$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa File: c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa (raw, json) Hash identifier: 42dbpl4DA1tm4o81jm1KJ6mtC6v4ujPnkee/5M0Oxnw= Subject key identifier: A7:09:50:BF:72:BA:69:E0:64:79:AB:2D:64:56:38:8E:D7:12:A2:BF Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584DF4DB86820BB54B80BFD75280 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 174 IP address blocks: 199.89.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:86:82:0b:b5:4b:80:bf:d7:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=b12d6d93-220c-4622-866c-1338493ac7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:a8:c8:77:ca:a7:dd:52:2d:12:ee:ab:e4: 07:19:37:20:01:3d:c1:94:7a:a9:34:a5:01:d4:e7: 49:3f:3b:8f:87:2d:d7:71:76:77:8a:df:72:4a:92: b0:ee:9b:31:61:92:a3:68:fa:a7:04:49:d6:06:57: 45:bf:74:31:1e:26:74:54:01:f7:f7:fa:ce:76:d2: 44:1c:a6:af:89:5a:ab:8c:97:9d:57:ba:cc:bd:71: 3f:d2:95:38:2e:cc:ea:4c:d4:50:d9:86:51:80:9d: 0a:02:9d:3e:bb:3b:da:38:cc:7e:6e:b4:4e:9c:0d: 8c:f7:6c:9c:ba:f7:e0:b7:18:48:6a:28:10:77:38: be:1e:cb:0d:10:29:f5:a3:0c:d7:2d:64:be:6b:84: 6f:9f:0c:40:bd:f2:a8:3b:90:06:d9:78:a3:d1:e6: 21:09:48:25:04:78:5e:d6:06:30:83:1f:ad:9d:e0: bc:bc:bb:0a:52:83:e3:80:7a:07:1c:33:c9:8d:3c: 25:6b:a8:d7:eb:2e:90:f8:d0:d3:6d:9a:a9:88:80: 75:32:91:90:34:fe:26:75:fe:78:90:6f:f1:5a:a9: a2:67:bb:d2:9c:47:b7:c8:d1:d8:c9:3c:51:ce:36: c8:98:f3:cb:19:1a:dc:1b:82:df:48:6d:df:5a:92: f8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:09:50:BF:72:BA:69:E0:64:79:AB:2D:64:56:38:8E:D7:12:A2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/c38bc9cc-3a1a-326c-9b49-e4465136fca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5d:f9:90:a8:c1:52:83:e0:2e:38:7f:83:fc:97:7d:f3:c9: 99:d5:51:28:f5:bf:16:aa:5d:a7:0f:65:0a:55:8f:1b:c2:84: 22:ec:3e:a2:e4:79:57:49:6f:d9:8e:22:91:c7:88:31:95:d9: 75:e7:7c:cf:d5:05:ae:79:32:6c:07:32:60:3e:be:5f:ed:4c: 48:bc:24:0f:67:f8:f9:56:3c:48:7f:7c:25:26:da:a2:f1:a9: 69:af:2f:dc:b9:3e:c1:96:fd:5c:39:78:71:e6:8b:9e:6e:a9: c2:27:0b:26:73:51:c0:ee:dc:65:48:cd:5a:e1:0a:ab:ec:97: 33:96:59:b3:e2:7b:a7:2d:a9:87:69:aa:18:56:65:57:e3:48: b1:e5:72:be:dd:1c:55:60:76:fe:fc:73:90:d1:48:99:ea:06: b1:aa:1b:c8:8b:80:a2:42:31:28:3d:19:7e:91:02:57:1d:e4: 31:0e:0d:74:88:ea:33:77:18:50:1c:62:4e:de:c8:6e:8d:81: cc:db:c7:e5:02:d1:17:7b:ea:a1:59:29:8c:6a:6f:68:f3:ef: ca:bd:18:71:d1:b3:ce:44:88:51:04:8a:00:f8:0f:84:02:e4: e1:03:77:f9:77:fe:6e:a0:7a:1b:35:ef:8c:e2:21:46:74:0f: 60:a9:f1:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3024aCC7VLgL/XUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjEyZDZkOTMtMjIwYy00NjIyLTg2NmMtMTMzODQ5M2FjN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL+oyHfKp91SLRLuq+QHGTcgAT3BlHqpNKUB 1OdJPzuPhy3XcXZ3it9ySpKw7psxYZKjaPqnBEnWBldFv3QxHiZ0VAH39/rOdtJE HKaviVqrjJedV7rMvXE/0pU4LszqTNRQ2YZRgJ0KAp0+uzvaOMx+brROnA2M92yc uvfgtxhIaigQdzi+HssNECn1owzXLWS+a4RvnwxAvfKoO5AG2Xij0eYhCUglBHhe 1gYwgx+tneC8vLsKUoPjgHoHHDPJjTwla6jX6y6Q+NDTbZqpiIB1MpGQNP4mdf54 kG/xWqmiZ7vSnEe3yNHYyTxRzjbImPPLGRrcG4LfSG3fWpL45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcJUL9yumngZHmrLWRWOI7XEqK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYzM4YmM5Y2MtM2ExYS0z MjZjLTliNDktZTQ0NjUxMzZmY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtd+ZCowVKD4C44f4P8l33zyZnVUSj1vxaqXacPZQpVjxvChCLsPqLk eVdJb9mOIpHHiDGV2XXnfM/VBa55MmwHMmA+vl/tTEi8JA9n+PlWPEh/fCUm2qLx qWmvL9y5PsGW/Vw5eHHmi55uqcInCyZzUcDu3GVIzVrhCqvslzOWWbPie6ctqYdp qhhWZVfjSLHlcr7dHFVgdv78c5DRSJnqBrGqG8iLgKJCMSg9GX6RAlcd5DEODXSI 6jN3GFAcYk7eyG6Ngczbx+UC0Rd76qFZKYxqb2jz78q9GHHRs85EiFEEigD4D4QC 5OEDd/l3/m6gehs174ziIUZ0D2Cp8R8= -----END CERTIFICATE-----Generated at Thu May 28 13:37:28 2026 by rpki-client