$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa File: cbf5d661-caf7-3016-8cfc-b5a540e71195.roa (raw, json) Hash identifier: tpVYbDrMnfQfHqgL8/O4y7YhDP0SuvWr4oKjsIVl8kM= Subject key identifier: F4:4D:71:6A:73:05:F7:C0:6D:85:70:24:A4:AD:AF:94:1E:B3:2A:F2 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584F7782ECE2D3654E25C410FBC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 16839 IP address blocks: 199.91.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:ec:e2:d3:65:4e:25:c4:10:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=c8cfd357-371f-420f-a081-1ea6a6a6470e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:32:86:da:12:b5:63:62:52:34:0e:ef:22:12: f5:24:29:02:ec:43:66:11:a7:5b:fa:0d:df:bb:7f: eb:13:77:78:0d:8c:37:fa:ed:ae:48:5e:ac:9a:38: a8:c0:94:0f:af:48:aa:1d:ed:8f:2a:70:75:c8:bf: ab:e9:91:72:b5:47:db:2b:64:e5:30:55:d8:43:3b: fb:ce:5c:a0:c7:dd:06:f4:c1:2f:2b:c1:5c:e2:31: b8:73:f2:6e:8e:c8:1c:ba:cc:94:99:5e:e6:ab:88: de:4f:d7:71:d3:27:cf:a7:76:55:6f:7d:6e:a4:62: b6:24:e3:2d:9c:e6:b9:eb:ff:cf:7e:fa:93:26:03: 42:0c:ea:c0:9d:9d:74:d7:0a:c6:f8:98:01:87:18: 58:b0:34:ef:c8:34:bb:aa:fd:6d:21:4c:fc:48:15: c6:20:05:7a:35:6b:fb:b4:6a:e3:41:72:fc:e1:da: 82:fc:5f:50:e5:20:31:ac:4a:b1:32:be:e5:e3:a2: c1:1a:12:75:ab:0e:21:db:1c:4e:1f:f7:a8:22:8c: 28:39:91:4e:57:72:7e:ff:e3:6a:94:b4:e4:20:0c: 1c:a8:6a:ac:8c:35:f1:59:2e:55:00:9b:23:f4:2b: a0:50:5b:de:4f:2c:81:0b:93:c1:b6:f6:ca:d9:2d: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4D:71:6A:73:05:F7:C0:6D:85:70:24:A4:AD:AF:94:1E:B3:2A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6f:14:bc:df:8d:8d:fb:2a:d9:8e:f0:c9:aa:e6:1a:22:f1: 18:cd:f4:95:be:a7:12:1c:a1:f9:fd:60:a5:45:31:25:07:1f: 9a:26:47:c5:31:55:1d:7a:c2:22:be:00:8b:3f:d6:01:79:25: 34:43:f0:81:4f:d9:59:45:46:cb:cd:0b:dc:0c:77:e2:08:9b: f5:ab:78:ac:69:b7:96:60:82:57:68:f8:1c:2b:d5:91:84:b8: 46:3a:bb:b8:ce:7f:e8:69:88:1c:33:29:1b:8b:b9:2f:cc:1f: df:3e:53:d4:fc:7e:e7:ab:eb:b9:39:23:0f:2e:c9:d6:f5:6d: 5b:59:ad:d7:25:24:a2:79:cd:1c:35:a1:30:45:1c:00:ab:b5: ba:6b:8f:b6:1b:7d:fe:67:3e:f3:a3:8c:b8:e9:63:a7:d0:57: 10:48:49:42:7a:30:16:59:71:e9:b7:cf:84:1e:56:86:0f:b3: 92:bb:28:f2:58:7d:4d:ab:db:24:9d:9c:14:99:6b:8f:d5:55: 53:cc:d1:ba:61:e1:e4:71:35:cf:b0:0e:b9:01:b2:f8:92:8f: 0e:e2:6b:f2:90:11:1e:a0:c8:b6:31:86:e1:3a:cb:bb:9d:c9: 38:9f:22:b1:9c:5e:d8:fc:b6:55:4f:ae:b1:66:ae:93:86:50: c6:dd:10:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93guzi02VOJcQQ+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YzhjZmQzNTctMzcxZi00MjBmLWEwODEtMWVhNmE2YTY0NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijKG2hK1Y2JSNA7vIhL1JCkC7ENmEadb+g3f u3/rE3d4DYw3+u2uSF6smjiowJQPr0iqHe2PKnB1yL+r6ZFytUfbK2TlMFXYQzv7 zlygx90G9MEvK8Fc4jG4c/JujsgcusyUmV7mq4jeT9dx0yfPp3ZVb31upGK2JOMt nOa56//PfvqTJgNCDOrAnZ101wrG+JgBhxhYsDTvyDS7qv1tIUz8SBXGIAV6NWv7 tGrjQXL84dqC/F9Q5SAxrEqxMr7l46LBGhJ1qw4h2xxOH/eoIowoOZFOV3J+/+Nq lLTkIAwcqGqsjDXxWS5VAJsj9CugUFveTyyBC5PBtvbK2S09YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRNcWpzBffAbYVwJKStr5QesyryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvY2JmNWQ2NjEtY2FmNy0z MDE2LThjZmMtYjVhNTQwZTcxMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNvFLzfjY37KtmO8Mmq5hoi8RjN9JW+pxIcofn9YKVFMSUHH5omR8Ux VR16wiK+AIs/1gF5JTRD8IFP2VlFRsvNC9wMd+IIm/WreKxpt5Zggldo+Bwr1ZGE uEY6u7jOf+hpiBwzKRuLuS/MH98+U9T8fuer67k5Iw8uydb1bVtZrdclJKJ5zRw1 oTBFHACrtbprj7Ybff5nPvOjjLjpY6fQVxBISUJ6MBZZcem3z4QeVoYPs5K7KPJY fU2r2ySdnBSZa4/VVVPM0bph4eRxNc+wDrkBsviSjw7ia/KQER6gyLYxhuE6y7ud yTifIrGcXtj8tlVPrrFmrpOGUMbdEKs= -----END CERTIFICATE-----Generated at Mon Oct 12 04:05:28 2026 by rpki-client