$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/c1d00dc9-feb5-357a-bd96-8cd216083d3b.roa File: c1d00dc9-feb5-357a-bd96-8cd216083d3b.roa (raw, json) Hash identifier: IhAJxKgj7X5bOA0QrUNs5+n2lfvLe5MlsbkY1xkUX7I= Subject key identifier: 60:00:6A:4E:44:24:96:26:58:0A:84:45:64:66:2E:6D:DF:14:C4:CB Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D101275A9AB4822821940 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/c1d00dc9-feb5-357a-bd96-8cd216083d3b.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 198.13.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:10:12:75:a9:ab:48:22:82:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=ecffec1a-9d1d-45ab-8fb6-afd9c7dc4d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1e:53:a7:e0:14:5f:5b:d0:0f:22:5d:d8:6f: a8:54:f1:8e:83:a0:70:08:b0:af:b1:a8:60:e0:d4: 87:15:83:86:11:25:f4:3d:c3:8b:9c:2c:25:d9:c1: e3:40:0f:c4:7f:82:da:b1:3c:80:66:4c:13:a3:d5: e3:b6:f5:19:20:b0:a3:09:3b:ab:89:63:a3:ed:9c: 2b:59:53:75:90:fd:63:8a:c3:d2:4c:90:b2:8d:b7: 3f:42:7f:fc:2e:b9:b2:aa:ff:b0:9d:7c:84:d1:30: e9:c7:21:d0:19:48:c9:28:17:69:ad:6f:74:59:d8: a8:c0:30:5e:02:9a:53:5f:3f:e6:c6:22:2c:36:cf: 21:73:7c:fb:f8:25:0f:15:33:3b:bd:5a:f0:d4:7d: cf:83:32:15:1a:83:0e:86:eb:34:17:d8:35:88:12: fa:39:03:51:8c:20:87:48:48:10:8e:cd:7e:cd:23: e0:56:94:b2:87:cd:bd:83:17:ac:3b:56:3d:6b:1e: ad:66:d2:a4:7b:46:a6:ce:66:37:55:34:90:ad:37: 08:4f:ec:25:ac:9a:bb:cc:5c:70:cd:03:a9:b5:61: 00:5c:59:14:28:28:62:1d:d7:09:4d:7b:0f:f6:01: 98:55:db:87:c1:2d:08:95:d0:91:93:9d:d3:69:3d: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:6A:4E:44:24:96:26:58:0A:84:45:64:66:2E:6D:DF:14:C4:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/c1d00dc9-feb5-357a-bd96-8cd216083d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 198.13.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f5:5e:57:b6:7b:64:1a:7e:01:2b:29:83:30:5a:97:f7:53: 8a:a5:80:ef:b2:b6:23:43:c6:91:e1:28:d6:c4:ca:02:3b:df: 87:43:09:02:44:2c:e1:36:d1:81:98:15:bf:2b:4f:f8:46:1a: 55:88:40:7d:8e:f4:80:e6:2d:d8:0a:6a:fb:da:8b:67:2a:c4: 63:44:8c:61:44:70:3a:28:b6:56:df:16:3e:6a:f5:3f:09:59: 1c:09:9e:8e:98:2c:d7:dc:55:0b:31:43:67:bb:03:db:9f:73: 4d:d8:26:2e:c5:1d:f6:e1:59:41:23:66:fb:e1:3f:87:f0:ac: b6:3a:93:f3:28:99:58:e9:72:24:e8:d3:60:fe:9f:30:0e:da: 66:f2:62:a7:98:e3:21:bd:00:a6:85:59:d8:0e:67:d9:be:fd: 59:1a:09:9d:fd:51:6d:60:cf:71:bc:e4:95:24:d2:28:95:e6: 0e:95:5a:fc:78:f8:4d:ef:c6:a7:d0:a7:55:d7:88:f6:30:f5: 29:00:68:6e:00:be:08:62:81:d2:7f:1c:a7:92:17:5c:4f:79: 91:59:16:34:db:40:22:57:35:61:32:b6:4c:3e:87:e5:6e:f7: ae:e9:c1:de:33:eb:a2:3c:14:b4:fe:5f:e8:b5:b0:8d:dd:9a: db:75:d2:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRASdamrSCKCGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZWNmZmVjMWEtOWQxZC00NWFiLThmYjYtYWZkOWM3ZGM0ZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h5Tp+AUX1vQDyJd2G+oVPGOg6BwCLCvsahg 4NSHFYOGESX0PcOLnCwl2cHjQA/Ef4LasTyAZkwTo9XjtvUZILCjCTuriWOj7Zwr WVN1kP1jisPSTJCyjbc/Qn/8Lrmyqv+wnXyE0TDpxyHQGUjJKBdprW90WdiowDBe AppTXz/mxiIsNs8hc3z7+CUPFTM7vVrw1H3PgzIVGoMOhus0F9g1iBL6OQNRjCCH SEgQjs1+zSPgVpSyh829gxesO1Y9ax6tZtKke0amzmY3VTSQrTcIT+wlrJq7zFxw zQOptWEAXFkUKChiHdcJTXsP9gGYVduHwS0IldCRk53TaT3LwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAAak5EJJYmWAqERWRmLm3fFMTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvYzFkMDBkYzktZmViNS0z NTdhLWJkOTYtOGNkMjE2MDgzZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr1Xle2e2QafgErKYMwWpf3U4qlgO+ytiNDxpHhKNbEygI734dDCQJE LOE20YGYFb8rT/hGGlWIQH2O9IDmLdgKavvai2cqxGNEjGFEcDootlbfFj5q9T8J WRwJno6YLNfcVQsxQ2e7A9ufc03YJi7FHfbhWUEjZvvhP4fwrLY6k/MomVjpciTo 02D+nzAO2mbyYqeY4yG9AKaFWdgOZ9m+/VkaCZ39UW1gz3G85JUk0iiV5g6VWvx4 +E3vxqfQp1XXiPYw9SkAaG4AvghigdJ/HKeSF1xPeZFZFjTbQCJXNWEytkw+h+Vu 967pwd4z66I8FLT+X+i1sI3dmtt10sQ= -----END CERTIFICATE-----Generated at Fri Sep 25 21:24:29 2026 by rpki-client