$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa File: aa17f969-ed94-3d77-a18a-b485416a12af.roa (raw, json) Hash identifier: hh7J2+SKlD6qntYC5C0tslVOU8iB353V0yj0fza3qZg= Subject key identifier: 3E:2F:32:49:CF:0D:A0:6A:B5:E1:C8:3B:74:2C:F7:82:5F:02:48:F1 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584DF4DB9A423D51F7A8F4351B00 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 40676 IP address blocks: 199.89.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:9a:42:3d:51:f7:a8:f4:35:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=e76639e5-52af-4c6a-95c3-3ca243cce1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3c:5b:f8:69:18:df:51:0d:c3:3f:62:07:60: 90:cb:04:6e:e8:33:1c:df:e4:fe:3d:bc:4a:db:b8: 03:57:bc:69:5f:53:f6:6d:ea:d4:91:73:46:4d:23: df:a2:6d:a1:2d:c0:5b:e8:fb:f5:a8:5e:38:59:d4: 0d:07:cd:10:51:82:5e:d9:bb:e7:52:25:ba:ab:7b: b2:4c:4d:87:fc:7c:ef:c0:ec:6c:e8:d1:ce:9d:dd: cc:6e:1c:a3:cd:cd:41:3a:95:8e:43:62:c1:b6:82: 8d:fb:b0:ff:70:6c:f5:4f:30:e9:57:a3:12:95:0f: 04:4b:c8:c5:d3:41:5f:e3:b1:73:99:d4:1b:b3:d0: 04:a2:17:8f:9e:b0:5f:33:53:10:34:b3:55:4b:95: 86:e4:f6:9a:19:2b:f5:92:7c:8a:20:a7:e7:55:75: 97:0a:31:3c:0b:a6:04:7b:30:e3:a6:c0:94:3e:39: d3:a0:74:cc:91:38:0f:4a:03:2e:54:12:c6:a9:0d: ee:ec:fc:e6:42:eb:3e:9b:8d:0b:18:a2:f6:0f:38: 84:31:9c:86:6b:b7:07:30:6a:b6:da:d1:96:82:ed: 46:47:26:46:1f:3a:12:cb:3e:0d:0e:8b:6f:52:42: 41:fd:b3:fd:16:42:16:0d:8e:aa:52:1d:dd:fd:c3: 36:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2F:32:49:CF:0D:A0:6A:B5:E1:C8:3B:74:2C:F7:82:5F:02:48:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:56:5a:2a:99:82:dd:c9:46:1a:33:85:6f:95:25:10:2c:6e: e0:91:9e:4b:1f:c5:fb:b8:16:57:95:3d:86:e9:01:65:7f:3d: 66:97:51:e3:9c:c4:48:2c:a4:c8:d1:be:53:cf:da:d4:be:e4: 37:f1:56:9f:49:9d:86:68:0a:ba:4f:25:e2:f7:08:2a:b9:dc: 4b:b7:24:c8:f0:17:41:0b:01:a0:b0:bc:cc:49:ed:89:d2:43: 0c:a3:c2:33:29:91:ed:d3:86:aa:a7:b9:ed:04:b5:a0:bc:6b: 96:d3:ee:51:5c:07:ee:ce:49:94:c6:eb:1d:9a:8a:f4:2a:b9: 6b:16:26:3e:4f:f2:b9:7f:94:fd:77:70:07:86:8e:32:37:63: df:9d:a7:db:cf:f9:7c:85:91:c4:ac:d7:48:d0:24:b8:c6:97: 40:ef:ec:7b:cd:e0:ff:50:a3:df:73:f6:9f:4d:a4:2d:db:0b: aa:15:ae:dc:22:e4:02:a6:ca:c0:34:49:39:61:fe:26:a2:20: 96:ed:f8:2b:a6:73:c4:11:1a:ca:82:2a:51:e4:a4:54:32:e6: 54:29:de:64:30:0f:28:83:ed:46:60:aa:51:9e:9c:d7:07:86: 67:58:84:7c:a8:aa:ba:6a:c8:07:f6:ae:75:bc:72:61:df:00: fa:b0:1a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025pCPVH3qPQ1GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTc2NjM5ZTUtNTJhZi00YzZhLTk1YzMtM2NhMjQzY2NlMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjxb+GkY31ENwz9iB2CQywRu6DMc3+T+PbxK 27gDV7xpX1P2berUkXNGTSPfom2hLcBb6Pv1qF44WdQNB80QUYJe2bvnUiW6q3uy TE2H/HzvwOxs6NHOnd3Mbhyjzc1BOpWOQ2LBtoKN+7D/cGz1TzDpV6MSlQ8ES8jF 00Ff47FzmdQbs9AEohePnrBfM1MQNLNVS5WG5PaaGSv1knyKIKfnVXWXCjE8C6YE ezDjpsCUPjnToHTMkTgPSgMuVBLGqQ3u7PzmQus+m40LGKL2DziEMZyGa7cHMGq2 2tGWgu1GRyZGHzoSyz4NDotvUkJB/bP9FkIWDY6qUh3d/cM2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4vMknPDaBqteHIO3Qs94JfAkjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYWExN2Y5NjktZWQ5NC0z ZDc3LWExOGEtYjQ4NTQxNmExMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVWWiqZgt3JRhozhW+VJRAsbuCRnksfxfu4FleVPYbpAWV/PWaXUeOc xEgspMjRvlPP2tS+5DfxVp9JnYZoCrpPJeL3CCq53Eu3JMjwF0ELAaCwvMxJ7YnS QwyjwjMpke3Thqqnue0EtaC8a5bT7lFcB+7OSZTG6x2aivQquWsWJj5P8rl/lP13 cAeGjjI3Y9+dp9vP+XyFkcSs10jQJLjGl0Dv7HvN4P9Qo99z9p9NpC3bC6oVrtwi 5AKmysA0STlh/iaiIJbt+Cumc8QRGsqCKlHkpFQy5lQp3mQwDyiD7UZgqlGenNcH hmdYhHyoqrpqyAf2rnW8cmHfAPqwGsU= -----END CERTIFICATE-----Generated at Thu May 28 13:39:20 2026 by rpki-client