$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa File: 9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa (raw, json) Hash identifier: 3Hs8Fp9mnkjGrNp3mqZrtcWcm87jvHQ8gx3o/u2vGw0= Subject key identifier: 70:21:0E:C4:8E:2B:51:FD:8D:2E:1A:AA:6B:A2:F8:9C:3F:E2:C9:C6 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584DF4DB50416EE7D036A69A5680 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 40676 IP address blocks: 199.89.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:50:41:6e:e7:d0:36:a6:9a:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=4ece69df-b547-45e6-9da5-b25d90eb265d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:6d:1d:14:2b:30:a3:84:2f:36:f9:be:6f: 74:db:f2:7f:8e:17:a6:6a:f8:0e:a7:6c:26:00:61: 79:42:02:dd:f8:0b:d6:56:4c:d9:6a:fa:dc:0a:8a: ad:3a:73:2a:bb:ad:f3:48:c3:6c:06:b5:0e:96:d2: c8:3f:c2:04:1a:d8:5b:07:fb:5b:9d:e4:c4:9b:8b: 7b:5f:76:eb:4e:0a:c5:9c:e1:a9:b6:5b:ad:36:f0: 08:c0:c4:db:ec:4e:38:ef:b2:27:85:12:4f:98:d7: 01:6d:06:b6:65:bc:fa:6e:14:29:84:cd:61:09:eb: e1:6b:da:a2:fc:46:8a:82:a4:9a:d7:f3:a5:83:11: 67:d9:26:59:b8:b8:96:88:3d:d8:ec:a6:ef:81:b3: 84:85:dd:93:d5:8a:3c:e1:c7:60:03:07:cc:f7:4c: 4f:87:07:e1:26:34:c0:2d:33:52:14:cb:54:ab:50: dc:b5:da:f3:13:3c:68:00:59:f7:08:b7:b1:9a:3a: ad:2a:ed:33:95:7e:c5:0e:2e:3c:4d:6b:b9:35:8c: f4:ec:0a:61:d9:b7:50:e0:26:98:ab:9b:9e:44:6f: a9:a6:71:88:7f:8f:c1:c0:6f:0e:51:ab:fb:f0:9b: 86:99:25:e6:7b:b6:47:c2:06:d4:c9:df:49:b6:c5: 7f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:0E:C4:8E:2B:51:FD:8D:2E:1A:AA:6B:A2:F8:9C:3F:E2:C9:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a1:7c:53:f2:ce:42:c3:7c:f5:c0:b1:e2:c0:a8:c6:1a:cc: 08:bc:63:43:ee:7a:e4:ad:25:56:0a:43:44:51:22:32:c5:e2: 57:a1:d0:92:45:91:32:77:96:18:f8:20:51:53:c7:49:c7:3d: ba:21:ea:15:d0:bb:c8:dd:ce:0b:95:6a:f6:a7:65:37:91:33: 53:1c:bd:19:fc:4c:a3:7f:d1:38:59:a9:ff:25:ab:9b:fa:d4: 91:6a:9f:8a:e4:3f:76:b8:12:4c:b5:53:16:12:7e:1a:79:f7: ce:13:0c:32:65:33:9d:d7:ec:aa:5e:a6:fc:8d:b0:ca:7a:04: e6:3c:4c:6b:77:84:d9:5d:75:8a:52:3f:27:c3:42:1f:b7:ee: c9:2f:3a:4d:d9:21:3e:f2:61:48:d3:00:7d:2d:ca:4f:21:be: 0c:43:43:eb:36:e5:50:bb:f8:d6:ae:66:4a:8d:0d:2c:10:37: 92:1c:a1:48:e7:ac:6f:d7:08:d4:df:84:2f:1f:5c:8d:08:2a: 23:9b:bb:88:12:16:95:6e:9c:d2:9b:5b:5e:bc:16:d8:d1:70: dc:21:f9:60:49:16:d8:c9:4e:ea:93:08:50:4a:ab:9a:c0:cc: 17:42:94:1c:69:f4:c6:fe:0f:eb:9e:5d:e6:83:07:08:66:8c: 44:20:3f:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021BBbufQNqaaVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NGVjZTY5ZGYtYjU0Ny00NWU2LTlkYTUtYjI1ZDkwZWIyNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI9tHRQrMKOELzb5vm902/J/jhemavgOp2wm AGF5QgLd+AvWVkzZavrcCoqtOnMqu63zSMNsBrUOltLIP8IEGthbB/tbneTEm4t7 X3brTgrFnOGptlutNvAIwMTb7E4477InhRJPmNcBbQa2Zbz6bhQphM1hCevha9qi /EaKgqSa1/OlgxFn2SZZuLiWiD3Y7KbvgbOEhd2T1Yo84cdgAwfM90xPhwfhJjTA LTNSFMtUq1DctdrzEzxoAFn3CLexmjqtKu0zlX7FDi48TWu5NYz07Aph2bdQ4CaY q5ueRG+ppnGIf4/BwG8OUav78JuGmSXme7ZHwgbUyd9JtsV/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAhDsSOK1H9jS4aqmui+Jw/4snGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvOWQ4ZTYyMTgtNGRjOC0z NGZhLWE1ZTEtMTVmNjNhNGVlYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJahfFPyzkLDfPXAseLAqMYazAi8Y0PueuStJVYKQ0RRIjLF4leh0JJF kTJ3lhj4IFFTx0nHPboh6hXQu8jdzguVavanZTeRM1McvRn8TKN/0ThZqf8lq5v6 1JFqn4rkP3a4Eky1UxYSfhp5984TDDJlM53X7KpepvyNsMp6BOY8TGt3hNlddYpS PyfDQh+37skvOk3ZIT7yYUjTAH0tyk8hvgxDQ+s25VC7+NauZkqNDSwQN5IcoUjn rG/XCNTfhC8fXI0IKiObu4gSFpVunNKbW168FtjRcNwh+WBJFtjJTuqTCFBKq5rA zBdClBxp9Mb+D+ueXeaDBwhmjEQgPx4= -----END CERTIFICATE-----Generated at Thu May 28 13:38:17 2026 by rpki-client