$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa File: ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa (raw, json) Hash identifier: awA/y0YjsW57QqPG/ZuaiTooTxrEetlwOiOz46LmpZg= Subject key identifier: CB:4C:35:16:F3:1A:4D:59:EF:2A:37:4E:A1:F2:9D:B7:2B:F8:9D:AC Certificate issuer: /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c Certificate serial: 010D0C9F4328584F1467A5DF795DD17610776780 Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 10578 IP address blocks: 192.5.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a5:df:79:5d:d1:76:10:77:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=cff74c14-7a8d-4f84-ad09-24645fd89ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:eb:fd:16:3f:d7:74:4d:06:0a:5d:78:93: 2b:31:8c:63:e2:9e:e5:6a:79:62:e9:67:46:38:7a: 73:1a:db:8a:33:9f:87:95:f8:32:a6:24:ca:0f:f7: 0d:52:01:c5:c3:3e:a9:cf:18:c6:74:8a:31:53:6e: 2a:9c:06:41:38:6f:17:6f:4b:92:30:ba:9d:69:d2: 58:f4:69:47:5f:b4:a4:6c:5f:fb:c3:82:56:8d:27: 8c:14:0b:cc:9b:74:75:0c:98:27:ac:26:e8:1f:b2: a2:b8:db:d3:c9:60:94:07:71:79:11:05:07:0b:48: 09:be:74:05:40:17:13:bb:58:70:4f:25:ee:ea:87: 5c:c0:1e:70:46:f3:1a:97:12:41:d4:77:ba:5b:1a: 28:4c:ae:83:11:44:d8:98:fd:d3:9d:04:1c:ce:37: 01:ff:3d:dc:0e:f4:73:62:b5:b7:ff:2a:5b:f4:a6: 11:b9:f0:98:ca:98:c2:9d:3b:7b:a7:74:59:7d:bc: 9a:c2:df:39:7b:90:cb:db:b6:65:c1:65:a7:1c:13: f3:4f:8e:11:21:ac:d4:ef:84:fb:3a:2a:61:63:8b: a5:53:58:d0:2a:36:dc:1f:38:f5:68:a9:c6:ca:8b: 89:be:ab:63:91:1b:51:72:06:9e:c5:cd:dc:f1:cc: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4C:35:16:F3:1A:4D:59:EF:2A:37:4E:A1:F2:9D:B7:2B:F8:9D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl X509v3 Authority Key Identifier: keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer sbgp-ipAddrBlock: critical IPv4: 192.5.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ea:2c:90:a9:45:81:fe:74:ad:0a:44:eb:7e:ce:bb:1f:d4: f9:e1:58:c5:8d:5b:df:fc:64:7c:72:c4:95:7b:74:99:00:c9: 10:71:b3:16:31:bc:66:dd:b4:4c:cf:07:a7:6c:f7:c8:21:a1: d5:37:9a:e1:37:2a:2e:47:8d:ac:10:fe:f7:dd:c1:46:69:de: fb:ec:ef:fe:1f:4c:21:99:3f:2f:c1:0e:6c:6c:2f:83:c8:b3: b4:a7:a1:de:49:d3:a0:c9:35:16:8f:26:2c:66:15:61:b2:70: f0:67:46:b7:da:f9:a8:9d:46:79:75:f4:22:e4:95:68:61:e5: 2c:04:e6:a6:4a:2e:35:b8:4e:d3:c2:0e:eb:4c:ea:1d:a5:b9: 99:49:9a:39:c1:27:a2:72:05:b7:22:f9:34:2b:7b:08:97:2c: 13:58:ea:32:de:8b:3c:af:71:a2:cf:d6:7a:aa:a1:68:47:c8: 83:84:5c:bb:24:98:a7:8f:05:5c:87:24:07:e9:91:bd:ff:d1: a0:e3:2d:be:a7:ab:d5:41:7f:bb:bc:dc:b6:43:bc:3f:5d:42: 10:24:1e:bb:19:5d:0d:cb:89:25:c1:54:31:a5:6c:cf:1d:e2: 51:34:8f:ce:da:12:bf:81:60:cc:4e:71:b0:a9:93:dd:92:d7: f7:0c:28:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6XfeV3RdhB3Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3 ZDdjMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Y2ZmNzRjMTQtN2E4ZC00Zjg0LWFkMDktMjQ2NDVmZDg5ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7/r/RY/13RNBgpdeJMrMYxj4p7lanli6WdG OHpzGtuKM5+HlfgypiTKD/cNUgHFwz6pzxjGdIoxU24qnAZBOG8Xb0uSMLqdadJY 9GlHX7SkbF/7w4JWjSeMFAvMm3R1DJgnrCboH7KiuNvTyWCUB3F5EQUHC0gJvnQF QBcTu1hwTyXu6odcwB5wRvMalxJB1He6WxooTK6DEUTYmP3TnQQczjcB/z3cDvRz YrW3/ypb9KYRufCYypjCnTt7p3RZfbyawt85e5DL27ZlwWWnHBPzT44RIazU74T7 OiphY4ulU1jQKjbcHzj1aKnGyouJvqtjkRtRcgaexc3c8czgCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtMNRbzGk1Z7yo3TqHynbcr+J2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvZWYyZThjODYtNmY1ZC0z OTg5LWE5YmQtMDJmOWYyMjEyYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0 YzBlZjdkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHqLJCpRYH+dK0KROt+zrsf1PnhWMWNW9/8ZHxyxJV7dJkAyRBxsxYx vGbdtEzPB6ds98ghodU3muE3Ki5HjawQ/vfdwUZp3vvs7/4fTCGZPy/BDmxsL4PI s7Snod5J06DJNRaPJixmFWGycPBnRrfa+aidRnl19CLklWhh5SwE5qZKLjW4TtPC DutM6h2luZlJmjnBJ6JyBbci+TQrewiXLBNY6jLeizyvcaLP1nqqoWhHyIOEXLsk mKePBVyHJAfpkb3/0aDjLb6nq9VBf7u83LZDvD9dQhAkHrsZXQ3LiSXBVDGlbM8d 4lE0j87aEr+BYMxOcbCpk92S1/cMKAQ= -----END CERTIFICATE-----Generated at Sun Oct 11 16:56:43 2026 by rpki-client