$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/85bffba7-a63a-3c45-98e5-c8cc154cf3b6.roa File: 85bffba7-a63a-3c45-98e5-c8cc154cf3b6.roa (raw, json) Hash identifier: cRSYaCKcdqjnD2bChGU1879f4/CfXVBHHTkz/w0T3jI= Subject key identifier: 68:84:BC:94:D7:B9:E0:2D:15:F1:01:7F:C4:0B:C3:8B:C1:2E:69:F6 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D104D8E6BB9965447ED40 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/85bffba7-a63a-3c45-98e5-c8cc154cf3b6.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 198.13.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:10:4d:8e:6b:b9:96:54:47:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=094e9f39-c83d-4d22-bafa-7304dd804836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:37:82:70:3b:85:64:6d:38:f0:fd:ce:f5: 7c:7a:6d:07:9b:b6:62:76:00:4c:03:db:0d:c4:e7: ab:83:4b:bf:79:62:4a:78:30:97:89:0f:97:5f:9b: 7b:10:d1:61:60:b1:b2:9c:23:c5:94:6f:6a:bb:8e: 74:0e:18:75:02:e6:03:9b:91:de:33:0e:f2:ea:31: b1:52:fa:a7:1c:ab:8f:e3:23:d7:65:80:88:04:26: 80:2e:0b:fb:ab:2d:1f:7f:0f:d6:09:a0:b4:27:9f: eb:bb:cc:1a:09:6c:fd:50:58:16:85:d7:08:e0:d5: 17:b2:63:b6:5a:61:5e:40:fd:7b:b1:ff:0f:bd:76: cd:9e:49:fd:55:cb:ab:98:bd:e4:d1:f7:c1:d6:e4: c5:d2:2a:02:e3:c4:70:06:89:57:98:d2:8f:2a:6a: e2:e2:a9:db:e3:21:a2:03:e9:f3:85:47:4b:c5:c6: 3b:e2:3f:f8:3a:2a:23:40:cf:30:c1:25:97:95:15: 80:7a:f4:d8:0b:4a:2b:7e:b6:b7:55:e2:3c:6f:ca: 65:5c:92:c2:da:9f:a7:48:37:47:ab:68:00:6e:05: c7:6b:7c:23:d6:cb:13:a4:80:57:88:06:07:5f:de: 34:39:3a:0d:e8:8d:2a:b5:fd:38:3a:9c:e7:31:ca: 1f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:84:BC:94:D7:B9:E0:2D:15:F1:01:7F:C4:0B:C3:8B:C1:2E:69:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/85bffba7-a63a-3c45-98e5-c8cc154cf3b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 198.13.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:21:2c:4c:1c:33:bd:94:e3:0c:84:99:a6:c3:53:a2:98:86: 43:1a:ab:bf:62:1f:7f:03:6f:c8:b3:c4:59:5e:a2:c2:7c:14: 5d:f4:ab:bd:86:94:bd:6f:b9:d7:63:af:49:96:55:17:86:22: 23:04:16:1b:b3:a8:06:63:29:bf:0b:64:10:a1:06:f8:98:cd: 6f:8d:d0:a9:43:0e:24:a1:54:d1:2d:4d:88:39:62:bc:22:30: 04:d7:6c:6e:af:d1:a8:1b:74:ac:03:f0:79:e6:9d:d3:a9:bc: 82:07:7c:4c:6e:9b:a6:98:c4:38:02:01:87:53:ad:38:7f:fd: df:0f:d6:74:91:6b:05:e1:06:71:ac:be:55:09:78:1f:bc:fd: ce:44:73:df:3d:21:04:0a:2d:a2:39:f8:11:4d:d0:33:65:bf: d9:8e:e9:0e:6a:c1:3d:4e:44:4f:62:ce:2c:9c:8b:7d:2e:67: 18:47:3b:a0:09:7c:16:31:03:fc:5f:41:7e:ae:fc:07:26:82: b0:b7:dc:8c:b7:38:7e:ee:98:f9:8c:bf:cf:21:e4:56:40:37: 68:df:86:c2:64:02:d6:c7:ef:7a:10:2f:d7:da:c4:f1:4b:3f: 7e:29:bf:f4:0b:4a:f4:cb:3b:a5:34:16:b6:f5:2f:39:89:0d: f4:9c:a0:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRBNjmu5llRH7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MDk0ZTlmMzktYzgzZC00ZDIyLWJhZmEtNzMwNGRkODA0ODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyw3gnA7hWRtOPD9zvV8em0Hm7ZidgBMA9sN xOerg0u/eWJKeDCXiQ+XX5t7ENFhYLGynCPFlG9qu450Dhh1AuYDm5HeMw7y6jGx UvqnHKuP4yPXZYCIBCaALgv7qy0ffw/WCaC0J5/ru8waCWz9UFgWhdcI4NUXsmO2 WmFeQP17sf8PvXbNnkn9VcurmL3k0ffB1uTF0ioC48RwBolXmNKPKmri4qnb4yGi A+nzhUdLxcY74j/4OiojQM8wwSWXlRWAevTYC0orfra3VeI8b8plXJLC2p+nSDdH q2gAbgXHa3wj1ssTpIBXiAYHX940OToN6I0qtf04OpznMcofDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiEvJTXueAtFfEBf8QLw4vBLmn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvODViZmZiYTctYTYzYS0z YzQ1LTk4ZTUtYzhjYzE1NGNmM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwhLEwcM72U4wyEmabDU6KYhkMaq79iH38Db8izxFleosJ8FF30q72G lL1vuddjr0mWVReGIiMEFhuzqAZjKb8LZBChBviYzW+N0KlDDiShVNEtTYg5Yrwi MATXbG6v0agbdKwD8HnmndOpvIIHfExum6aYxDgCAYdTrTh//d8P1nSRawXhBnGs vlUJeB+8/c5Ec989IQQKLaI5+BFN0DNlv9mO6Q5qwT1ORE9iziyci30uZxhHO6AJ fBYxA/xfQX6u/AcmgrC33Iy3OH7umPmMv88h5FZAN2jfhsJkAtbH73oQL9faxPFL P34pv/QLSvTLO6U0Frb1LzmJDfScoI4= -----END CERTIFICATE-----Generated at Sat Sep 26 18:48:00 2026 by rpki-client