$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa File: c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa (raw, json) Hash identifier: Ox2Yfca8iZzsNAC+DE/p+BoT5k/+XAdd6cnO+n4GBlQ= Subject key identifier: A6:CE:5B:AA:08:86:2B:73:A4:F1:17:CF:82:B7:E3:9E:BB:76:B5:A5 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584F49877D5C26601E1D13A3DD00 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 199.89.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:7d:5c:26:60:1e:1d:13:a3:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=75c3ba17-cea9-4de9-a5c2-2b5a8ef11253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:99:94:b8:8f:d2:87:33:61:49:9e:7f:a2:4c: ce:45:7c:98:a8:fb:96:64:69:5a:11:4b:48:72:c7: d3:af:79:fc:49:95:f4:d8:c1:72:a2:0d:8a:d5:9b: d7:fe:e3:1c:fe:ce:95:1c:c2:eb:ee:27:94:ff:a9: 3c:07:da:d9:6c:58:72:15:49:cf:fb:55:ee:d7:dd: 1c:6f:c2:08:e9:e0:42:e4:0c:06:dd:77:bf:0a:d0: 7d:2f:8b:dd:ea:de:95:08:9c:b7:d9:05:ae:84:40: 5b:64:c4:3a:37:5b:d6:c1:56:e0:e7:23:97:64:16: 30:2b:82:c2:35:9d:ce:a6:e0:ed:03:e9:77:29:0e: 43:e4:af:9b:16:42:51:4e:5c:50:25:4e:41:af:cd: ed:77:aa:ec:1a:dd:5f:cd:a2:ae:5f:45:07:4e:25: ba:69:b3:03:c4:42:d3:d3:db:04:33:94:91:73:74: 1d:9f:a4:57:51:34:01:cd:af:79:7a:f0:ed:ee:0e: 0e:32:c4:0f:b2:ef:32:af:e1:a0:9c:15:05:07:e6: 6a:41:f1:b7:74:0f:4a:30:91:55:10:af:a4:d4:f9: b6:c7:41:55:1a:29:de:fd:37:1a:e3:7b:b6:6d:7a: 88:61:94:d5:92:e4:e1:a2:d9:a2:59:b0:fc:7d:60: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CE:5B:AA:08:86:2B:73:A4:F1:17:CF:82:B7:E3:9E:BB:76:B5:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f1:50:ce:3d:78:fa:10:c1:fb:12:de:6a:18:1d:7c:41:05: c3:d9:cd:d2:22:50:5d:96:9b:b5:0d:37:38:64:b7:b6:33:b7: b3:de:5b:ba:6d:92:9a:39:6e:dc:38:39:1b:bc:b9:e0:0f:e8: 15:02:0d:5c:21:91:aa:d1:df:37:e5:6d:4e:ed:94:57:f0:2f: f0:7c:94:c4:2a:50:8b:cb:76:3e:12:d4:5a:81:b7:74:9d:01: 15:89:86:3c:ec:ac:ed:53:0e:66:9d:bb:bb:4d:3a:fe:95:ad: 46:cc:2c:d4:fb:5a:91:61:19:b8:70:6a:df:4d:7d:18:76:c2: 42:78:1c:72:5d:e8:93:cd:e6:77:9c:74:cc:a1:28:93:f3:bf: 22:19:c0:d0:36:64:bc:3b:b7:90:cd:da:21:6a:0c:cf:29:2e: ee:15:ca:8b:10:91:3a:44:6e:65:4d:c3:9e:24:70:3f:10:bf: bb:67:92:e3:96:84:c5:fb:7e:4a:a8:8c:05:98:2b:fb:2c:ba: 1c:7e:8d:07:98:27:74:35:5a:8f:c8:bf:df:39:b7:1f:7d:47: ab:d7:a1:3c:cf:54:ae:97:10:03:71:42:d8:48:1e:bf:86:f1: 5f:67:9e:25:11:ce:8d:a7:ac:07:04:41:9e:06:ac:d7:77:9f: de:7f:98:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh31cJmAeHROj3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzVjM2JhMTctY2VhOS00ZGU5LWE1YzItMmI1YThlZjExMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JmUuI/ShzNhSZ5/okzORXyYqPuWZGlaEUtI csfTr3n8SZX02MFyog2K1ZvX/uMc/s6VHMLr7ieU/6k8B9rZbFhyFUnP+1Xu190c b8II6eBC5AwG3Xe/CtB9L4vd6t6VCJy32QWuhEBbZMQ6N1vWwVbg5yOXZBYwK4LC NZ3OpuDtA+l3KQ5D5K+bFkJRTlxQJU5Br83td6rsGt1fzaKuX0UHTiW6abMDxELT 09sEM5SRc3Qdn6RXUTQBza95evDt7g4OMsQPsu8yr+GgnBUFB+ZqQfG3dA9KMJFV EK+k1Pm2x0FVGine/Tca43u2bXqIYZTVkuThotmiWbD8fWBuXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbOW6oIhitzpPEXz4K34567drWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYzM4YmM5Y2MtM2ExYS0z MjZjLTliNDktZTQ0NjUxMzZmY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDxUM49ePoQwfsS3moYHXxBBcPZzdIiUF2Wm7UNNzhkt7Yzt7PeW7pt kpo5btw4ORu8ueAP6BUCDVwhkarR3zflbU7tlFfwL/B8lMQqUIvLdj4S1FqBt3Sd ARWJhjzsrO1TDmadu7tNOv6VrUbMLNT7WpFhGbhwat9NfRh2wkJ4HHJd6JPN5nec dMyhKJPzvyIZwNA2ZLw7t5DN2iFqDM8pLu4VyosQkTpEbmVNw54kcD8Qv7tnkuOW hMX7fkqojAWYK/ssuhx+jQeYJ3Q1Wo/Iv985tx99R6vXoTzPVK6XEANxQthIHr+G 8V9nniURzo2nrAcEQZ4GrNd3n95/mBY= -----END CERTIFICATE-----Generated at Mon Oct 12 02:27:36 2026 by rpki-client