$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa File: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (raw, json) Hash identifier: 4brbuH3dgfaZ0skTzM2hljAzHKpzaORbnPnl6Wsj70E= Subject key identifier: 9B:AD:0D:64:0D:86:24:92:11:BF:62:B4:92:D2:F4:74:34:39:2E:2C Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584D5234F5702FAB239DE8B44100 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa Signing time: Sat 28 Mar 2026 18:44:34 +0000 ROA not before: Sat 28 Mar 2026 18:44:34 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 10918 IP address blocks: 173.243.232.0/22 maxlen: 32 199.96.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f5:70:2f:ab:23:9d:e8:b4:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Mar 28 18:44:34 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=dd8ac240-e43b-4967-baff-946e79d2d4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:08:1a:30:6c:23:d1:cc:c9:24:31:2f:c2: 94:1d:06:c5:6c:09:06:74:32:81:a8:83:14:6d:2a: 2c:4c:b2:ad:69:98:af:1d:f1:99:d7:f5:35:9f:b4: 7e:d9:69:53:50:c8:ba:4e:86:dd:fd:fa:73:01:be: 87:8d:6a:ae:f8:df:80:a8:71:e5:a2:68:5b:48:6e: 22:ac:ec:d2:fb:1a:0b:64:a7:a6:be:24:5a:85:11: ab:3c:1d:1c:02:13:9b:da:7e:89:ad:fa:28:1f:8c: 68:a3:cb:cc:40:3b:3b:15:b2:bc:9e:51:e8:1d:8b: 65:ff:f8:05:b2:ef:d3:be:f7:32:9c:a7:28:f4:1a: 18:12:43:d5:4d:28:40:f2:5d:da:92:94:c4:2f:89: e2:cf:0b:20:43:35:9a:48:25:37:34:f8:64:f0:31: ad:7e:5e:48:4d:9d:3c:74:ee:58:d8:ec:5f:f8:4d: 67:bb:01:25:04:fe:e8:85:9e:eb:1b:e2:ac:c0:47: a3:20:4b:42:62:59:ed:41:13:7a:e7:56:f0:6b:f8: 70:5f:08:6f:7e:0d:42:81:60:d8:08:c1:a7:c7:83: 41:d5:9a:fb:66:51:66:5d:75:f4:61:48:42:eb:fc: a9:09:db:ae:2b:14:44:d9:b2:a6:13:bc:19:be:3f: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AD:0D:64:0D:86:24:92:11:BF:62:B4:92:D2:F4:74:34:39:2E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: 173.243.232.0/22 199.96.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4d:27:e6:cd:96:2c:9f:c2:8a:fc:aa:de:fc:bf:b4:29:28: 3a:7c:cd:cc:1f:8c:4a:f0:81:60:ad:cc:2f:07:c8:74:96:bf: 58:85:9a:9d:0a:fe:b3:aa:09:6a:e0:00:0d:9a:cb:62:15:1b: 0f:5e:ce:04:74:77:c8:07:56:8e:96:0f:b4:85:31:e4:d8:1c: 66:6e:a5:b6:af:4d:b2:19:c8:93:35:36:37:a1:e6:cb:d3:5d: d3:35:31:a2:d7:c7:76:cc:76:f7:2a:5d:73:9b:82:90:c6:f7: ea:bc:4d:f6:f6:35:05:f8:25:f9:7a:55:f2:5f:26:07:fb:1f: 83:f6:0b:12:7b:04:55:6c:43:1c:d7:2a:ad:4e:03:19:cf:bb: 75:ad:d9:19:0b:e3:60:2c:5a:f5:49:8b:10:2a:cf:a7:da:e1: a9:10:4e:af:47:a7:29:23:8e:3a:bb:2f:3a:0c:7d:99:59:e1: f6:55:e6:48:77:b2:5e:f2:ba:af:ea:a3:aa:c3:0a:df:5f:d8: 5e:88:a4:e6:ee:fc:39:45:6e:6f:3e:a3:d3:87:77:c1:bf:70: 03:27:af:b5:7c:ac:5c:85:1a:2b:a0:5c:9e:18:57:06:4b:01: 5e:8a:48:75:75:3c:0a:4e:da:ac:df:2b:08:5e:2c:28:9d:de: 3e:ab:37:00 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SNPVwL6sjnei0QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDMyODE4NDQzNFoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZGQ4YWMyNDAtZTQzYi00OTY3LWJhZmYtOTQ2ZTc5ZDJkNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpEIGjBsI9HMySQxL8KUHQbFbAkGdDKBqIMU bSosTLKtaZivHfGZ1/U1n7R+2WlTUMi6Tobd/fpzAb6HjWqu+N+AqHHlomhbSG4i rOzS+xoLZKemviRahRGrPB0cAhOb2n6JrfooH4xoo8vMQDs7FbK8nlHoHYtl//gF su/TvvcynKco9BoYEkPVTShA8l3akpTEL4nizwsgQzWaSCU3NPhk8DGtfl5ITZ08 dO5Y2Oxf+E1nuwElBP7ohZ7rG+KswEejIEtCYlntQRN651bwa/hwXwhvfg1CgWDY CMGnx4NB1Zr7ZlFmXXX0YUhC6/ypCduuKxRE2bKmE7wZvj+nVQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJutDWQNhiSSEb9itJLS9HQ0OS4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvOGNmZjZiOTktYTliMC0z ZjViLTkyMTgtODk1ZTAxNzVmZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCrfPoAwQC x2BsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFNNJ+bNliyfwor8qt78v7QpKDp8zcwfjErwgWCtzC8HyHSW v1iFmp0K/rOqCWrgAA2ay2IVGw9ezgR0d8gHVo6WD7SFMeTYHGZupbavTbIZyJM1 Njeh5svTXdM1MaLXx3bMdvcqXXObgpDG9+q8Tfb2NQX4Jfl6VfJfJgf7H4P2CxJ7 BFVsQxzXKq1OAxnPu3Wt2RkL42AsWvVJixAqz6fa4akQTq9Hpykjjjq7LzoMfZlZ 4fZV5kh3sl7yuq/qo6rDCt9f2F6IpObu/DlFbm8+o9OHd8G/cAMnr7V8rFyFGiug XJ4YVwZLAV6KSHV1PApO2qzfKwheLCid3j6rNwA= -----END CERTIFICATE-----Generated at Mon Apr 13 12:05:24 2026 by rpki-client