$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa File: 1af7f89d-d1da-35f0-bbd2-2132fad40618.roa (raw, json) Hash identifier: Ltgv2D510s62XwJVrQS85LvIOys/EgnO3FZ5uLo5hxE= Subject key identifier: F9:24:7E:D4:0D:4C:4E:57:C0:88:E7:7C:59:3B:37:1F:09:A2:45:F5 Certificate issuer: /CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Certificate serial: 010D0C9F4328584EE0C1ED7366FDA3FC2FE6CE00 Authority key identifier: 8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 396400 IP address blocks: 204.89.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:ed:73:66:fd:a3:fc:2f:e6:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=0726c635-8c5e-4e94-bbc2-d6c070996bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3f:6a:3e:e1:19:4e:fc:3f:d1:e1:35:e9:10: 87:8b:ac:10:19:fa:3c:c5:4a:b3:c6:c2:55:86:9b: 0d:96:d4:6d:da:21:d4:77:22:67:07:a2:29:e8:35: 61:99:fa:0e:92:97:af:e5:12:42:61:00:a3:d1:d2: ac:ff:a1:ba:4b:24:37:93:a1:ba:c0:f4:f8:6a:46: 83:65:3a:50:52:a7:da:d3:dd:77:e0:c9:03:1f:f5: 69:1d:dd:7c:28:4e:f5:58:42:be:09:0e:da:5f:2e: 3b:f4:17:36:ba:82:1e:32:d0:bf:7f:72:27:51:34: 89:27:7c:0b:38:e0:3e:7f:65:ab:df:3a:2c:7a:b3: 40:86:aa:78:c3:20:45:27:c0:26:5e:b9:9f:75:cc: c5:28:76:0d:0a:fa:64:a3:3c:4c:c8:a5:30:97:ed: 57:df:19:1e:91:2c:13:59:97:57:46:af:16:cf:6f: 12:d0:52:77:fc:38:54:47:f4:5f:67:e6:68:06:53: 6e:56:17:23:dc:79:5a:e6:11:8d:13:3b:de:3e:18: fd:ca:39:e2:d5:72:13:a6:94:ad:06:74:74:ad:42: f9:db:f7:86:c7:84:29:90:49:0f:c4:39:72:23:bc: 91:96:68:13:8a:6b:89:b7:cd:65:50:94:ea:83:6d: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:24:7E:D4:0D:4C:4E:57:C0:88:E7:7C:59:3B:37:1F:09:A2:45:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/1af7f89d-d1da-35f0-bbd2-2132fad40618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl X509v3 Authority Key Identifier: keyid:8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer sbgp-ipAddrBlock: critical IPv4: 204.89.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3d:bc:94:24:62:c6:d7:1b:e2:8b:5c:f2:33:e4:e2:7d:fa: 88:64:45:8e:1e:cb:c9:86:59:0e:e4:b7:43:68:c9:1f:06:41: 6a:0f:dd:6b:06:04:e8:9a:c7:01:97:ab:fd:cf:5e:d7:fc:16: 6c:4d:8f:9d:31:75:ec:8e:a1:e1:13:b0:97:f6:10:e0:72:0d: 75:d3:7f:eb:81:9b:b9:64:56:8f:32:7a:c9:2c:72:9b:91:f1: 69:5a:3a:ac:8a:17:20:39:b8:f5:7a:1c:09:62:73:25:86:24: b7:be:5d:48:07:d7:e6:78:f3:e5:7e:db:e8:0b:78:a3:69:5e: eb:6e:a9:18:4c:7d:43:e3:34:1b:a3:92:c1:f9:05:29:3f:c5: aa:5d:04:fc:c4:5e:06:a9:85:40:4d:d2:56:c1:69:56:e9:75: 4a:0f:25:2b:82:ff:4b:cb:99:6d:51:cc:87:0b:0b:6c:8c:07: 04:1b:9f:88:fa:59:ea:de:c2:bd:c7:86:25:3d:33:f7:d9:f9: 25:71:92:55:bc:19:0b:b8:b7:23:60:74:bc:5e:e1:93:ff:57: a3:0e:a7:d7:cd:e3:dc:96:3e:7b:8f:e6:f0:55:97:22:66:79: 64:8e:e0:00:9a:37:69:fd:09:22:01:49:66:2f:b9:bb:c2:da: e4:fd:ea:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwe1zZv2j/C/mzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUwZDFiYjktMmVmOS00ODEwLTgxMDktMjVjZGQ1YWZj NGZkMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MDcyNmM2MzUtOGM1ZS00ZTk0LWJiYzItZDZjMDcwOTk2YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz9qPuEZTvw/0eE16RCHi6wQGfo8xUqzxsJV hpsNltRt2iHUdyJnB6Ip6DVhmfoOkpev5RJCYQCj0dKs/6G6SyQ3k6G6wPT4akaD ZTpQUqfa09134MkDH/VpHd18KE71WEK+CQ7aXy479Bc2uoIeMtC/f3InUTSJJ3wL OOA+f2Wr3zoserNAhqp4wyBFJ8AmXrmfdczFKHYNCvpkozxMyKUwl+1X3xkekSwT WZdXRq8Wz28S0FJ3/DhUR/RfZ+ZoBlNuVhcj3Hla5hGNEzvePhj9yjni1XITppSt BnR0rUL52/eGx4QpkEkPxDlyI7yRlmgTimuJt81lUJTqg22cZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkkftQNTE5XwIjnfFk7Nx8JokX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBk MWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNkZDVhZmM0ZmQvMWFmN2Y4OWQtZDFkYS0z NWYwLWJiZDItMjEzMmZhZDQwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODUwZDFiYjktMmVmOS00ODEwLTgx MDktMjVjZGQ1YWZjNGZkLzg1MGQxYmI5LTJlZjktNDgxMC04MTA5LTI1Y2RkNWFm YzRmZC5jcmwwHwYDVR0jBBgwFoAUi3aXN6k5bQ2eBOg7ZEJtY8aQAHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBkMWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNk ZDVhZmM0ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB09vJQkYsbXG+KLXPIz5OJ9+ohkRY4ey8mGWQ7kt0NoyR8GQWoP3WsG BOiaxwGXq/3PXtf8FmxNj50xdeyOoeETsJf2EOByDXXTf+uBm7lkVo8yeskscpuR 8WlaOqyKFyA5uPV6HAlicyWGJLe+XUgH1+Z48+V+2+gLeKNpXutuqRhMfUPjNBuj ksH5BSk/xapdBPzEXgaphUBN0lbBaVbpdUoPJSuC/0vLmW1RzIcLC2yMBwQbn4j6 Werewr3HhiU9M/fZ+SVxklW8GQu4tyNgdLxe4ZP/V6MOp9fN49yWPnuP5vBVlyJm eWSO4ACaN2n9CSIBSWYvubvC2uT96nI= -----END CERTIFICATE-----Generated at Mon Sep 28 22:52:46 2026 by rpki-client