$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa File: dafff672-519a-347d-980e-8ae7d32a641e.roa (raw, json) Hash identifier: vu+o5YaBj1s4wulTjbCO4vPKa9D+FN3qXYQ7SU0n3KQ= Subject key identifier: B6:2F:2F:08:50:7A:66:D9:5C:C6:4D:BE:A9:26:B6:7A:8B:AD:C5:BB Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584F4973848CED579B650A9AED80 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 199.89.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:84:8c:ed:57:9b:65:0a:9a:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5e6508db-cd56-42c4-b628-51830f6dad03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:a5:eb:16:05:83:73:dc:b2:a6:ad:0d:87: b9:7c:3f:14:be:96:77:01:bd:75:a5:af:43:dc:bf: d6:2a:ec:f7:f0:1d:d6:62:17:e9:c5:7d:f6:15:d7: cb:dc:aa:0d:d7:8b:11:f3:f5:16:29:de:98:a5:d0: bd:9b:8b:b5:51:0a:a6:b6:ab:2e:03:63:3e:0e:ad: 2e:24:f7:e0:07:53:d1:5a:1b:11:8c:78:dc:ea:ce: 62:ab:5d:29:70:63:83:c6:03:73:3f:e7:21:ef:ab: 6d:7d:0e:5e:0c:47:82:14:c5:66:ba:2a:37:1d:ae: 59:6a:e8:5b:e7:77:52:22:a2:4a:f0:e4:5e:70:54: 7f:98:7f:77:3a:93:90:9e:a1:be:f1:f1:1f:06:85: 91:06:59:ed:ca:a3:18:a8:9a:84:35:7e:cf:0d:be: 4e:4c:08:13:0f:f9:70:15:bf:3c:31:95:49:6b:64: e3:a7:b2:c3:d8:d7:9f:5e:44:d7:28:19:f5:8b:d8: d4:fa:d7:aa:8d:0b:fb:2c:21:92:03:b7:03:58:4a: e2:21:34:55:6f:c8:a6:d9:8b:f7:b4:0e:33:3f:d0: 6b:62:2f:b0:f3:bf:a4:6a:53:8b:df:7d:8b:00:8a: 2b:d3:aa:e1:b9:05:ba:53:f5:b6:dc:64:66:96:02: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2F:2F:08:50:7A:66:D9:5C:C6:4D:BE:A9:26:B6:7A:8B:AD:C5:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:74:ec:e3:ee:d0:6b:fc:be:f4:2d:6f:1e:84:90:bb:04:04: 77:b1:22:70:8d:97:d4:e4:51:c2:6a:6d:e2:cd:26:f5:1e:f3: e5:e1:06:57:77:f4:8c:fc:1f:c5:60:65:57:0b:8c:07:ef:e1: 6b:f9:6b:96:7a:f0:db:77:27:2d:a3:2d:e6:0b:31:84:85:2f: 5b:fd:52:c1:26:b5:10:6c:6e:e0:85:13:8c:61:ee:bf:03:9a: 60:f0:44:ac:fe:ce:5b:10:ce:24:1b:09:b4:13:9c:1a:d0:44: cc:ba:32:85:e3:81:4d:52:05:64:77:13:bd:b9:fa:43:2f:e2: c9:70:db:b1:be:11:2f:99:32:b5:b8:00:d6:2e:2f:b7:f9:6b: 68:c3:af:70:06:42:b4:78:53:58:d1:c0:6d:65:02:d0:fa:67: 27:05:3c:a6:cb:41:b7:db:5c:65:9e:d1:0b:7c:22:d0:d1:a1: 8a:2c:f7:bd:a1:21:bc:eb:14:6f:35:cb:58:9b:d6:0f:d7:88: 4e:29:1b:0b:58:c8:eb:7a:9a:5a:84:9e:20:f2:a9:ed:14:15: fb:5b:ef:8e:97:b2:9c:95:16:f3:ed:e0:85:69:87:81:c6:e7: 2b:df:13:da:ec:7e:95:d4:5e:7d:09:98:84:59:8d:c6:cd:18: 15:81:16:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4SM7VebZQqa7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWU2NTA4ZGItY2Q1Ni00MmM0LWI2MjgtNTE4MzBmNmRhZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ul6xYFg3PcsqatDYe5fD8UvpZ3Ab11pa9D 3L/WKuz38B3WYhfpxX32FdfL3KoN14sR8/UWKd6YpdC9m4u1UQqmtqsuA2M+Dq0u JPfgB1PRWhsRjHjc6s5iq10pcGODxgNzP+ch76ttfQ5eDEeCFMVmuio3Ha5Zauhb 53dSIqJK8ORecFR/mH93OpOQnqG+8fEfBoWRBlntyqMYqJqENX7PDb5OTAgTD/lw Fb88MZVJa2Tjp7LD2NefXkTXKBn1i9jU+teqjQv7LCGSA7cDWEriITRVb8im2Yv3 tA4zP9BrYi+w87+kalOL332LAIor06rhuQW6U/W23GRmlgJrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYvLwhQembZXMZNvqkmtnqLrcW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvZGFmZmY2NzItNTE5YS0z NDdkLTk4MGUtOGFlN2QzMmE2NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH507OPu0Gv8vvQtbx6EkLsEBHexInCNl9TkUcJqbeLNJvUe8+XhBld3 9Iz8H8VgZVcLjAfv4Wv5a5Z68Nt3Jy2jLeYLMYSFL1v9UsEmtRBsbuCFE4xh7r8D mmDwRKz+zlsQziQbCbQTnBrQRMy6MoXjgU1SBWR3E725+kMv4slw27G+ES+ZMrW4 ANYuL7f5a2jDr3AGQrR4U1jRwG1lAtD6ZycFPKbLQbfbXGWe0Qt8ItDRoYos972h IbzrFG81y1ib1g/XiE4pGwtYyOt6mlqEniDyqe0UFftb746XspyVFvPt4IVph4HG 5yvfE9rsfpXUXn0JmIRZjcbNGBWBFng= -----END CERTIFICATE-----Generated at Sat Oct 10 10:38:18 2026 by rpki-client