$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa File: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (raw, json) Hash identifier: fLmh9ad5NlxWYKhNc4a+rIkqY/2cDdoqFT3HG3Awv6I= Subject key identifier: 9E:06:55:63:35:7E:97:B4:54:7F:86:9A:81:E3:4A:13:7B:22:14:DE Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584EE921ECB4AFFD262AB9ADF744 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 3359 IP address blocks: 142.244.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:ec:b4:af:fd:26:2a:b9:ad:f7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=63c9eff6-06c1-415d-bc35-73120735590e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:e1:bf:07:85:1c:23:3c:2e:3b:47:ee:e3: 1a:9f:d5:58:31:8b:5e:6b:a0:5b:76:27:08:f5:14: a9:97:67:db:33:1b:f9:2d:ec:66:55:e7:33:19:68: fd:8d:ca:1b:9a:a2:4a:72:e0:56:b3:f6:f3:bd:6a: 27:1f:37:71:da:36:6c:ac:18:79:5e:ce:13:72:80: ea:c0:37:29:83:aa:38:46:16:a0:12:32:21:a7:0c: 80:0f:e3:d3:a6:ef:92:8e:e1:75:1c:d1:2a:47:dd: 5d:a9:fa:c4:c2:fc:d5:7c:fe:f3:af:62:60:75:5e: e9:45:c3:42:d6:ae:df:de:c6:36:c3:ae:00:cb:db: 76:e4:51:25:43:79:7d:9e:99:43:e1:9a:45:09:4a: a6:86:7a:3d:ee:9c:bc:35:37:1e:dd:8f:6e:40:42: 05:16:1b:c9:f1:d2:c9:b4:ed:d7:6f:6f:0f:ee:2e: fc:b8:1e:e4:46:d4:1f:2d:b8:82:1c:60:71:58:75: a7:47:eb:2b:4d:fd:4d:1a:f6:c0:7b:77:c2:17:72: 31:ec:4b:b6:2f:0e:88:28:e9:9b:e5:8b:f0:62:66: 43:2e:45:f0:28:fe:8b:91:31:56:6c:84:b9:50:07: d7:77:b3:ee:59:f2:95:aa:76:96:04:d3:8e:66:87: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:55:63:35:7E:97:B4:54:7F:86:9A:81:E3:4A:13:7B:22:14:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 142.244.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f1:ac:41:4d:1a:f0:60:96:2c:6a:c7:46:f1:87:21:af:98: 83:f9:ca:51:0b:98:32:bd:4d:9f:81:f6:85:65:4b:44:89:bc: 4d:7b:76:2e:02:be:6b:cf:a5:b5:a6:c0:64:10:43:13:06:cb: 12:f4:1e:2d:85:26:27:a0:61:4e:cf:4a:0a:b6:48:04:5e:92: 86:05:23:a6:a6:c5:9b:f3:d1:4f:ff:3f:89:15:81:83:c9:5e: b8:21:43:ca:44:52:f2:fd:42:d9:d3:b8:fb:ca:3a:58:e1:b7: ac:76:1c:07:69:02:5f:ec:2c:00:04:2f:63:dc:82:8e:1b:19: c5:53:12:ea:97:42:95:c2:97:b1:96:a9:48:01:f3:11:65:5d: ed:f4:da:90:2c:02:0a:fc:46:53:c7:2f:09:83:f0:7f:6e:93: ca:b7:d5:c0:48:51:f8:91:82:5e:ad:58:53:3f:dc:cb:f0:89: 44:f2:32:95:8d:87:a2:c4:7c:d9:20:53:d3:20:ff:14:69:85: cb:c5:06:82:9c:2b:ee:3b:3b:dd:24:d8:a1:2b:45:87:45:cf: 10:b1:6e:5a:65:a8:86:8a:30:85:d4:85:79:87:d9:b3:9c:17: 6f:0c:dd:9c:20:39:97:89:db:5d:a3:94:f8:96:7c:2f:5f:df: ab:e5:87:8f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7pIey0r/0mKrmt90QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk NjNjOWVmZjYtMDZjMS00MTVkLWJjMzUtNzMxMjA3MzU1OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkbhvweFHCM8LjtH7uMan9VYMYtea6BbdicI 9RSpl2fbMxv5LexmVeczGWj9jcobmqJKcuBWs/bzvWonHzdx2jZsrBh5Xs4TcoDq wDcpg6o4RhagEjIhpwyAD+PTpu+SjuF1HNEqR91dqfrEwvzVfP7zr2JgdV7pRcNC 1q7f3sY2w64Ay9t25FElQ3l9nplD4ZpFCUqmhno97py8NTce3Y9uQEIFFhvJ8dLJ tO3Xb28P7i78uB7kRtQfLbiCHGBxWHWnR+srTf1NGvbAe3fCF3Ix7Eu2Lw6IKOmb 5YvwYmZDLkXwKP6LkTFWbIS5UAfXd7PuWfKVqnaWBNOOZofMvwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ4GVWM1fpe0VH+GmoHjShN7IhTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODZmOWUyNWUtYzI0OC0z OTMzLTljZTgtNGU0YjQwOTdhNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjvQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAN/GsQU0a8GCWLGrHRvGHIa+Yg/nKUQuYMr1Nn4H2hWVLRIm8TXt2LgK+ a8+ltabAZBBDEwbLEvQeLYUmJ6BhTs9KCrZIBF6ShgUjpqbFm/PRT/8/iRWBg8le uCFDykRS8v1C2dO4+8o6WOG3rHYcB2kCX+wsAAQvY9yCjhsZxVMS6pdClcKXsZap SAHzEWVd7fTakCwCCvxGU8cvCYPwf26TyrfVwEhR+JGCXq1YUz/cy/CJRPIylY2H osR82SBT0yD/FGmFy8UGgpwr7js73STYoStFh0XPELFuWmWohoowhdSFeYfZs5wX bwzdnCA5l4nbXaOU+JZ8L1/fq+WHjw== -----END CERTIFICATE-----Generated at Mon Sep 14 23:01:03 2026 by rpki-client