSu80wpuryzhpXGg+kWzdz7M3KLNvEtLerlmmJ6J5zK wgxZZ1T1ziseAV3KNmnuaWJS3IZKM9povEZgbv6fxaivvQeDhsT7TS7HuuBnPxu0 20Wms5muQ6Y1p7AP7mcCN9ZpO/RCwaeKaKA/Mns/F8ZVEn1nPJrKVcOLmzbPtNm8 GkpaV3JVAvmQzkLXToUm6CbCYJRBb4RuG+kJSnmDohSxKTGUUe8M+NyNz/+NZfJ3 +ht6vtmZAaOFJoCnEHGVvOorMlzM5M4= -----END CERTIFICATE-----Generated at Wed Jul 8 18:03:38 2026 by rpki-client