$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa File: 24ff25e6-fb53-31cd-9980-92a2e33cb078.roa (raw, json) Hash identifier: 60AKJtAsz7H9RimLqhonYMJz4cbK2GeSpHbPPfYfg18= Subject key identifier: 9F:32:21:D7:B4:1D:19:44:54:E4:BC:B8:14:A5:37:EF:25:6A:70:2C Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584F7A4D8190034938D6A2737300 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 3359 IP address blocks: 198.73.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:81:90:03:49:38:d6:a2:73:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=c1709fcd-b7dd-4c60-b157-168cf4996905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:84:21:f0:bd:e8:7f:3f:28:8e:fd:b9:2b: 3e:21:8f:74:c9:91:cc:ab:35:b5:0c:c7:b6:2d:90: 38:32:e6:13:d2:78:98:d1:6d:58:83:1a:3c:ee:4e: 7a:83:7d:af:d7:bb:da:35:4d:75:67:a9:83:0c:f6: 76:38:a1:ab:7b:d1:4c:40:83:92:76:cb:b5:9b:be: 33:25:3d:2b:4b:cd:a6:33:05:24:20:39:d4:07:05: 64:45:01:ea:a1:34:9e:47:a0:50:97:32:84:cd:fe: 1a:13:55:b0:47:74:af:14:dd:1e:e1:69:c1:0f:ec: 44:a9:1d:dd:56:23:85:3b:dd:6b:0b:75:f0:32:24: 4f:c5:95:99:bc:a6:ff:42:e0:1b:36:5c:0e:d6:65: a3:d4:b2:96:d1:42:94:32:29:6a:17:ef:12:50:de: 58:14:bc:50:01:3f:54:88:5b:12:56:14:19:16:9e: c2:0c:55:32:1d:25:6d:b4:13:0d:3d:04:bb:9f:66: 90:a7:3c:7c:e6:93:31:0e:a4:20:7c:78:6f:dc:59: ec:ee:f7:87:7c:81:18:f9:24:7a:f5:ea:fd:9d:c5: 4f:8c:b7:9f:9c:c2:bb:cb:99:ac:fd:54:86:b0:92: 50:76:c0:ae:03:86:09:4b:d0:91:ed:f3:16:8c:21: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:32:21:D7:B4:1D:19:44:54:E4:BC:B8:14:A5:37:EF:25:6A:70:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 198.73.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:74:bd:65:34:d0:93:e2:f6:68:b1:2f:8c:e1:27:2f:42:b0: 4b:53:62:6e:83:04:21:45:cf:ec:5f:51:78:0e:30:72:f2:c3: b3:6d:73:c1:91:2d:b8:94:c6:03:92:70:9b:6d:ea:e9:bb:f9: 82:11:bf:37:a3:96:b0:14:53:2b:55:e0:ca:77:4e:1f:c8:ed: ef:98:79:10:5d:46:1e:3f:02:37:b1:a5:87:5f:6f:93:90:ba: 5b:6a:7c:02:15:7c:28:aa:5d:9f:a7:52:24:05:37:78:dc:e6: 04:f1:90:b8:dd:b2:02:d4:f1:b1:0c:2b:c2:16:d0:2f:9b:0b: 1b:9f:fe:e3:7a:ca:27:45:54:39:70:fe:71:9d:86:f1:11:c7: 12:52:3d:92:bd:ba:e5:f9:71:31:4c:6c:56:6b:92:6d:e2:51: aa:20:b0:a6:d0:ac:87:07:92:9b:dc:8f:56:94:82:ff:46:fb: 94:28:2b:90:5b:45:80:1d:44:89:a7:15:76:06:eb:3a:36:25: fb:a0:db:06:e0:76:1f:33:ee:7d:54:28:c5:24:69:de:1f:f5: 7e:72:2d:c4:cf:f4:ba:83:9e:bc:f5:68:bb:bd:25:d4:18:fb: 1a:5e:c8:4e:a9:23:e9:a2:ea:cb:89:46:07:9a:6b:7b:84:df: 91:17:e9:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TYGQA0k41qJzcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YzE3MDlmY2QtYjdkZC00YzYwLWIxNTctMTY4Y2Y0OTk2OTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpKEIfC96H8/KI79uSs+IY90yZHMqzW1DMe2 LZA4MuYT0niY0W1Ygxo87k56g32v17vaNU11Z6mDDPZ2OKGre9FMQIOSdsu1m74z JT0rS82mMwUkIDnUBwVkRQHqoTSeR6BQlzKEzf4aE1WwR3SvFN0e4WnBD+xEqR3d ViOFO91rC3XwMiRPxZWZvKb/QuAbNlwO1mWj1LKW0UKUMilqF+8SUN5YFLxQAT9U iFsSVhQZFp7CDFUyHSVttBMNPQS7n2aQpzx85pMxDqQgfHhv3Fns7veHfIEY+SR6 9er9ncVPjLefnMK7y5ms/VSGsJJQdsCuA4YJS9CR7fMWjCHJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8yIde0HRlEVOS8uBSlN+8lanAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvMjRmZjI1ZTYtZmI1My0z MWNkLTk5ODAtOTJhMmUzM2NiMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt0vWU00JPi9mixL4zhJy9CsEtTYm6DBCFFz+xfUXgOMHLyw7Ntc8GR LbiUxgOScJtt6um7+YIRvzejlrAUUytV4Mp3Th/I7e+YeRBdRh4/AjexpYdfb5OQ ultqfAIVfCiqXZ+nUiQFN3jc5gTxkLjdsgLU8bEMK8IW0C+bCxuf/uN6yidFVDlw /nGdhvERxxJSPZK9uuX5cTFMbFZrkm3iUaogsKbQrIcHkpvcj1aUgv9G+5QoK5Bb RYAdRImnFXYG6zo2Jfug2wbgdh8z7n1UKMUkad4f9X5yLcTP9LqDnrz1aLu9JdQY +xpeyE6pI+mi6suJRgeaa3uE35EX6eE= -----END CERTIFICATE-----Generated at Sun Nov 1 19:54:47 2026 by rpki-client