$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa File: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (raw, json) Hash identifier: Ivc2V75k346K7GF/0O0XSnoD/R0U1OkGceQFHYTCD58= Subject key identifier: 92:B6:33:C8:1C:4F:A5:72:5A:E6:14:65:44:FF:27:2C:40:9F:6F:82 Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584F0672382846978D092F201930 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 10918 IP address blocks: 173.243.232.0/22 maxlen: 32 199.96.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:38:28:46:97:8d:09:2f:20:19:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=71616cbd-1eb7-4fff-8b3b-026168c28760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:30:4e:cc:24:3e:9f:04:92:ae:73:34:ad:9b: a2:a6:4c:25:40:12:d2:d7:4b:85:c4:69:88:5a:46: fb:b4:8e:68:fc:17:b8:b4:7d:4a:83:84:19:46:45: 99:15:a7:62:82:51:07:5c:b8:4c:d0:c1:50:e8:70: 19:1b:d6:16:83:5e:8a:02:c0:0e:1c:2e:f9:aa:cc: e7:a7:b3:f7:87:24:e2:f6:7e:98:d2:f4:3e:ef:5d: 15:e5:9a:71:c3:0f:e7:bb:a7:98:7f:0a:f9:7c:0b: 53:94:2e:e8:fc:c3:d8:a8:8f:17:3c:04:0a:c5:08: 3e:f4:f5:27:a7:f8:5c:94:2e:14:77:d3:32:47:0c: b5:24:f8:0f:24:52:c9:44:f7:a5:95:15:38:cb:6e: 9e:65:bb:a3:db:9b:e6:18:c1:98:82:49:17:76:95: 94:8a:0b:5c:91:58:e8:e9:e2:e5:5a:90:77:54:06: 6e:33:9c:7d:6d:fa:e7:a0:3d:f9:65:b4:3e:c9:34: 58:0b:4c:0d:60:9c:20:c3:d4:8a:99:b5:68:90:c4: 39:a5:90:e3:4d:93:6c:ad:bc:91:08:43:3a:e5:31: a9:b7:62:e0:b5:6a:1f:ea:43:11:97:d4:13:78:32: bd:ed:d6:3b:98:69:47:42:3f:40:ad:95:b9:2d:e0: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:33:C8:1C:4F:A5:72:5A:E6:14:65:44:FF:27:2C:40:9F:6F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: 173.243.232.0/22 199.96.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:a1:27:6d:e6:a4:50:83:98:f8:a4:ae:5a:16:bc:5b:80: 2e:81:94:a2:4b:0f:9e:ae:f3:b1:8e:54:8e:94:cf:cc:f7:56: 3a:04:24:1b:1c:7a:4c:99:17:50:64:0c:7e:c9:35:77:ac:6e: c8:16:1a:71:54:84:36:4a:b4:c4:7f:07:f7:5e:82:d2:58:e2: 36:4f:c9:cf:ba:bf:41:e2:6b:cf:ca:45:e8:52:6f:ca:cc:83: 65:6d:7d:d5:82:7d:a2:6f:3a:92:93:21:49:8e:3f:36:03:03: 5f:78:58:7b:88:8d:4b:f9:e7:e2:d0:c5:75:ef:6b:8c:56:0c: 2c:2f:87:a3:ab:fa:63:c3:67:ee:7d:c1:42:85:ab:5d:87:ea: e5:1b:ae:b9:a0:2a:d7:08:02:59:25:34:1c:88:4a:62:a6:36: 65:87:11:57:b5:5a:0f:f1:a5:9d:8e:75:d5:98:8d:4a:b1:25: fa:c6:87:08:34:a8:da:b9:60:be:c1:96:c5:a1:97:21:6a:55: b6:6b:a6:a2:80:49:01:22:52:22:83:0d:cd:f3:9d:32:35:fa: df:38:09:45:1f:8b:22:08:75:ce:25:a6:d4:20:d1:da:d3:80: 7e:55:a6:f7:dd:75:96:6d:24:ba:4c:88:91:f1:13:bc:4d:61: f5:1f:69:17 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8GcjgoRpeNCS8gGTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NzE2MTZjYmQtMWViNy00ZmZmLThiM2ItMDI2MTY4YzI4NzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTBOzCQ+nwSSrnM0rZuipkwlQBLS10uFxGmI Wkb7tI5o/Be4tH1Kg4QZRkWZFadiglEHXLhM0MFQ6HAZG9YWg16KAsAOHC75qszn p7P3hyTi9n6Y0vQ+710V5Zpxww/nu6eYfwr5fAtTlC7o/MPYqI8XPAQKxQg+9PUn p/hclC4Ud9MyRwy1JPgPJFLJRPellRU4y26eZbuj25vmGMGYgkkXdpWUigtckVjo 6eLlWpB3VAZuM5x9bfrnoD35ZbQ+yTRYC0wNYJwgw9SKmbVokMQ5pZDjTZNsrbyR CEM65TGpt2LgtWof6kMRl9QTeDK97dY7mGlHQj9ArZW5LeDddQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJK2M8gcT6VyWuYUZUT/JyxAn2+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvOGNmZjZiOTktYTliMC0z ZjViLTkyMTgtODk1ZTAxNzVmZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCrfPoAwQC x2BsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFxLoSdt5qRQg5j4pK5aFrxbgC6BlKJLD56u87GOVI6Uz8z3 VjoEJBscekyZF1BkDH7JNXesbsgWGnFUhDZKtMR/B/degtJY4jZPyc+6v0Hia8/K RehSb8rMg2VtfdWCfaJvOpKTIUmOPzYDA194WHuIjUv55+LQxXXva4xWDCwvh6Or +mPDZ+59wUKFq12H6uUbrrmgKtcIAlklNByISmKmNmWHEVe1Wg/xpZ2OddWYjUqx JfrGhwg0qNq5YL7BlsWhlyFqVbZrpqKASQEiUiKDDc3znTI1+t84CUUfiyIIdc4l ptQg0drTgH5VpvfddZZtJLpMiJHxE7xNYfUfaRc= -----END CERTIFICATE-----Generated at Tue Sep 22 07:47:16 2026 by rpki-client