$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/e17bd202-be79-3815-9fd1-b952c78144fc.roa File: e17bd202-be79-3815-9fd1-b952c78144fc.roa (raw, json) Hash identifier: g1z7HeVOBnWfanwWIrURGcf+z4SyakbVAeUm3eJAQtA= Subject key identifier: 65:A0:AC:87:F9:01:63:98:8C:CC:79:23:21:C1:9E:1F:30:B5:39:04 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584F7A4D89639BACFE80160CA700 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/e17bd202-be79-3815-9fd1-b952c78144fc.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 3359 IP address blocks: 198.161.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:89:63:9b:ac:fe:80:16:0c:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=153e786d-cd87-4b6a-9e28-9bfeb9384a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:ca:ae:38:54:a2:b7:df:7e:f1:22:29:63: 1e:db:64:fe:75:c1:be:28:5c:db:e8:a9:ec:c9:ac: a1:c7:9e:74:97:78:35:cd:71:29:11:a4:90:2f:28: f8:30:a6:5b:5e:7f:91:a0:6b:6c:7f:f3:95:42:aa: 28:e4:a2:85:96:23:58:f9:db:11:06:ad:ec:a3:ec: 2c:e7:9f:1a:0e:8b:0e:56:a7:81:12:23:1b:70:b5: cf:fe:6f:e4:eb:5a:0c:14:5a:c6:dd:70:fa:17:d4: 4f:b8:13:4c:90:fb:64:96:e3:43:5a:70:b7:5f:79: 50:46:a5:42:fb:a7:60:f1:57:ad:a5:fb:db:63:c5: 21:25:c7:53:c7:48:62:d0:0e:de:2b:fb:47:0c:64: ac:21:74:a9:59:bd:f3:49:9f:53:65:32:ad:80:57: c3:d6:ee:65:11:fc:94:98:27:07:80:90:05:3b:df: f8:b4:87:f6:b6:53:95:18:26:c9:af:c0:46:50:33: 47:24:2c:03:0e:20:80:b1:c9:4f:f8:59:f8:19:5f: ca:f1:eb:01:e1:a5:e2:96:41:71:69:96:d8:b0:65: f5:71:a9:9d:3f:43:13:3f:95:86:6b:da:14:79:e2: 89:3b:af:6b:2b:fd:cf:d6:dd:89:91:85:6e:30:26: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A0:AC:87:F9:01:63:98:8C:CC:79:23:21:C1:9E:1F:30:B5:39:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/e17bd202-be79-3815-9fd1-b952c78144fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 198.161.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b5:6d:74:05:be:6a:ae:16:49:84:9d:6a:d1:c2:48:1d:50: a5:f4:75:41:81:ee:9a:61:bf:a7:8d:e1:18:42:67:ae:74:a6: 48:b6:52:67:54:b8:10:18:fb:12:19:d6:5d:50:e2:e4:df:59: 63:4a:35:fd:de:44:aa:42:26:ad:c8:3b:6e:38:c0:da:bf:8a: 4f:f6:c5:1b:91:68:0f:01:6c:f9:c2:5f:42:96:39:a8:6f:21: 7b:a4:a4:01:8e:9b:9a:d4:7e:ff:76:f5:3b:05:91:7f:e3:5f: 32:3a:02:51:65:08:c6:97:00:c4:f2:09:17:1d:3d:f8:b5:9d: c7:57:80:44:4d:fb:b3:4f:43:a7:7f:35:85:23:1e:75:d7:ac: 55:ab:9f:01:22:ca:90:10:5b:93:28:f1:f3:c0:54:b0:21:a8: c2:7d:eb:33:93:52:ea:60:32:b4:f4:b8:94:da:20:cc:ee:b8: 38:53:b1:d7:43:f7:27:1e:27:97:55:41:9f:c0:ec:3d:23:27: bb:66:94:21:b1:09:ec:1d:0b:42:ab:c4:de:75:98:3c:60:ad: 8b:41:97:f7:30:28:ae:e6:5f:ce:45:74:01:94:22:d6:3c:be: d5:8f:ca:81:15:9d:00:d6:31:a5:69:11:1f:5b:02:4c:a4:29: 14:95:b6:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TYljm6z+gBYMpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MTUzZTc4NmQtY2Q4Ny00YjZhLTllMjgtOWJmZWI5Mzg0YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RDKrjhUorfffvEiKWMe22T+dcG+KFzb6Kns yayhx550l3g1zXEpEaSQLyj4MKZbXn+RoGtsf/OVQqoo5KKFliNY+dsRBq3so+ws 558aDosOVqeBEiMbcLXP/m/k61oMFFrG3XD6F9RPuBNMkPtkluNDWnC3X3lQRqVC +6dg8VetpfvbY8UhJcdTx0hi0A7eK/tHDGSsIXSpWb3zSZ9TZTKtgFfD1u5lEfyU mCcHgJAFO9/4tIf2tlOVGCbJr8BGUDNHJCwDDiCAsclP+Fn4GV/K8esB4aXilkFx aZbYsGX1camdP0MTP5WGa9oUeeKJO69rK/3P1t2JkYVuMCb7oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWgrIf5AWOYjMx5IyHBnh8wtTkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvZTE3YmQyMDItYmU3OS0z ODE1LTlmZDEtYjk1MmM3ODE0NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe1bXQFvmquFkmEnWrRwkgdUKX0dUGB7pphv6eN4RhCZ650pki2UmdU uBAY+xIZ1l1Q4uTfWWNKNf3eRKpCJq3IO244wNq/ik/2xRuRaA8BbPnCX0KWOahv IXukpAGOm5rUfv929TsFkX/jXzI6AlFlCMaXAMTyCRcdPfi1ncdXgERN+7NPQ6d/ NYUjHnXXrFWrnwEiypAQW5Mo8fPAVLAhqMJ96zOTUupgMrT0uJTaIMzuuDhTsddD 9yceJ5dVQZ/A7D0jJ7tmlCGxCewdC0KrxN51mDxgrYtBl/cwKK7mX85FdAGUItY8 vtWPyoEVnQDWMaVpER9bAkykKRSVtv0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:57:41 2026 by rpki-client