$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa File: c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa (raw, json) Hash identifier: RtbWMJODSQEiUT9+ST5vKIb+WLpEMM9KMIkegrqiYEc= Subject key identifier: 10:C1:AB:1C:EC:1F:81:22:D8:E0:4B:1B:1C:24:DE:13:40:D6:ED:52 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584EA796CBC8821CED1A372B8BE0 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 174 IP address blocks: 199.89.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:cb:c8:82:1c:ed:1a:37:2b:8b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=13bc4974-babc-4b4e-a1be-df1fd776518a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e5:64:b8:44:f0:d5:86:7c:96:6d:45:7b:57: cb:13:24:b3:56:1b:45:24:cf:e2:77:a0:22:d1:39: fe:1e:d1:a4:dd:05:40:2d:c3:e3:4b:1d:f4:40:17: 9d:cd:66:2c:83:e9:02:d3:4f:3d:87:d8:8c:f9:fb: 1b:a1:d5:10:11:11:b2:3f:f7:2b:f0:5c:b3:9d:2a: 2a:59:e4:3e:39:74:35:3f:76:cd:22:f3:41:0d:2d: 13:a7:7c:e8:cd:82:9a:46:00:8b:02:6a:71:58:2b: 48:b2:e3:41:fc:83:26:6a:0b:07:5b:bb:cb:9c:f4: 20:f9:6d:27:45:b7:3d:c8:fd:cb:f8:a1:27:68:f3: 48:06:80:f7:5c:2f:d7:0e:a3:13:78:9e:ba:4b:64: 29:8b:66:81:c9:c6:5d:81:4c:a7:e3:91:73:b5:64: 43:30:de:30:53:65:26:fc:9c:25:33:9c:b0:1c:0a: 83:55:7e:c8:69:03:7f:de:66:3f:7b:d0:4c:a6:01: d4:13:6f:4f:7b:4e:7c:f9:28:a4:ff:d9:77:42:7c: a6:07:8e:c9:6b:0d:3e:90:97:3b:e8:53:6c:92:1b: ca:2d:c5:78:81:48:00:33:55:a8:00:7c:11:c1:87: 9c:6d:17:b3:c5:78:10:d4:a5:cc:4d:4e:b8:6a:e3: 0b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C1:AB:1C:EC:1F:81:22:D8:E0:4B:1B:1C:24:DE:13:40:D6:ED:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:23:9f:76:06:b2:16:01:1b:59:d0:fb:60:1e:39:d0:54:d0: 8f:64:83:3b:bf:ea:10:19:bd:2c:29:3f:09:aa:84:22:38:d7: d9:56:7c:fb:7a:6d:3e:e6:0d:4b:18:d9:13:c7:e4:c0:7b:00: 29:60:8d:e5:c9:eb:8f:93:12:f9:ff:56:9d:77:a3:ab:72:49: d6:09:ef:c1:0e:95:32:33:e5:cd:52:f3:30:27:2e:55:9c:51: a5:43:5c:0c:4f:51:8f:5b:ae:50:17:dc:4e:93:69:7b:dd:93: e6:01:7d:94:6a:0e:a4:c3:c7:82:11:f7:4f:04:7f:e7:3f:b4: 1a:63:e0:ed:ae:d3:f4:7e:91:e7:0d:05:22:37:a1:dd:52:48: ce:eb:d1:1a:dc:9f:f1:64:fd:02:9a:ff:c0:26:aa:1d:43:28: 7b:c6:48:5d:75:25:db:d2:37:47:f9:bf:b6:06:53:a9:f3:c8: 63:81:d9:d3:3e:0e:d3:4a:63:be:61:32:96:85:da:c6:48:2e: eb:c4:41:01:89:a9:d9:c0:5a:26:f4:51:04:b0:c5:18:28:bb: e3:d6:a0:1d:0d:36:8b:76:84:b2:65:56:06:cd:b3:a7:c5:dc: 53:b1:12:c7:0f:79:99:50:e8:f4:fd:13:a0:8b:45:be:2c:d1: 7a:14:1c:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlsvIghztGjcri+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTNiYzQ5NzQtYmFiYy00YjRlLWExYmUtZGYxZmQ3NzY1MThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieVkuETw1YZ8lm1Fe1fLEySzVhtFJM/id6Ai 0Tn+HtGk3QVALcPjSx30QBedzWYsg+kC0089h9iM+fsbodUQERGyP/cr8FyznSoq WeQ+OXQ1P3bNIvNBDS0Tp3zozYKaRgCLAmpxWCtIsuNB/IMmagsHW7vLnPQg+W0n Rbc9yP3L+KEnaPNIBoD3XC/XDqMTeJ66S2Qpi2aBycZdgUyn45FztWRDMN4wU2Um /JwlM5ywHAqDVX7IaQN/3mY/e9BMpgHUE29Pe058+Sik/9l3QnymB47Jaw0+kJc7 6FNskhvKLcV4gUgAM1WoAHwRwYecbRezxXgQ1KXMTU64auMLtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDBqxzsH4Ei2OBLGxwk3hNA1u1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYzM4YmM5Y2MtM2ExYS0z MjZjLTliNDktZTQ0NjUxMzZmY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQjn3YGshYBG1nQ+2AeOdBU0I9kgzu/6hAZvSwpPwmqhCI419lWfPt6 bT7mDUsY2RPH5MB7AClgjeXJ64+TEvn/Vp13o6tySdYJ78EOlTIz5c1S8zAnLlWc UaVDXAxPUY9brlAX3E6TaXvdk+YBfZRqDqTDx4IR908Ef+c/tBpj4O2u0/R+kecN BSI3od1SSM7r0Rrcn/Fk/QKa/8Amqh1DKHvGSF11JdvSN0f5v7YGU6nzyGOB2dM+ DtNKY75hMpaF2sZILuvEQQGJqdnAWib0UQSwxRgou+PWoB0NNot2hLJlVgbNs6fF 3FOxEscPeZlQ6PT9E6CLRb4s0XoUHJg= -----END CERTIFICATE-----Generated at Thu Aug 27 04:52:23 2026 by rpki-client