$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa File: fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (raw, json) Hash identifier: uhQx6seQ35Cw1ILUF5HuaWqMGBGvrmFcbr3wuOo68K4= Subject key identifier: 7B:89:18:AB:13:55:C9:40:4C:44:E1:6B:08:D2:51:19:72:56:FD:95 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584ED861E477A34AE7051E5BBD80 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 3359 IP address blocks: 199.185.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e4:77:a3:4a:e7:05:1e:5b:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=aca7d4d1-1475-4fdc-ae06-66e869108b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:39:22:a3:4d:12:8c:95:3f:c6:3b:b5:67: 0a:d4:b9:00:f3:67:0e:90:6e:4f:a8:31:f6:5e:53: df:17:04:ad:f5:7b:81:29:b8:a8:ad:ce:7c:25:4b: f8:9c:71:ae:a0:c2:b9:11:2a:a4:52:16:f7:ea:00: c7:e2:34:7e:37:72:23:37:f2:c5:1e:e4:3c:03:f6: e4:e6:9e:a2:3e:4f:a4:77:c1:48:7b:50:80:9a:0c: 97:41:43:02:63:84:d6:a2:07:35:0a:2c:4f:c8:ea: 92:2a:9a:a4:30:2c:b6:cc:6f:b5:41:3d:d1:ce:52: 6f:f0:24:6f:4e:78:5f:08:54:72:21:e8:2c:e2:14: 4c:94:3d:0c:a4:2c:17:f2:7d:26:d5:2c:cf:6b:86: 66:fb:38:f9:e2:72:07:e5:78:d7:d0:a4:9c:d3:50: e1:ba:fe:3c:8e:51:41:5e:b2:f7:5b:95:2e:3f:c4: 3b:ca:87:6f:fb:78:67:df:f0:db:36:90:2f:1d:85: d6:a2:9e:07:2a:78:e2:4c:2f:9a:6a:c8:67:1e:fa: 19:4e:67:a5:fc:56:b8:4a:0e:71:06:35:d7:b7:30: 0f:58:1f:b3:55:40:de:3c:16:a8:9c:69:39:7d:32: bd:d4:86:4d:0e:e5:c2:31:69:f6:b4:bd:50:67:08: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:89:18:AB:13:55:C9:40:4C:44:E1:6B:08:D2:51:19:72:56:FD:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 199.185.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c6:92:7d:ba:d5:b6:51:95:98:12:cd:dd:92:71:5a:7a:7f: c3:26:1f:5a:27:9c:e9:87:54:e6:40:83:6c:8a:d4:99:5d:1b: bd:fd:82:af:93:d2:ae:63:b8:1a:cc:ca:ba:3e:0e:38:98:06: e0:c7:8e:f5:74:43:72:2a:5d:66:8f:e5:c3:1b:23:ae:a7:e9: 6d:bb:2d:91:0b:82:50:bf:9e:4b:85:4c:48:cb:59:ce:8d:a9: f3:26:43:49:40:e0:1f:b0:3b:93:6d:66:2e:fb:52:9e:da:a2: 2b:5c:e5:73:1e:81:c1:01:7b:9f:e0:2c:42:8b:b6:c6:5b:33: 78:13:91:6a:60:64:a1:4d:0e:ef:6e:38:96:92:3a:f9:f8:06: a0:f9:8a:c9:92:4d:a7:19:64:e3:d0:6c:4a:ef:fe:2d:db:54: f2:79:eb:34:b9:42:7f:12:92:d7:72:25:2c:10:df:75:76:c4: 03:72:65:c8:cc:e3:3b:68:76:b1:90:27:67:17:0e:15:2f:68: 31:08:0c:b2:d3:c2:7c:52:3e:06:bb:e8:e3:b3:06:bb:a0:07: 0d:d0:68:79:70:1f:0a:90:75:eb:1c:18:09:41:b9:72:a9:f2: b1:78:d4:7a:70:5c:46:61:77:72:90:ce:e5:30:3b:a7:ad:d1: 79:d3:e2:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeR3o0rnBR5bvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YWNhN2Q0ZDEtMTQ3NS00ZmRjLWFlMDYtNjZlODY5MTA4YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliM5IqNNEoyVP8Y7tWcK1LkA82cOkG5PqDH2 XlPfFwSt9XuBKbiorc58JUv4nHGuoMK5ESqkUhb36gDH4jR+N3IjN/LFHuQ8A/bk 5p6iPk+kd8FIe1CAmgyXQUMCY4TWogc1CixPyOqSKpqkMCy2zG+1QT3RzlJv8CRv TnhfCFRyIegs4hRMlD0MpCwX8n0m1SzPa4Zm+zj54nIH5XjX0KSc01Dhuv48jlFB XrL3W5UuP8Q7yodv+3hn3/DbNpAvHYXWop4HKnjiTC+aashnHvoZTmel/Fa4Sg5x BjXXtzAPWB+zVUDePBaonGk5fTK91IZNDuXCMWn2tL1QZwjFOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuJGKsTVclATEThawjSURlyVv2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvZmMyZDI1Y2EtMGRmYS0z MDkyLWFlZjMtYTFlOGMzY2MxMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7kCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrGkn261bZRlZgSzd2ScVp6f8MmH1onnOmHVOZAg2yK1JldG739gq+T 0q5juBrMyro+DjiYBuDHjvV0Q3IqXWaP5cMbI66n6W27LZELglC/nkuFTEjLWc6N qfMmQ0lA4B+wO5NtZi77Up7aoitc5XMegcEBe5/gLEKLtsZbM3gTkWpgZKFNDu9u OJaSOvn4BqD5ismSTacZZOPQbErv/i3bVPJ56zS5Qn8SktdyJSwQ33V2xANyZcjM 4ztodrGQJ2cXDhUvaDEIDLLTwnxSPga76OOzBrugBw3QaHlwHwqQdescGAlBuXKp 8rF41HpwXEZhd3KQzuUwO6et0XnT4m8= -----END CERTIFICATE-----Generated at Mon Sep 14 23:00:44 2026 by rpki-client