$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa File: 889605e8-b381-38e4-9042-117f16829cdc.roa (raw, json) Hash identifier: gflIoH8wIGDKuhmazlqH/bmJ61Pm2WC2+yJCLZ/XNDk= Subject key identifier: ED:91:C0:AD:F0:40:28:3C:99:32:85:9E:86:8F:3E:59:BE:61:E1:9A Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F4328584ECBD1D8482559DDBDE3744AC8 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 55095 IP address blocks: 192.173.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d8:48:25:59:dd:bd:e3:74:4a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=93bd55c8-0ce5-418f-8f19-6f2280aad0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:93:15:46:95:82:1b:c2:76:64:0d:07:78: df:de:38:04:13:4c:27:7d:4b:e3:b6:5f:f0:96:a5: 2a:6f:ff:b5:0d:f0:4a:0c:33:a7:b2:83:bc:51:a9: 24:37:1b:2b:59:58:28:94:10:1c:66:cc:3d:9c:b2: 0a:92:02:c2:9e:38:b8:20:38:c4:de:6f:05:ca:43: 36:49:d7:0c:fa:a5:1c:3d:5a:ed:91:65:83:3e:f0: 58:6a:e2:7c:28:0f:8c:12:bd:e2:12:69:17:61:b4: 62:b4:80:9d:a4:44:78:fb:4f:59:09:46:a5:30:fb: 22:ca:44:db:7a:d2:15:bc:be:92:4b:04:93:3a:1e: 38:77:0a:7a:82:af:9f:aa:c7:45:b0:11:b5:78:18: d7:83:2a:55:3e:10:75:c0:8a:fc:99:6c:97:81:3a: d0:2f:c1:46:a0:5d:fd:50:92:5b:1d:3c:4d:0c:e1: 42:f2:31:65:7e:d3:92:94:1f:2b:29:53:69:20:9d: b4:48:1c:3c:29:cf:4d:a3:52:50:1d:08:2d:20:d9: ea:80:09:23:7f:c7:97:da:64:9d:d9:ee:f7:1a:11: 2a:be:1c:4b:76:b6:bb:6f:2f:ea:73:33:24:ab:eb: e5:02:c2:35:62:be:cb:93:10:81:0d:9e:94:89:45: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:91:C0:AD:F0:40:28:3C:99:32:85:9E:86:8F:3E:59:BE:61:E1:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/889605e8-b381-38e4-9042-117f16829cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 192.173.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d5:c7:f4:a8:d0:f3:46:c5:60:a2:9f:cd:83:40:47:65:1d: 68:6c:46:d4:24:90:9b:0f:cb:b4:17:fa:73:4c:3a:62:67:72: 76:19:1d:34:de:d6:26:07:80:f7:bb:e0:d9:04:2b:59:4f:94: b2:36:b5:52:f4:37:f5:76:7b:09:7a:a3:c2:2d:d7:91:e5:59: a8:15:63:80:5d:0d:d9:dd:61:2a:af:5b:66:dd:fc:63:6b:62: 44:fb:b8:4c:19:27:d1:ad:23:b4:5e:94:b3:90:8d:27:19:54: a4:2d:e0:2f:d0:68:09:69:d7:07:04:ca:e1:87:3c:75:43:5d: d0:09:9b:09:ba:39:cd:d6:07:e6:67:65:b0:62:4a:bb:dd:d0: 5c:71:fa:46:33:e8:5b:c0:ff:93:26:6c:b1:07:38:f8:44:fd: 65:8a:90:87:f6:e3:29:67:2a:4b:7f:25:b6:ff:d5:a9:27:30: 45:35:2a:cb:5e:45:84:cb:70:fb:cf:6e:71:43:83:98:10:2b: e2:31:8b:91:0b:2e:a9:ac:e1:1e:76:6a:c1:62:42:80:c4:13: ca:30:85:6c:6d:03:2c:2e:6c:b8:cf:25:5f:3f:c5:b7:99:dd: 6f:61:85:bf:1a:39:47:8e:d0:59:4f:55:50:12:7d:e1:5a:c1: c4:8a:5b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dhIJVndveN0SsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk OTNiZDU1YzgtMGNlNS00MThmLThmMTktNmYyMjgwYWFkMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRSTFUaVghvCdmQNB3jf3jgEE0wnfUvjtl/w lqUqb/+1DfBKDDOnsoO8UakkNxsrWVgolBAcZsw9nLIKkgLCnji4IDjE3m8FykM2 SdcM+qUcPVrtkWWDPvBYauJ8KA+MEr3iEmkXYbRitICdpER4+09ZCUalMPsiykTb etIVvL6SSwSTOh44dwp6gq+fqsdFsBG1eBjXgypVPhB1wIr8mWyXgTrQL8FGoF39 UJJbHTxNDOFC8jFlftOSlB8rKVNpIJ20SBw8Kc9No1JQHQgtINnqgAkjf8eX2mSd 2e73GhEqvhxLdra7by/qczMkq+vlAsI1Yr7LkxCBDZ6UiUW2fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2RwK3wQCg8mTKFnoaPPlm+YeGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvODg5NjA1ZTgtYjM4MS0z OGU0LTkwNDItMTE3ZjE2ODI5Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwK1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzVx/So0PNGxWCin82DQEdlHWhsRtQkkJsPy7QX+nNMOmJncnYZHTTe 1iYHgPe74NkEK1lPlLI2tVL0N/V2ewl6o8It15HlWagVY4BdDdndYSqvW2bd/GNr YkT7uEwZJ9GtI7RelLOQjScZVKQt4C/QaAlp1wcEyuGHPHVDXdAJmwm6Oc3WB+Zn ZbBiSrvd0Fxx+kYz6FvA/5MmbLEHOPhE/WWKkIf24ylnKkt/Jbb/1aknMEU1Kste RYTLcPvPbnFDg5gQK+Ixi5ELLqms4R52asFiQoDEE8owhWxtAywubLjPJV8/xbeZ 3W9hhb8aOUeO0FlPVVASfeFawcSKWzc= -----END CERTIFICATE-----Generated at Fri Aug 21 00:19:31 2026 by rpki-client