$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa File: e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa (raw, json) Hash identifier: e2+A8nxQFM4dkpLvcBrfPLxBkAzBrOIODgeNEcDoIB4= Subject key identifier: 18:B8:D1:8D:39:DF:AB:5E:F2:78:D5:D7:22:C7:2B:D8:1B:59:13:65 Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584FC4668094624FF69FDE420D00 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa Signing time: Sun 08 Nov 2026 02:00:13 +0000 ROA not before: Sun 08 Nov 2026 02:00:13 +0000 ROA not after: Sat 06 Feb 2027 02:00:13 +0000 asID: 14618 IP address blocks: 69.89.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:66:80:94:62:4f:f6:9f:de:42:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Nov 8 02:00:13 2026 GMT Not After : Feb 6 02:00:13 2027 GMT Subject: CN=2ea6246d-2adc-4be3-a4eb-69f3f765b516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:f6:4b:4e:0a:16:72:8b:cd:62:51:21:95: d7:d3:fb:64:68:32:80:52:6f:a2:50:ac:ab:26:f0: 38:7e:b6:c4:20:db:27:a1:80:10:c9:a1:2b:d5:a5: be:80:bf:58:cb:e6:29:30:87:df:90:2a:c5:df:89: b3:e9:cf:4f:05:7e:d1:76:a9:62:b6:33:5b:64:c9: ae:2f:54:b5:c5:de:93:8e:e2:68:b9:69:f7:f3:bd: 91:50:e0:bb:19:d7:ee:94:56:d2:83:11:c0:61:45: 21:02:02:c7:85:0e:c2:ba:04:3b:bb:4e:16:25:11: db:2b:1f:41:67:fd:99:3a:71:cf:12:da:9b:b6:cd: 98:41:9c:e8:c0:34:1e:87:b3:96:76:b7:29:93:35: 28:0b:03:0b:f0:7a:25:5a:c2:51:bd:a9:4b:39:db: da:61:f8:0e:e0:da:37:1a:be:91:32:03:c5:40:91: fe:09:a9:8a:fa:97:5b:54:32:6c:67:b3:84:13:e5: 15:ec:64:42:09:f9:d8:00:bd:99:89:43:09:23:9d: 00:b8:26:a4:7a:74:1e:db:23:b6:83:a3:d0:3c:c2: a4:15:ff:52:ae:6d:34:25:12:a2:d7:8b:21:60:cf: 11:9f:86:59:f1:71:d1:14:8a:3f:cb:d7:99:ad:02: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B8:D1:8D:39:DF:AB:5E:F2:78:D5:D7:22:C7:2B:D8:1B:59:13:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv4: 69.89.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:97:5e:03:45:2c:a5:79:95:d5:1f:0b:1a:c4:f2:a8:13:21: 47:be:94:03:78:6a:98:46:2a:09:9c:9e:0c:b5:cc:71:dd:f1: 2f:23:5e:c0:d8:35:93:28:94:29:82:19:b4:89:46:be:79:bd: 05:41:37:06:7a:bb:f9:d5:0a:37:4a:63:25:1e:8c:d8:7d:3d: 5c:07:b1:8c:88:f0:f3:96:19:1d:bb:8a:d9:82:d1:20:d2:6f: c7:b8:53:3c:5e:98:67:d8:2f:2d:6f:95:b9:c3:dc:50:78:ef: 64:41:19:f8:8c:10:39:3b:6f:be:8f:8c:57:96:43:d9:1a:65: 7b:f0:95:8f:73:dd:fa:14:25:b0:a8:88:a5:b6:2e:44:cf:a2: 3f:a7:13:d4:8f:26:c7:76:a4:69:4f:be:f6:f1:bc:5d:78:1f: b2:e0:24:2b:55:96:2d:02:00:21:13:6a:b6:a2:1c:2d:95:b6: f2:0a:9a:23:89:83:e7:0e:ff:44:97:55:58:9a:29:61:43:d6: d7:4b:1c:c4:0d:60:74:70:82:f7:fb:b9:55:f1:ce:94:bc:ea: 90:ee:db:2b:b8:c2:45:8e:7c:47:a3:93:58:aa:54:d2:b2:66: 56:ec:f9:18:5f:71:4e:4d:9f:c3:2e:c6:3b:92:25:4b:4f:ea: c7:65:27:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/EZoCUYk/2n95CDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk MmVhNjI0NmQtMmFkYy00YmUzLWE0ZWItNjlmM2Y3NjViNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Br2S04KFnKLzWJRIZXX0/tkaDKAUm+iUKyr JvA4frbEINsnoYAQyaEr1aW+gL9Yy+YpMIffkCrF34mz6c9PBX7RdqlitjNbZMmu L1S1xd6TjuJouWn3872RUOC7GdfulFbSgxHAYUUhAgLHhQ7CugQ7u04WJRHbKx9B Z/2ZOnHPEtqbts2YQZzowDQeh7OWdrcpkzUoCwML8HolWsJRvalLOdvaYfgO4No3 Gr6RMgPFQJH+CamK+pdbVDJsZ7OEE+UV7GRCCfnYAL2ZiUMJI50AuCakenQe2yO2 g6PQPMKkFf9Srm00JRKi14shYM8Rn4ZZ8XHRFIo/y9eZrQJOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi40Y0536te8njV1yLHK9gbWRNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvZTBhOTliMzctODNjNy0z Zjk1LWFmMmYtZWVmNjA0ZGExZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiXXgNFLKV5ldUfCxrE8qgTIUe+lAN4aphGKgmcngy1zHHd8S8jXsDY NZMolCmCGbSJRr55vQVBNwZ6u/nVCjdKYyUejNh9PVwHsYyI8POWGR27itmC0SDS b8e4UzxemGfYLy1vlbnD3FB472RBGfiMEDk7b76PjFeWQ9kaZXvwlY9z3foUJbCo iKW2LkTPoj+nE9SPJsd2pGlPvvbxvF14H7LgJCtVli0CACETaraiHC2VtvIKmiOJ g+cO/0SXVViaKWFD1tdLHMQNYHRwgvf7uVXxzpS86pDu2yu4wkWOfEejk1iqVNKy Zlbs+RhfcU5Nn8MuxjuSJUtP6sdlJ6c= -----END CERTIFICATE-----Generated at Sun Nov 15 15:04:52 2026 by rpki-client