$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa File: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (raw, json) Hash identifier: tPM4fTUWmJ1/VRryhAD04Nq7aw9CDVWCWEv6TR6gvhM= Subject key identifier: EF:E7:0E:E7:5E:44:63:7D:D8:38:55:4A:E1:FD:E7:54:A2:90:40:E5 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584F8B0D9C147C5C56E823B8B3E0 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa Signing time: Sun 18 Oct 2026 13:00:12 +0000 ROA not before: Sun 18 Oct 2026 13:00:12 +0000 ROA not after: Sat 16 Jan 2027 14:00:12 +0000 asID: 3359 IP address blocks: 142.244.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:0d:9c:14:7c:5c:56:e8:23:b8:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Oct 18 13:00:12 2026 GMT Not After : Jan 16 14:00:12 2027 GMT Subject: CN=5609f497-e414-45e4-99a5-0185b41b65aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:ad:e1:fa:32:e3:c8:ef:9c:50:22:8e:09: 9c:a3:e1:4e:de:b5:88:58:ff:72:07:8f:75:19:c9: e3:35:34:dd:fd:68:b4:40:8f:bc:0c:54:ac:ea:c0: 62:8c:44:c8:9b:c4:91:1f:1c:49:d1:2f:e6:35:36: 23:b1:1f:4b:4d:21:88:c9:7c:2d:e3:c3:0a:6e:cc: aa:fb:c7:83:db:2e:cf:76:07:5a:51:e9:c3:4f:d2: 26:7e:c6:1d:12:00:a7:c4:93:c1:19:2d:72:22:6a: 49:4b:85:e1:13:e6:96:7a:b7:8f:dc:5e:51:e5:80: c1:c5:12:75:03:0f:40:c4:96:66:f4:3b:a2:74:bc: 43:47:55:dd:42:db:77:7a:71:dd:74:5a:5c:86:49: b0:31:b4:1f:be:5c:97:7c:49:dc:46:d4:59:83:50: 66:57:b2:6c:c0:b6:6f:f1:86:6f:64:ee:de:88:d1: cf:2c:1e:3c:9e:21:be:f2:ec:4e:8a:74:34:1b:e1: a5:62:be:92:cc:83:e3:81:8c:15:31:c0:d2:95:96: 75:1b:95:25:e4:8e:4c:e5:e3:e7:f1:8b:07:c6:6e: 9a:fc:f1:e9:6b:29:72:be:2f:23:f5:b0:93:80:be: 5a:c7:91:da:af:f2:68:57:38:30:05:5c:7a:8f:25: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E7:0E:E7:5E:44:63:7D:D8:38:55:4A:E1:FD:E7:54:A2:90:40:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 142.244.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4d:28:06:19:f3:56:33:92:eb:13:af:6f:95:bb:c3:4c:e7: 50:11:63:52:c6:0c:3f:73:54:36:a8:f1:d8:cb:9d:81:59:28: 40:0b:a6:58:8a:cb:0a:ee:19:57:18:c1:68:ac:a0:32:63:a4: 10:8c:aa:a2:d7:7c:e6:52:27:ba:75:a8:32:77:1c:d9:02:e9: 58:4c:7e:8c:8d:ca:03:a8:0a:6b:2a:1a:79:cb:a6:2c:91:81: 62:90:f6:07:b1:d4:df:a5:70:11:55:db:12:5c:47:80:d6:1b: 33:a7:c5:21:40:e7:ec:c3:6d:64:37:13:a2:40:64:09:3c:5d: bf:54:b7:7c:ce:52:e8:59:e3:c8:3a:ac:f1:80:97:87:2b:a8: 7a:89:5d:6e:85:4f:df:84:f8:ef:06:bc:62:2a:74:83:ff:2c: fb:6f:dd:60:97:97:10:52:07:97:31:47:29:a7:6d:af:42:ae: 9e:58:fd:e9:8b:fd:78:94:84:0c:b3:66:a4:8f:c8:27:72:84: 6b:79:91:01:ba:4b:02:1c:69:ae:c4:d4:0f:f8:a4:d7:0b:7f: bc:00:33:21:ef:c0:6f:21:26:2f:f3:07:9e:22:92:66:41:bf: e6:50:ac:2e:df:18:6b:b6:76:61:75:81:86:f9:95:b5:04:19: ae:da:29:3a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+LDZwUfFxW6CO4s+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MTAxODEzMDAxMloXDTI3MDExNjE0MDAxMlowLzEtMCsGA1UEAxMk NTYwOWY0OTctZTQxNC00NWU0LTk5YTUtMDE4NWI0MWI2NWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cyt4foy48jvnFAijgmco+FO3rWIWP9yB491 GcnjNTTd/Wi0QI+8DFSs6sBijETIm8SRHxxJ0S/mNTYjsR9LTSGIyXwt48MKbsyq +8eD2y7PdgdaUenDT9ImfsYdEgCnxJPBGS1yImpJS4XhE+aWereP3F5R5YDBxRJ1 Aw9AxJZm9DuidLxDR1XdQtt3enHddFpchkmwMbQfvlyXfEncRtRZg1BmV7JswLZv 8YZvZO7eiNHPLB48niG+8uxOinQ0G+GlYr6SzIPjgYwVMcDSlZZ1G5Ul5I5M5ePn 8YsHxm6a/PHpaylyvi8j9bCTgL5ax5Har/JoVzgwBVx6jyWWowIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO/nDudeRGN92DhVSuH951SikEDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODZmOWUyNWUtYzI0OC0z OTMzLTljZTgtNGU0YjQwOTdhNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjvQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJk0oBhnzVjOS6xOvb5W7w0znUBFjUsYMP3NUNqjx2MudgVkoQAumWIrL Cu4ZVxjBaKygMmOkEIyqotd85lInunWoMncc2QLpWEx+jI3KA6gKayoaecumLJGB YpD2B7HU36VwEVXbElxHgNYbM6fFIUDn7MNtZDcTokBkCTxdv1S3fM5S6FnjyDqs 8YCXhyuoeoldboVP34T47wa8Yip0g/8s+2/dYJeXEFIHlzFHKadtr0Kunlj96Yv9 eJSEDLNmpI/IJ3KEa3mRAbpLAhxprsTUD/ik1wt/vAAzIe/AbyEmL/MHniKSZkG/ 5lCsLt8Ya7Z2YXWBhvmVtQQZrtopOg== -----END CERTIFICATE-----Generated at Mon Nov 2 12:44:58 2026 by rpki-client