$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/89c84859-a029-3a97-97ab-6414e9e0b6eb.roa File: 89c84859-a029-3a97-97ab-6414e9e0b6eb.roa (raw, json) Hash identifier: IB49ED5oBlX9ZKCIuUPA7K1SOgGTTC5hvxbKr46HXRU= Subject key identifier: B8:FC:E6:D1:B6:23:38:06:24:4C:DA:3D:B9:53:6E:3D:F1:82:98:37 Certificate issuer: /CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6 Certificate serial: 010D0C9F4328584F5A32EEF2E3AB6534F7C4C100 Authority key identifier: D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/89c84859-a029-3a97-97ab-6414e9e0b6eb.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 1299 IP address blocks: 198.46.12.0/24 maxlen: 24 198.46.13.0/24 maxlen: 24 198.46.14.0/24 maxlen: 24 198.46.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:ee:f2:e3:ab:65:34:f7:c4:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=0e951a02-a000-475c-bb85-a81ad4c16f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:7a:ae:4b:86:09:40:33:23:35:70:6a:69: d9:db:8f:f5:c5:60:42:70:74:b9:f4:84:fa:66:04: 81:74:6f:fa:33:78:de:95:fb:47:61:54:7a:e6:d3: 07:f8:66:c2:5d:ee:f7:df:fe:01:ca:48:98:00:26: 4d:0a:c1:c1:41:cf:08:d8:4f:a7:b9:8c:48:b4:8f: 89:06:05:52:3f:8f:11:63:8e:50:85:a1:4a:85:9b: ae:0f:dd:16:1d:0e:ba:6c:c5:65:01:01:08:c4:31: 61:73:b6:88:81:1b:0b:3f:79:d7:d0:c1:3d:c0:d3: 98:f2:de:67:a2:03:16:c7:a6:9d:c2:f3:8e:5b:8d: 69:7d:df:0b:49:2b:14:39:5e:51:be:c3:5c:92:b0: 74:57:c2:1e:87:cf:a0:c4:13:35:26:75:13:6e:60: 40:7a:2c:48:9e:d3:10:c2:44:89:dd:c1:0e:9f:3e: 12:87:c2:dd:a2:f6:7b:ea:d5:6c:31:8e:ee:39:ab: 95:1d:c9:8d:f9:aa:e7:10:c9:f2:fe:a4:77:95:cb: 4f:6d:c0:3d:72:da:a2:6e:50:77:5d:cd:09:ee:ae: 63:c0:88:6a:d5:9a:74:bc:1d:28:93:bc:cf:64:fc: c5:71:5d:ed:0e:d7:11:e6:d0:39:52:60:3f:6d:41: d7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FC:E6:D1:B6:23:38:06:24:4C:DA:3D:B9:53:6E:3D:F1:82:98:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/89c84859-a029-3a97-97ab-6414e9e0b6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl X509v3 Authority Key Identifier: keyid:D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer sbgp-ipAddrBlock: critical IPv4: 198.46.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3d:75:ba:fb:3d:51:03:cb:18:9d:80:63:99:80:04:13:83: 01:a8:c1:d7:e7:41:91:64:e6:e8:ac:f2:b8:3c:79:c5:2f:9f: fb:0e:4f:87:1e:34:4d:19:60:62:05:49:11:66:fa:b8:4f:e1: 68:d3:10:42:8f:1e:03:76:82:57:3a:c9:4c:23:f7:36:52:1a: 2e:7e:31:3f:43:2a:34:9c:9b:6f:6a:42:3b:45:e0:a2:8b:6e: 75:c4:a1:92:2c:e3:38:d2:09:b6:e9:e5:56:62:10:c1:a1:0e: f4:74:49:ad:2d:93:70:7b:35:84:28:32:89:37:d6:8c:70:94: 24:84:58:c1:a4:3a:9a:bb:e8:21:e0:1b:50:f4:85:e6:fd:6f: 5b:ac:e8:ad:42:8a:cc:6f:05:9b:8e:29:d6:06:8c:90:3b:87: 5f:75:42:ca:ab:b0:02:04:1a:b9:44:21:c2:03:a2:89:17:0e: ba:57:fe:c0:ca:4f:49:d2:cd:5e:b7:3b:3b:0e:91:fe:74:b3: b7:d3:86:19:91:ed:99:69:36:3e:ea:4f:1e:80:13:72:da:78: a0:dd:07:aa:fd:e7:a3:61:f1:9e:67:bb:52:1d:4c:91:2b:76: 37:34:a4:b0:23:4a:53:d6:ff:4a:f7:7f:d8:8f:a7:4e:43:50: 5b:56:5c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMu7y46tlNPfEwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQxYzExNmItYjQyYy00ZDkwLWFjNjYtMWVmODA3NTMw M2Q2MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MGU5NTFhMDItYTAwMC00NzVjLWJiODUtYTgxYWQ0YzE2ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn16rkuGCUAzIzVwamnZ24/1xWBCcHS59IT6 ZgSBdG/6M3jelftHYVR65tMH+GbCXe733/4BykiYACZNCsHBQc8I2E+nuYxItI+J BgVSP48RY45QhaFKhZuuD90WHQ66bMVlAQEIxDFhc7aIgRsLP3nX0ME9wNOY8t5n ogMWx6adwvOOW41pfd8LSSsUOV5RvsNckrB0V8Ieh8+gxBM1JnUTbmBAeixIntMQ wkSJ3cEOnz4Sh8LdovZ76tVsMY7uOauVHcmN+arnEMny/qR3lctPbcA9ctqiblB3 Xc0J7q5jwIhq1Zp0vB0ok7zPZPzFcV3tDtcR5tA5UmA/bUHX4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj85tG2IzgGJEzaPblTbj3xgpg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZDFj MTE2Yi1iNDJjLTRkOTAtYWM2Ni0xZWY4MDc1MzAzZDYvODljODQ4NTktYTAyOS0z YTk3LTk3YWItNjQxNGU5ZTBiNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWQxYzExNmItYjQyYy00ZDkwLWFj NjYtMWVmODA3NTMwM2Q2L2VkMWMxMTZiLWI0MmMtNGQ5MC1hYzY2LTFlZjgwNzUz MDNkNi5jcmwwHwYDVR0jBBgwFoAU1OvYJQfjc70mqnjoQXDnp6rwDAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lZDFjMTE2Yi1iNDJjLTRkOTAtYWM2Ni0xZWY4 MDc1MzAzZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxi4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU9dbr7PVEDyxidgGOZgAQTgwGowdfnQZFk5uis8rg8ecUvn/sOT4ce NE0ZYGIFSRFm+rhP4WjTEEKPHgN2glc6yUwj9zZSGi5+MT9DKjScm29qQjtF4KKL bnXEoZIs4zjSCbbp5VZiEMGhDvR0Sa0tk3B7NYQoMok31oxwlCSEWMGkOpq76CHg G1D0heb9b1us6K1CisxvBZuOKdYGjJA7h191QsqrsAIEGrlEIcIDookXDrpX/sDK T0nSzV63OzsOkf50s7fThhmR7ZlpNj7qTx6AE3LaeKDdB6r956Nh8Z5nu1IdTJEr djc0pLAjSlPW/0r3f9iPp05DUFtWXMM= -----END CERTIFICATE-----Generated at Tue Oct 13 23:49:44 2026 by rpki-client