$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa File: aa17f969-ed94-3d77-a18a-b485416a12af.roa (raw, json) Hash identifier: MPsQjDEoMoGFRy8gGuoLyHjvI/9g3EfIy1RPZLTPLZ8= Subject key identifier: F4:C2:71:16:ED:E6:3E:8F:74:65:F4:71:C0:BD:7D:A5:B0:C6:62:D4 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584F498BA29AFC4B628E364267C0 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40676 IP address blocks: 199.89.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:a2:9a:fc:4b:62:8e:36:42:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5cff1c8a-f9ea-4fcb-a08f-5ffa410dddf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:45:d1:99:42:c0:1a:b9:0d:14:94:70:35:10: a3:77:66:01:9a:57:da:3a:e5:c6:f5:35:91:ef:64: 4e:23:01:c9:22:93:05:50:f0:b4:4a:51:6f:23:97: c3:c0:e8:9e:f6:ce:8d:94:dd:ee:ec:b1:09:84:7c: b1:93:43:e2:77:d3:c5:a2:44:8e:55:ab:aa:c4:bd: db:ba:ed:dc:cb:bf:3a:9b:2a:5c:fa:e0:ff:0e:50: 31:1c:ad:73:4e:3f:b8:b9:76:9f:2f:20:11:a4:1f: 08:3f:7f:6f:73:23:c7:c6:9a:1d:87:06:be:2b:18: 2d:b2:dd:57:8c:43:67:e3:8b:fa:fa:c8:fc:0d:54: aa:7d:1a:12:11:3f:ae:4e:7d:45:ce:0b:b4:ce:2f: af:15:d3:4d:0f:18:06:9a:77:01:26:00:1d:64:79: 00:ff:01:89:4d:f7:2d:45:7e:f5:b7:74:47:64:ed: 7b:64:ef:e4:eb:e4:87:ed:92:89:dc:77:d0:8a:af: 97:01:b9:fb:2d:3b:09:8c:b3:66:00:66:18:d2:6e: be:24:4b:30:19:78:e5:63:2d:a3:0b:be:41:e7:97: be:c1:a2:19:92:79:8a:88:c5:17:d9:aa:c4:31:0f: 0e:01:55:c5:ef:1a:2b:07:ef:2b:ed:50:39:56:7a: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C2:71:16:ED:E6:3E:8F:74:65:F4:71:C0:BD:7D:A5:B0:C6:62:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5b:98:7e:80:16:b6:dc:d8:cb:99:eb:ce:85:ed:da:35:81: 2c:dc:be:b9:e4:ca:af:62:bf:a9:3d:00:ff:6e:ee:83:13:d2: 30:e4:41:51:43:d1:d7:6e:75:5f:57:41:23:28:29:0c:58:50: 0f:53:53:4e:1d:58:3f:cc:b6:46:ab:67:69:57:84:5b:69:11: db:c4:90:a4:7b:70:65:9c:4e:e8:2c:2a:3e:a4:c5:c3:22:b7: 21:0d:e2:50:b8:00:72:e1:3a:ab:cc:59:2c:a0:d4:b1:ab:e3: 8f:5a:38:2d:b7:25:42:32:1f:c9:7b:28:a1:24:1d:23:e9:73: 19:93:97:9c:45:d9:d1:f5:58:13:33:72:c0:36:30:87:d6:87: cc:40:13:dc:12:44:4d:ff:b8:cb:dc:13:a6:6d:f1:25:44:23: 60:a7:ba:8c:3c:79:d1:ca:d1:33:b5:ea:38:26:8d:fe:42:86: 90:99:fb:f6:92:eb:d1:d5:76:9d:d6:6c:93:84:b7:40:62:a1: e6:65:8c:1a:59:4b:38:43:af:b0:45:77:32:69:88:c5:29:0d: dc:ee:34:b5:a0:d5:ad:0c:85:b5:81:63:f6:63:8a:8a:1f:e8: ed:88:be:59:8d:b0:78:f9:76:05:79:92:a4:1b:b0:8a:65:24: 97:53:9f:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji6Ka/EtijjZCZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWNmZjFjOGEtZjllYS00ZmNiLWEwOGYtNWZmYTQxMGRkZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEXRmULAGrkNFJRwNRCjd2YBmlfaOuXG9TWR 72ROIwHJIpMFUPC0SlFvI5fDwOie9s6NlN3u7LEJhHyxk0Pid9PFokSOVauqxL3b uu3cy786mypc+uD/DlAxHK1zTj+4uXafLyARpB8IP39vcyPHxpodhwa+Kxgtst1X jENn44v6+sj8DVSqfRoSET+uTn1Fzgu0zi+vFdNNDxgGmncBJgAdZHkA/wGJTfct RX71t3RHZO17ZO/k6+SH7ZKJ3HfQiq+XAbn7LTsJjLNmAGYY0m6+JEswGXjlYy2j C75B55e+waIZknmKiMUX2arEMQ8OAVXF7xorB+8r7VA5VnqwswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTCcRbt5j6PdGX0ccC9faWwxmLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYWExN2Y5NjktZWQ5NC0z ZDc3LWExOGEtYjQ4NTQxNmExMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJbmH6AFrbc2MuZ686F7do1gSzcvrnkyq9iv6k9AP9u7oMT0jDkQVFD 0ddudV9XQSMoKQxYUA9TU04dWD/MtkarZ2lXhFtpEdvEkKR7cGWcTugsKj6kxcMi tyEN4lC4AHLhOqvMWSyg1LGr449aOC23JUIyH8l7KKEkHSPpcxmTl5xF2dH1WBMz csA2MIfWh8xAE9wSRE3/uMvcE6Zt8SVEI2Cnuow8edHK0TO16jgmjf5ChpCZ+/aS 69HVdp3WbJOEt0BioeZljBpZSzhDr7BFdzJpiMUpDdzuNLWg1a0MhbWBY/Zjioof 6O2IvlmNsHj5dgV5kqQbsIplJJdTnwI= -----END CERTIFICATE-----Generated at Sun Sep 27 23:19:07 2026 by rpki-client