$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa File: 89b5a997-3223-35c4-9454-eea1ce7afb45.roa (raw, json) Hash identifier: v+9r7Z55XHbtUUpT47mqsnR/QPO8T9MOvL8B+4S2xg4= Subject key identifier: 9D:03:F1:77:07:8D:BE:27:BF:02:00:B7:8F:6D:B8:0D:4D:93:8D:84 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584ECD372379401F71E5785B5E00 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 3807 IP address blocks: 207.196.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:23:79:40:1f:71:e5:78:5b:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=23ae4fb8-c070-4e25-a116-6097dd6c6d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:08:57:75:64:ac:02:65:3e:7a:6d:2c:bb: 05:cc:bc:24:55:c5:41:f5:81:36:07:64:3b:a4:3b: a2:2d:45:64:8f:1e:f1:c2:26:88:f5:f8:d3:9e:e4: f1:e1:3e:44:5a:12:42:34:49:c6:17:43:fc:53:0c: e7:8a:36:95:a4:a5:0c:5b:1d:cd:36:55:51:00:b7: 7e:1d:ae:11:22:c1:79:3e:cb:e3:a5:a7:06:db:71: 78:3a:d0:64:ae:9e:e2:52:fc:8d:45:ff:e9:0b:6b: bd:36:e0:f7:38:96:2c:ae:66:65:aa:c3:60:70:eb: 3c:29:f6:b5:05:72:7f:32:ad:75:ac:17:0c:04:01: 43:46:96:81:f4:46:6a:16:ad:c6:e4:80:7e:38:6c: ea:b5:65:62:49:89:dc:00:26:87:fb:21:d1:72:31: 42:d9:df:c1:98:67:da:0e:47:80:a7:08:ff:42:0b: af:62:9f:27:f9:fe:55:b4:c5:ea:14:b9:57:4b:f4: ec:7d:3f:c7:3b:ca:5d:52:36:0a:bc:6f:03:cf:76: 60:e7:f4:5f:d8:76:1f:d0:18:29:23:20:4b:c1:ed: c2:5f:b1:92:d8:23:75:e0:52:63:8b:6b:ac:33:a5: f5:d0:34:d7:26:53:11:0a:60:58:1c:73:5e:90:7c: 8a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:03:F1:77:07:8D:BE:27:BF:02:00:B7:8F:6D:B8:0D:4D:93:8D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/89b5a997-3223-35c4-9454-eea1ce7afb45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:ea:fd:5a:2d:67:d3:e2:f3:2a:aa:37:f1:36:1e:80:b2:66: 39:ef:37:59:9e:cc:11:36:43:41:e0:44:08:8d:06:29:90:dc: ec:cc:34:63:d7:cc:60:3d:54:a2:74:2c:b8:11:49:b5:72:ef: 22:c2:fc:78:2d:a0:e4:92:07:8b:28:bd:bd:1b:3e:41:91:2e: 1b:44:dc:09:42:d7:b3:cc:c2:0b:85:60:73:ce:e6:db:a9:cb: 10:f7:0b:df:b0:39:8e:79:bf:cd:24:7b:73:91:9a:4c:a0:aa: d8:d4:94:92:7c:b3:19:d2:53:5f:50:e3:2c:80:e9:92:74:1b: 7a:41:a6:e8:55:05:13:26:42:25:74:6d:84:d9:9d:89:6b:f6: cc:fb:1a:3c:20:a0:f8:fe:d9:a1:2b:8f:bf:5c:ff:65:4b:03: dc:88:8c:28:a0:37:da:d5:0a:1f:08:3a:ab:eb:5e:ac:fd:40: 04:5a:49:e3:87:22:12:88:7b:c1:81:e8:f1:3c:1c:b4:85:8d: e8:97:da:6f:9b:86:cb:64:51:c5:00:af:bd:76:28:93:c7:f7: 67:2f:ad:59:c1:09:38:6e:84:02:6a:f5:b6:a7:a1:31:73:ba: 2a:04:d7:c7:d3:1f:64:94:6b:4c:ff:7f:40:f4:79:b8:07:c8: f1:4e:a1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyN5QB9x5XhbXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MjNhZTRmYjgtYzA3MC00ZTI1LWExMTYtNjA5N2RkNmM2ZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvIIV3VkrAJlPnptLLsFzLwkVcVB9YE2B2Q7 pDuiLUVkjx7xwiaI9fjTnuTx4T5EWhJCNEnGF0P8UwznijaVpKUMWx3NNlVRALd+ Ha4RIsF5PsvjpacG23F4OtBkrp7iUvyNRf/pC2u9NuD3OJYsrmZlqsNgcOs8Kfa1 BXJ/Mq11rBcMBAFDRpaB9EZqFq3G5IB+OGzqtWViSYncACaH+yHRcjFC2d/BmGfa DkeApwj/QguvYp8n+f5VtMXqFLlXS/TsfT/HO8pdUjYKvG8Dz3Zg5/Rf2HYf0Bgp IyBLwe3CX7GS2CN14FJji2usM6X10DTXJlMRCmBYHHNekHyKgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0D8XcHjb4nvwIAt49tuA1Nk42EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvODliNWE5OTctMzIyMy0z NWM0LTk0NTQtZWVhMWNlN2FmYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8TIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnq/VotZ9Pi8yqqN/E2HoCyZjnvN1mezBE2Q0HgRAiNBimQ3OzMNGPX zGA9VKJ0LLgRSbVy7yLC/HgtoOSSB4sovb0bPkGRLhtE3AlC17PMwguFYHPO5tup yxD3C9+wOY55v80ke3ORmkygqtjUlJJ8sxnSU19Q4yyA6ZJ0G3pBpuhVBRMmQiV0 bYTZnYlr9sz7GjwgoPj+2aErj79c/2VLA9yIjCigN9rVCh8IOqvrXqz9QARaSeOH IhKIe8GB6PE8HLSFjeiX2m+bhstkUcUAr712KJPH92cvrVnBCThuhAJq9banoTFz uioE18fTH2SUa0z/f0D0ebgHyPFOofk= -----END CERTIFICATE-----Generated at Thu Aug 13 13:00:51 2026 by rpki-client