$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa File: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (raw, json) Hash identifier: lGo+ONvmq/n2au+OMqVnebdcaj1SI7s9OGW++4/M27k= Subject key identifier: D1:7B:26:EE:97:D2:DC:9A:90:47:B1:F7:C6:67:50:2B:62:3C:00:8B Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584E46BF229BC33A1933D31F0100 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa Signing time: Wed 24 Jun 2026 09:00:12 +0000 ROA not before: Wed 24 Jun 2026 09:00:12 +0000 ROA not after: Tue 22 Sep 2026 09:00:12 +0000 asID: 3359 IP address blocks: 142.244.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:46:bf:22:9b:c3:3a:19:33:d3:1f:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Jun 24 09:00:12 2026 GMT Not After : Sep 22 09:00:12 2026 GMT Subject: CN=f3e90f40-e2a8-42c6-b541-d9b6cd0234da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:be:9a:e2:45:48:8c:eb:20:4e:4f:d2:4b: c3:00:ca:7c:ce:cc:18:69:f6:eb:4a:10:b1:46:27: d5:2e:6a:db:60:79:7b:45:53:cd:1e:f2:86:3f:5d: d3:d0:96:9b:f6:57:8d:5f:fe:a7:c2:86:87:b4:dd: 34:a3:9e:ec:d5:e7:82:09:93:09:d3:c0:8b:23:4a: a9:16:0a:d5:8f:a4:82:63:a3:8d:d2:7d:8b:22:e0: d6:ce:cf:2e:a4:39:90:db:4e:eb:4e:98:02:73:da: 46:fe:e7:4e:71:48:df:64:91:7f:e5:e8:60:6e:e2: 1b:3b:5a:dd:05:20:b8:e4:48:66:78:1c:59:fe:33: 83:1b:17:2a:85:ca:2c:3d:c7:d6:d4:be:91:b9:a6: 0f:5e:f2:2b:49:64:b1:75:19:48:a6:44:e4:6c:6c: b8:a7:6a:c9:5f:2c:7e:73:fe:42:9b:03:2d:3c:d6: cf:19:1d:20:3e:bd:6a:32:2a:23:e8:20:f5:f1:5f: e1:5d:d2:f7:2d:12:14:cf:32:6c:fa:7c:ea:b4:15: 75:fe:78:a6:ea:f1:00:23:6c:cf:c4:28:a9:4f:70: a6:7e:30:5a:4b:cb:47:b2:d0:43:6c:39:d8:78:08: 8b:9d:67:e8:a9:b8:1c:d3:56:a9:b8:2a:47:6e:17: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7B:26:EE:97:D2:DC:9A:90:47:B1:F7:C6:67:50:2B:62:3C:00:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 142.244.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c7:c8:36:01:75:b4:b7:ca:c5:d7:88:1a:9e:d2:70:71:5b: 56:fa:5b:60:28:e7:c5:e5:f9:d3:62:9c:71:56:af:cc:ed:6c: d5:88:7e:d5:5b:6e:24:12:0e:e0:8e:f0:74:2e:e1:43:d9:83: 86:4a:d8:15:e2:c3:72:df:50:33:77:de:0b:08:2f:7f:ec:38: 0d:dc:cd:35:d8:a4:96:c9:16:19:07:ea:b9:04:14:16:dc:dd: a7:61:03:9f:62:5e:b5:0b:cb:5d:11:b4:78:11:f9:f5:96:94: 5a:e6:db:26:dd:dd:cb:e9:cb:23:ed:91:dc:58:e1:da:2f:0a: 8a:05:46:cd:25:9f:36:a1:7f:d6:67:e1:ea:91:9a:bc:21:90: 93:87:5d:c8:34:d9:47:c1:ba:b5:c0:bb:2e:c2:c3:f8:fd:d2: 88:80:86:d5:1d:f6:24:e7:71:fc:e6:f0:69:41:ee:58:89:06: ff:08:c3:a8:65:ed:60:a3:37:03:db:f5:b7:89:79:f1:4a:57: 99:21:10:78:40:5f:57:f9:af:95:b0:04:05:83:cc:66:4e:e9: 4e:e7:bc:75:c3:c7:77:b3:b8:70:67:5b:65:1a:84:d4:b8:8d: f5:77:e2:08:0d:ba:49:e5:06:f1:ab:72:5a:6e:77:be:8d:3c: ae:67:4a:15 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5GvyKbwzoZM9MfAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZjNlOTBmNDAtZTJhOC00MmM2LWI1NDEtZDliNmNkMDIzNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjua+muJFSIzrIE5P0kvDAMp8zswYafbrShCx RifVLmrbYHl7RVPNHvKGP13T0Jab9leNX/6nwoaHtN00o57s1eeCCZMJ08CLI0qp FgrVj6SCY6ON0n2LIuDWzs8upDmQ207rTpgCc9pG/udOcUjfZJF/5ehgbuIbO1rd BSC45EhmeBxZ/jODGxcqhcosPcfW1L6RuaYPXvIrSWSxdRlIpkTkbGy4p2rJXyx+ c/5CmwMtPNbPGR0gPr1qMioj6CD18V/hXdL3LRIUzzJs+nzqtBV1/nim6vEAI2zP xCipT3CmfjBaS8tHstBDbDnYeAiLnWfoqbgc01apuCpHbhcAQQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNF7Ju6X0tyakEex98ZnUCtiPACLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODZmOWUyNWUtYzI0OC0z OTMzLTljZTgtNGU0YjQwOTdhNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjvQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI8fINgF1tLfKxdeIGp7ScHFbVvpbYCjnxeX502KccVavzO1s1Yh+1Vtu JBIO4I7wdC7hQ9mDhkrYFeLDct9QM3feCwgvf+w4DdzNNdiklskWGQfquQQUFtzd p2EDn2JetQvLXRG0eBH59ZaUWubbJt3dy+nLI+2R3Fjh2i8KigVGzSWfNqF/1mfh 6pGavCGQk4ddyDTZR8G6tcC7LsLD+P3SiICG1R32JOdx/ObwaUHuWIkG/wjDqGXt YKM3A9v1t4l58UpXmSEQeEBfV/mvlbAEBYPMZk7pTue8dcPHd7O4cGdbZRqE1LiN 9XfiCA26SeUG8atyWm53vo08rmdKFQ== -----END CERTIFICATE-----Generated at Fri Jul 24 01:51:54 2026 by rpki-client