$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa File: 7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa (raw, json) Hash identifier: 2Fg1PURiNs5XoCQIPv6IHEu7TByE/RxS6UVBnph2m7k= Subject key identifier: 2D:B2:54:C7:46:89:F7:9E:3B:7D:D5:2D:58:43:FA:53:57:A1:51:25 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A7EA8A6D73A35E4D1FB780 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 199.91.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:ea:8a:6d:73:a3:5e:4d:1f:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=fc6a06ad-7c34-48db-b176-69f67238ed29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:fc:70:06:02:41:36:20:64:b4:c3:6f:13: fa:3c:c8:77:59:1b:2a:2d:98:b0:d7:30:83:e7:75: b8:f3:63:31:d9:ba:cb:62:72:73:01:9f:43:f2:40: e1:7b:08:77:e3:f4:f5:9b:ba:3c:ae:81:5a:90:6d: 66:90:8c:3e:a7:f4:0d:27:a2:49:47:62:23:1a:df: 5f:5c:c6:08:2b:61:c1:09:81:c8:07:96:53:01:09: e8:2a:d8:75:44:e1:e4:e6:79:01:96:4d:d4:a1:41: d5:53:3b:32:37:1e:a2:c4:7b:30:6f:bd:94:51:df: 61:34:23:5c:54:6f:4c:5c:0d:dd:b7:4e:aa:44:92: df:5f:09:89:c3:7d:99:71:73:a9:92:28:68:b1:24: 14:f5:e0:9f:57:23:2a:f0:5a:bf:20:03:b1:c6:a2: b4:6a:54:90:42:b5:f0:be:47:96:06:d1:e5:6f:f1: 7d:4e:8b:87:ce:8e:02:09:d2:6d:15:12:50:cc:8e: 2e:97:ed:2c:31:c1:d1:5e:e7:a6:97:6a:bd:d0:96: 8a:4d:78:88:bc:ba:39:86:1a:ea:75:c5:68:9c:52: 67:5d:9c:16:c4:82:f9:81:22:87:64:0a:2a:90:04: 43:3c:ee:10:dc:0d:d7:84:16:ce:ec:19:2c:e7:3c: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B2:54:C7:46:89:F7:9E:3B:7D:D5:2D:58:43:FA:53:57:A1:51:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7dffed8c-b870-3970-b540-0fa3a4ab42ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ea:a4:fd:a1:65:62:46:4f:c4:52:bd:b7:7b:54:82:c7:d7: 78:c5:3d:25:7d:dd:fa:74:05:29:02:b6:23:8f:48:8a:c3:d4: f2:36:43:c0:06:d8:4a:56:2d:e5:42:a6:37:af:58:a3:39:c7: 57:d7:96:bc:9b:26:f6:d6:18:a9:03:ea:ae:50:92:1e:06:4b: be:bb:2d:4d:c0:1c:0f:ae:19:de:cf:85:30:ba:a9:5b:44:49: e0:70:0d:dc:39:d0:4d:47:37:52:ca:6f:76:f1:02:6b:07:93: 93:d2:c9:93:d5:5e:c1:13:9f:a2:dc:35:b9:9d:f9:d9:c4:2b: 82:ad:88:42:01:00:70:b3:54:f8:80:62:48:75:d5:b0:2a:9c: 22:da:98:c8:f9:18:ae:ba:04:f0:a3:10:00:d1:59:18:29:ae: 65:61:18:43:05:85:0c:b9:77:d3:87:67:d6:10:f3:c3:66:7b: b5:52:25:20:bf:4b:42:04:d5:1c:56:e0:8e:3f:e7:08:c4:fd: 97:ed:74:42:55:6e:5e:df:0d:57:98:90:b6:c4:26:06:27:49: ed:4d:4f:29:e4:0b:69:13:11:73:92:f2:e9:c5:d8:39:3b:be: a3:50:3c:aa:70:9f:61:79:b6:a0:0e:69:7c:3b:79:e3:b9:97: b9:c4:0f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp+qKbXOjXk0ft4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZmM2YTA2YWQtN2MzNC00OGRiLWIxNzYtNjlmNjcyMzhlZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY78cAYCQTYgZLTDbxP6PMh3WRsqLZiw1zCD 53W482Mx2brLYnJzAZ9D8kDhewh34/T1m7o8roFakG1mkIw+p/QNJ6JJR2IjGt9f XMYIK2HBCYHIB5ZTAQnoKth1ROHk5nkBlk3UoUHVUzsyNx6ixHswb72UUd9hNCNc VG9MXA3dt06qRJLfXwmJw32ZcXOpkihosSQU9eCfVyMq8Fq/IAOxxqK0alSQQrXw vkeWBtHlb/F9TouHzo4CCdJtFRJQzI4ul+0sMcHRXueml2q90JaKTXiIvLo5hhrq dcVonFJnXZwWxIL5gSKHZAoqkARDPO4Q3A3XhBbO7Bks5zzlXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2yVMdGifeeO33VLVhD+lNXoVElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2RmZmVkOGMtYjg3MC0z OTcwLWI1NDAtMGZhM2E0YWI0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbqpP2hZWJGT8RSvbd7VILH13jFPSV93fp0BSkCtiOPSIrD1PI2Q8AG 2EpWLeVCpjevWKM5x1fXlrybJvbWGKkD6q5Qkh4GS767LU3AHA+uGd7PhTC6qVtE SeBwDdw50E1HN1LKb3bxAmsHk5PSyZPVXsETn6LcNbmd+dnEK4KtiEIBAHCzVPiA Ykh11bAqnCLamMj5GK66BPCjEADRWRgprmVhGEMFhQy5d9OHZ9YQ88Nme7VSJSC/ S0IE1RxW4I4/5wjE/ZftdEJVbl7fDVeYkLbEJgYnSe1NTynkC2kTEXOS8unF2Dk7 vqNQPKpwn2F5tqAOaXw7eeO5l7nEDzg= -----END CERTIFICATE-----Generated at Sat Sep 26 09:31:46 2026 by rpki-client