$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa File: aa17f969-ed94-3d77-a18a-b485416a12af.roa (raw, json) Hash identifier: v8dJ0psUXyLMbmCzuxg/Pw/lLS0EofmuvhnfyPkGayQ= Subject key identifier: 4B:90:07:9D:9B:A0:21:87:94:FB:D1:FF:D2:8D:10:88:35:E1:81:B5 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584EA797149C751BC811102E6B00 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40676 IP address blocks: 199.89.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:14:9c:75:1b:c8:11:10:2e:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b55db013-8eb2-4a90-a804-8a172a245538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:ec:fe:2d:cb:34:e3:6f:ec:de:65:cb:97: 8d:6c:bd:e4:69:81:81:31:1a:df:9a:9c:e2:6b:d1: 7f:ca:ba:fe:43:aa:1c:e6:16:41:a5:5d:ea:74:31: 31:b9:41:9c:e0:a4:42:4d:44:8b:0c:5a:1c:b7:50: e0:57:ab:97:11:29:b6:b3:50:39:37:ce:06:b8:6d: 23:93:96:71:13:8f:37:15:eb:b5:3a:d1:48:9c:c1: 0c:e0:08:51:c6:d0:dc:71:e7:ec:da:9f:57:4e:60: e1:02:60:bb:07:c0:b2:33:e2:70:d7:c0:e8:64:50: a5:39:02:00:6d:36:01:3b:03:60:f1:cd:94:b2:e3: cd:23:98:7c:37:8b:4b:1d:a9:24:67:73:68:db:9b: 91:c2:f8:50:27:2f:26:c2:70:24:ab:53:a1:f1:20: dc:19:14:33:6f:4d:d3:8f:6a:6e:a0:e7:cd:bd:19: 35:9a:33:3e:a4:83:2b:51:cc:3e:33:ca:3a:c1:d9: 77:74:d6:b8:c6:93:19:5b:94:4e:78:79:65:79:d7: 5a:a5:a4:ca:6d:84:48:10:58:fb:93:61:b5:b1:52: cd:71:ce:af:ec:93:29:80:46:ce:9e:d7:d5:a2:e7: e9:a2:2d:7c:78:4b:f7:7d:f7:4d:02:59:2d:92:90: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:90:07:9D:9B:A0:21:87:94:FB:D1:FF:D2:8D:10:88:35:E1:81:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ea:82:36:bc:07:ad:25:92:5e:cb:e0:50:03:66:56:0d:9c: ed:f7:83:f0:42:f3:4b:5f:1b:e7:37:50:bd:32:55:f5:37:fd: c4:2f:31:c7:96:bd:cc:ad:52:9b:83:8e:f8:24:ae:9e:21:98: 36:c9:e7:7c:90:6b:a4:f0:ea:58:17:a7:d7:c2:17:fe:57:79: d3:ea:51:d2:1f:a6:a4:ef:ec:34:e2:62:e9:de:c2:68:33:7e: 79:ca:92:8f:64:db:6b:0a:47:37:9f:46:4c:c8:60:b7:6e:81: 4d:a8:0b:3c:84:94:70:7c:df:04:72:06:38:6b:78:b2:dd:b3: 1d:af:c6:9f:e5:be:04:46:fe:c3:6c:da:2c:6a:48:97:34:63: d1:31:44:a1:71:01:5b:3a:c0:e9:6f:cb:a7:7e:85:a8:d7:82: 88:3c:bd:d0:16:79:90:72:f4:1b:02:29:74:78:8d:3a:7e:82: b2:79:08:b6:e6:5a:85:1a:4a:77:81:50:b9:61:d3:d2:ef:03: 52:6c:d9:6f:81:03:c9:ea:25:d8:24:04:7f:1b:24:30:6b:dd: d9:f9:88:b0:23:37:30:a1:0e:b9:05:7f:13:ed:0a:37:fd:f9: 32:e8:a9:ff:bc:a1:a1:19:32:fe:db:b9:3c:28:29:39:13:da: 68:1a:ce:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlxScdRvIERAuawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjU1ZGIwMTMtOGViMi00YTkwLWE4MDQtOGExNzJhMjQ1NTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu/s/i3LNONv7N5ly5eNbL3kaYGBMRrfmpzi a9F/yrr+Q6oc5hZBpV3qdDExuUGc4KRCTUSLDFoct1DgV6uXESm2s1A5N84GuG0j k5ZxE483Feu1OtFInMEM4AhRxtDccefs2p9XTmDhAmC7B8CyM+Jw18DoZFClOQIA bTYBOwNg8c2UsuPNI5h8N4tLHakkZ3No25uRwvhQJy8mwnAkq1Oh8SDcGRQzb03T j2puoOfNvRk1mjM+pIMrUcw+M8o6wdl3dNa4xpMZW5ROeHlleddapaTKbYRIEFj7 k2G1sVLNcc6v7JMpgEbOntfVoufpoi18eEv3ffdNAlktkpCF8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuQB52boCGHlPvR/9KNEIg14YG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYWExN2Y5NjktZWQ5NC0z ZDc3LWExOGEtYjQ4NTQxNmExMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITqgja8B60lkl7L4FADZlYNnO33g/BC80tfG+c3UL0yVfU3/cQvMceW vcytUpuDjvgkrp4hmDbJ53yQa6Tw6lgXp9fCF/5XedPqUdIfpqTv7DTiYunewmgz fnnKko9k22sKRzefRkzIYLdugU2oCzyElHB83wRyBjhreLLdsx2vxp/lvgRG/sNs 2ixqSJc0Y9ExRKFxAVs6wOlvy6d+hajXgog8vdAWeZBy9BsCKXR4jTp+grJ5CLbm WoUaSneBULlh09LvA1Js2W+BA8nqJdgkBH8bJDBr3dn5iLAjNzChDrkFfxPtCjf9 +TLoqf+8oaEZMv7buTwoKTkT2mgazpQ= -----END CERTIFICATE-----Generated at Thu Aug 27 04:53:16 2026 by rpki-client