$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/fa70e99b-e577-31b7-bd7e-4abd640537a5.roa File: fa70e99b-e577-31b7-bd7e-4abd640537a5.roa (raw, json) Hash identifier: etrHYyuUR63b4cNp2sUTLwRxkBPrJs3dSA4kJbhstDk= Subject key identifier: A5:F6:90:F2:9C:86:67:2D:42:80:37:99:54:44:39:BA:EC:B9:AE:B8 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584FC036638CA0EE1ACEF9F12200 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/fa70e99b-e577-31b7-bd7e-4abd640537a5.roa Signing time: Fri 06 Nov 2026 14:00:13 +0000 ROA not before: Fri 06 Nov 2026 14:00:13 +0000 ROA not after: Thu 04 Feb 2027 14:00:13 +0000 asID: 25605 IP address blocks: 198.41.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c0:36:63:8c:a0:ee:1a:ce:f9:f1:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Nov 6 14:00:13 2026 GMT Not After : Feb 4 14:00:13 2027 GMT Subject: CN=1e4f4b17-7313-45f3-9012-8cf8f706cc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:44:f0:8c:9f:7c:7a:82:ac:ab:ed:18:b4: 11:87:f7:2d:d0:91:e8:03:63:b0:71:68:c4:f6:a1: 39:f1:cd:b5:0c:d7:9e:59:da:d8:d6:71:84:4f:53: 12:87:4f:4f:93:34:d6:02:24:db:a2:2f:bb:48:ff: e8:2e:dc:db:d0:8c:ea:bf:fd:59:88:29:4d:7d:6e: f9:7a:f7:a9:d8:56:ff:49:1c:08:46:4b:c4:6e:5f: 07:7d:20:88:0f:e6:34:a9:0d:50:92:ab:62:c8:5f: 7c:48:fc:40:3f:ed:1f:e3:1e:8e:cf:e1:f2:0e:e7: b6:5d:1b:a7:9c:35:1d:96:a7:56:e6:bf:c2:36:8f: 02:92:a1:b9:15:9d:cb:6e:eb:96:3e:98:e8:82:66: 36:5d:cb:df:44:96:12:cb:0d:22:b5:46:2d:97:5f: b2:1f:52:58:2b:3f:49:70:b9:d6:b6:50:de:6d:79: ac:9a:57:a1:bb:fe:aa:ed:2c:98:c1:af:1a:0a:ae: 4b:4a:4f:ec:54:37:90:25:0d:6c:55:68:e7:13:ab: d7:17:3b:7b:22:27:e5:44:ba:bc:e0:e9:79:cc:16: 71:9e:fa:21:4f:6b:cc:6a:df:10:b8:d2:9a:97:57: 4c:99:24:77:14:18:c5:9b:6a:c1:d9:a5:80:58:4c: 66:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F6:90:F2:9C:86:67:2D:42:80:37:99:54:44:39:BA:EC:B9:AE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/fa70e99b-e577-31b7-bd7e-4abd640537a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:5b:e8:ba:5b:6a:7c:2e:5e:f3:f0:ab:ce:d0:78:d3:36:ef: 0b:0a:39:01:38:ed:3b:22:10:bc:d1:09:30:0e:99:bb:35:69: 5c:ad:9f:1c:80:4e:fa:6b:ce:16:50:e2:a9:bf:54:45:16:e5: 89:f5:08:32:99:96:84:d0:5e:5e:2a:9f:9a:0d:cc:ce:db:a2: 82:c3:e3:c7:9e:ea:35:91:d8:04:15:39:16:52:82:9a:2a:cf: 15:bc:2d:ab:d9:18:bf:f1:c0:bc:d6:84:60:42:6f:b9:82:a4: 58:14:3b:c9:fc:a9:a3:49:80:45:31:2e:7d:b6:bc:fa:91:08: 52:d5:7d:23:68:2a:7c:e2:38:b0:bc:93:77:ed:42:96:83:58: 58:85:54:e8:88:fa:4e:66:52:93:10:57:31:2f:78:2c:8c:77: 8c:d5:d0:31:eb:7c:de:e5:30:27:06:0b:22:53:55:3b:08:14: d1:59:29:f3:2d:b4:1a:fe:65:8c:e3:18:40:0c:a1:74:69:c5: 14:9b:01:2b:c9:ed:45:42:0b:79:61:1b:27:81:2b:35:e5:d0: d8:76:68:6b:3b:96:8f:9b:0c:fb:88:4f:e4:0d:a8:bb:19:dd: 2c:56:a2:72:47:38:84:83:7b:2f:0a:d6:60:b8:93:e9:c9:fb: a9:18:b2:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/ANmOMoO4azvnxIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MTEwNjE0MDAxM1oXDTI3MDIwNDE0MDAxM1owLzEtMCsGA1UEAxMk MWU0ZjRiMTctNzMxMy00NWYzLTkwMTItOGNmOGY3MDZjYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kNE8IyffHqCrKvtGLQRh/ct0JHoA2OwcWjE 9qE58c21DNeeWdrY1nGET1MSh09PkzTWAiTboi+7SP/oLtzb0Izqv/1ZiClNfW75 evep2Fb/SRwIRkvEbl8HfSCID+Y0qQ1QkqtiyF98SPxAP+0f4x6Oz+HyDue2XRun nDUdlqdW5r/CNo8CkqG5FZ3LbuuWPpjogmY2XcvfRJYSyw0itUYtl1+yH1JYKz9J cLnWtlDebXmsmlehu/6q7SyYwa8aCq5LSk/sVDeQJQ1sVWjnE6vXFzt7IiflRLq8 4Ol5zBZxnvohT2vMat8QuNKal1dMmSR3FBjFm2rB2aWAWExmMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX2kPKchmctQoA3mVREObrsua64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZmE3MGU5OWItZTU3Ny0z MWI3LWJkN2UtNGFiZDY0MDUzN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVb6LpbanwuXvPwq87QeNM27wsKOQE47TsiELzRCTAOmbs1aVytnxyA TvprzhZQ4qm/VEUW5Yn1CDKZloTQXl4qn5oNzM7booLD48ee6jWR2AQVORZSgpoq zxW8LavZGL/xwLzWhGBCb7mCpFgUO8n8qaNJgEUxLn22vPqRCFLVfSNoKnziOLC8 k3ftQpaDWFiFVOiI+k5mUpMQVzEveCyMd4zV0DHrfN7lMCcGCyJTVTsIFNFZKfMt tBr+ZYzjGEAMoXRpxRSbASvJ7UVCC3lhGyeBKzXl0Nh2aGs7lo+bDPuIT+QNqLsZ 3SxWonJHOISDey8K1mC4k+nJ+6kYsmw= -----END CERTIFICATE-----Generated at Sun Nov 15 16:19:57 2026 by rpki-client