$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa File: 72ff3015-9382-36f0-b469-eaf2cf7cea67.roa (raw, json) Hash identifier: wD6f48Kz0pWTZzQC6HCozbKfGx8BFcJxoeFtGsnxhkU= Subject key identifier: B8:3C:2D:0B:AE:2D:20:72:CD:C7:84:83:14:C0:C0:90:7B:1E:B1:D5 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F03A796E08C3441E784542D80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 16839 IP address blocks: 199.91.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:96:e0:8c:34:41:e7:84:54:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=385b44e0-d47c-4eca-aad6-a6166a8135c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:00:76:8b:2e:6b:21:81:8c:c4:eb:bf:ca:fa: 38:e8:35:d6:e6:74:32:83:01:16:49:02:ef:d2:e3: 2f:b1:e0:0c:06:d4:2d:40:3b:ea:9f:70:3c:f3:c4: 86:e9:d1:76:25:02:14:63:0e:ee:a0:d9:bd:5d:ee: 99:9d:f9:b9:86:3a:d4:77:9d:e4:e0:cc:b5:9e:af: 53:2c:77:31:e4:94:98:bc:0a:aa:9f:10:d2:9d:d1: 1e:8d:a1:59:fa:6d:50:3a:e9:f0:04:04:29:d3:73: 30:eb:d8:40:9b:7a:98:93:30:ef:27:d6:0e:80:48: 91:a3:30:71:2a:53:18:13:1e:be:a1:1b:77:15:6a: 95:89:be:8f:cd:8d:38:65:9a:57:ce:3e:f6:17:d6: 61:bd:c3:b4:96:8b:59:bb:25:1b:e9:c1:fa:58:ce: cd:0d:99:5a:40:63:a0:70:9f:e8:c1:d6:3c:db:0d: 99:8f:26:d1:95:81:6c:7d:ce:59:78:82:34:5f:81: 0d:f6:98:26:8c:ed:84:e8:90:d1:1a:38:f1:2d:68: 07:ad:59:cd:c4:4c:8b:48:44:2b:f0:88:3e:26:84: 68:7f:46:f8:22:19:87:6a:ab:ec:1b:ab:f6:aa:c5: 4e:9e:21:b1:7b:58:de:92:88:0d:83:1a:6c:4b:0c: 43:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3C:2D:0B:AE:2D:20:72:CD:C7:84:83:14:C0:C0:90:7B:1E:B1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:f7:7e:99:0e:9b:68:4f:1e:b5:72:8f:87:6e:72:92:ef:f3: e7:73:40:9b:96:8d:b7:ae:f2:60:b1:ac:32:4a:42:8b:13:ac: ea:4a:47:46:23:42:52:04:f9:04:ee:85:c8:37:71:bb:6f:00: c2:7e:1a:ab:50:e5:74:29:48:a6:d8:8b:b8:da:34:32:ba:8b: 50:73:73:dc:13:0d:f2:dd:7a:a5:da:8d:75:99:88:0e:fc:4c: fd:6b:34:b8:bf:90:29:5b:04:17:8a:71:58:bc:c3:79:90:23: 07:b4:47:b0:ed:e3:6c:19:e3:61:f3:dc:bd:9d:5e:7b:f8:c6: 33:ee:85:5a:5b:64:6f:4b:fe:f9:a5:12:a6:00:f5:97:03:53: 32:40:5a:ff:da:fe:97:05:c6:2e:3a:e4:91:35:b9:86:34:5f: f3:8d:de:86:b5:94:f5:06:75:70:90:21:42:fa:eb:9f:51:7f: fc:f4:8f:7d:c2:25:2b:03:a0:21:a4:b8:71:97:22:79:47:5f: e4:47:74:9e:78:0a:30:cb:82:2a:0e:7a:2a:b2:d2:70:8b:a8: 58:de:3e:42:5e:68:2f:b4:84:d5:92:32:9e:8a:44:3f:2c:0a: 29:c5:18:56:3b:cd:a1:b0:2a:44:ab:8f:0a:b9:67:79:d5:33: 7f:41:7d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5bgjDRB54RULYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk Mzg1YjQ0ZTAtZDQ3Yy00ZWNhLWFhZDYtYTYxNjZhODEzNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgB2iy5rIYGMxOu/yvo46DXW5nQygwEWSQLv 0uMvseAMBtQtQDvqn3A888SG6dF2JQIUYw7uoNm9Xe6Znfm5hjrUd53k4My1nq9T LHcx5JSYvAqqnxDSndEejaFZ+m1QOunwBAQp03Mw69hAm3qYkzDvJ9YOgEiRozBx KlMYEx6+oRt3FWqVib6PzY04ZZpXzj72F9ZhvcO0lotZuyUb6cH6WM7NDZlaQGOg cJ/owdY82w2ZjybRlYFsfc5ZeII0X4EN9pgmjO2E6JDRGjjxLWgHrVnNxEyLSEQr 8Ig+JoRof0b4IhmHaqvsG6v2qsVOniGxe1jekogNgxpsSwxDdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg8LQuuLSByzceEgxTAwJB7HrHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzJmZjMwMTUtOTM4Mi0z NmYwLWI0NjktZWFmMmNmN2NlYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKr3fpkOm2hPHrVyj4ducpLv8+dzQJuWjbeu8mCxrDJKQosTrOpKR0Yj QlIE+QTuhcg3cbtvAMJ+GqtQ5XQpSKbYi7jaNDK6i1Bzc9wTDfLdeqXajXWZiA78 TP1rNLi/kClbBBeKcVi8w3mQIwe0R7Dt42wZ42Hz3L2dXnv4xjPuhVpbZG9L/vml EqYA9ZcDUzJAWv/a/pcFxi465JE1uYY0X/ON3oa1lPUGdXCQIUL6659Rf/z0j33C JSsDoCGkuHGXInlHX+RHdJ54CjDLgioOeiqy0nCLqFjePkJeaC+0hNWSMp6KRD8s CinFGFY7zaGwKkSrjwq5Z3nVM39BfdY= -----END CERTIFICATE-----Generated at Tue Sep 22 19:52:12 2026 by rpki-client