$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa File: 24ff25e6-fb53-31cd-9980-92a2e33cb078.roa (raw, json) Hash identifier: E2TMRm8wF4hEV0+tSud3mVhyfvHdzuafxfw+R7z2fVc= Subject key identifier: E3:02:6E:08:60:C7:E4:DB:D6:59:0E:26:77:EB:6C:40:98:7C:7D:A4 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584ED861D34E74D4AF2911EA2D80 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 3359 IP address blocks: 198.73.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:d3:4e:74:d4:af:29:11:ea:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=c2a4005b-ca8c-4422-8990-804462992848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:d5:1f:8e:3e:b5:1e:a4:1b:68:af:83:97: 3f:53:e7:d4:9d:d1:4c:d6:7e:23:55:e5:97:a3:7a: 02:d0:dc:b2:37:ce:2e:10:8b:82:04:d2:68:93:b7: 57:ee:7d:43:71:82:ae:9b:8f:2b:ec:43:05:bd:b3: 20:d3:67:83:53:8e:fe:ad:d8:11:26:8d:22:aa:35: dd:b5:80:20:8d:69:ba:c3:cf:99:cb:81:46:f1:3b: 50:48:6b:5c:8d:7a:4e:bd:93:25:50:33:ab:98:7a: 77:a5:ed:6c:13:8e:b5:50:0f:ea:50:98:ee:c2:87: 16:a5:36:58:a9:85:e9:92:65:1f:ff:be:fd:f7:7c: 57:21:f9:2b:44:2d:b8:84:76:b0:cf:a2:fe:a0:ef: 57:b3:50:0c:85:86:70:01:dd:ba:bf:d7:98:d8:13: 7b:c2:90:77:db:6a:1e:29:9d:88:4a:a2:99:4f:b5: 6e:a5:77:de:08:fe:43:2f:32:3a:7e:68:e0:c0:72: 99:33:39:00:94:1a:11:8e:d1:00:cd:ce:33:5a:80: b8:d8:1b:6e:1e:ed:ba:2f:67:76:ab:dc:9b:5a:a1: 55:19:dc:3e:2b:34:fc:f8:98:93:67:61:06:33:b6: 5c:db:47:dd:a0:30:1d:21:89:de:e2:1e:c9:8a:74: fa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:02:6E:08:60:C7:E4:DB:D6:59:0E:26:77:EB:6C:40:98:7C:7D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 198.73.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f4:e7:55:b7:69:e2:7a:8b:f7:a8:20:93:9f:c7:fc:73:88: 50:13:9b:e3:fb:21:8a:3e:9f:e5:2a:80:d2:2c:15:f1:02:6f: 6f:73:a4:9d:78:21:dd:93:79:36:de:87:df:ea:b6:0e:60:6e: 1c:4d:1e:a1:e3:1c:4a:9d:a0:c8:3f:01:6b:04:0c:2c:e4:ac: 0c:ad:67:13:4c:05:3b:2e:7a:c6:d7:53:6e:b3:96:c6:4e:46: 50:bf:83:bb:a4:cf:68:e9:4e:c5:98:00:86:67:c0:a2:67:21: c4:2f:b1:b3:62:a1:86:a8:53:27:29:08:de:66:78:b9:8e:a5: 66:16:92:46:e4:9c:b5:c6:d2:50:45:ea:9c:bf:ee:3f:42:17: 1d:8e:42:7d:52:d6:6b:50:d6:9f:cc:76:e7:a8:9f:67:be:fe: e1:73:7b:df:a6:4c:da:72:00:c5:87:d1:1d:a1:08:22:ce:49: aa:29:c1:f6:d8:80:f9:c9:83:2c:61:05:6e:75:2d:e3:84:a3: 66:bc:cd:93:26:90:f1:0c:92:61:be:c7:8b:da:ff:37:19:21: 3e:10:37:e0:f5:a7:9d:8c:1a:ba:90:6e:2b:d7:24:d3:99:ec: 54:f3:2b:f3:98:02:30:ea:e1:89:0a:1a:f8:3b:73:d8:fa:1b: 0b:59:a9:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYdNOdNSvKRHqLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YzJhNDAwNWItY2E4Yy00NDIyLTg5OTAtODA0NDYyOTkyODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlozVH44+tR6kG2ivg5c/U+fUndFM1n4jVeWX o3oC0NyyN84uEIuCBNJok7dX7n1DcYKum48r7EMFvbMg02eDU47+rdgRJo0iqjXd tYAgjWm6w8+Zy4FG8TtQSGtcjXpOvZMlUDOrmHp3pe1sE461UA/qUJjuwocWpTZY qYXpkmUf/77993xXIfkrRC24hHawz6L+oO9Xs1AMhYZwAd26v9eY2BN7wpB322oe KZ2ISqKZT7VupXfeCP5DLzI6fmjgwHKZMzkAlBoRjtEAzc4zWoC42BtuHu26L2d2 q9ybWqFVGdw+KzT8+JiTZ2EGM7Zc20fdoDAdIYne4h7JinT6owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMCbghgx+Tb1lkOJnfrbECYfH2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvMjRmZjI1ZTYtZmI1My0z MWNkLTk5ODAtOTJhMmUzM2NiMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP051W3aeJ6i/eoIJOfx/xziFATm+P7IYo+n+UqgNIsFfECb29zpJ14 Id2TeTbeh9/qtg5gbhxNHqHjHEqdoMg/AWsEDCzkrAytZxNMBTsuesbXU26zlsZO RlC/g7ukz2jpTsWYAIZnwKJnIcQvsbNioYaoUycpCN5meLmOpWYWkkbknLXG0lBF 6py/7j9CFx2OQn1S1mtQ1p/Mdueon2e+/uFze9+mTNpyAMWH0R2hCCLOSaopwfbY gPnJgyxhBW51LeOEo2a8zZMmkPEMkmG+x4va/zcZIT4QN+D1p52MGrqQbivXJNOZ 7FTzK/OYAjDq4YkKGvg7c9j6GwtZqeY= -----END CERTIFICATE-----Generated at Mon Sep 14 23:00:50 2026 by rpki-client