$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa File: dafff672-519a-347d-980e-8ae7d32a641e.roa (raw, json) Hash identifier: JE6VLKRUIp47N9EG3XYXCULkYdhZCoDBxZOXnhnJOWQ= Subject key identifier: 05:95:3A:C1:72:33:D8:0C:E3:FD:11:08:48:90:AA:0B:A6:78:B0:4D Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584EA7960A07607EAFD72495D080 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 174 IP address blocks: 199.89.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:0a:07:60:7e:af:d7:24:95:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0ccd2ff4-3b80-4a52-b4ee-9346690d2715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bd:f7:69:f3:2c:13:7d:52:f7:f2:f4:85:20: 03:ff:34:40:4b:2a:c5:18:88:d4:3c:b5:08:35:e2: 2c:d7:20:4c:bf:8d:4b:9e:9c:58:a3:64:c5:54:e7: b2:7a:36:d9:95:dc:72:08:97:97:24:52:7e:89:7f: 47:38:f5:c1:b1:ca:58:e4:c7:d4:9a:37:3b:fb:e2: ee:c2:df:4f:7e:83:df:dd:45:3d:73:b6:f6:d6:9f: 9e:47:89:e0:28:b6:fc:06:ff:19:12:a9:cb:cf:6f: c6:e7:77:d5:24:ee:e2:40:a4:86:71:63:44:90:51: c7:5e:e6:a3:2c:4b:84:00:4c:55:c1:32:80:e3:f6: f6:08:63:d6:12:e6:d7:22:76:c6:d5:aa:a6:8f:27: f2:6e:42:2f:a7:9c:d2:f6:44:83:e3:40:da:2d:42: f2:91:a8:2c:8e:40:7f:b6:4d:76:17:e3:da:8f:51: 0f:5d:00:be:05:03:6f:7e:12:92:ec:e4:20:0e:83: 22:bf:fa:5e:44:19:c4:dd:d9:19:69:d4:ad:dc:8f: df:bd:9a:04:ea:0a:e8:42:b4:0b:72:82:97:28:6c: 09:87:72:d7:65:2a:4f:17:f3:d2:a6:ef:74:1e:aa: c9:34:be:b8:85:fd:a8:9b:17:2b:9f:21:c8:38:f5: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:95:3A:C1:72:33:D8:0C:E3:FD:11:08:48:90:AA:0B:A6:78:B0:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:63:75:5e:0d:31:12:7d:6f:27:da:92:fe:d0:dd:4b:68:1c: 36:65:8b:45:24:f0:63:0f:8f:d9:45:05:40:59:36:39:a2:10: 3e:c4:45:fd:f5:9a:67:61:67:fe:d5:7b:9a:9b:b6:29:88:35: bb:de:f3:1c:ab:67:17:94:df:ff:7e:92:42:0c:c9:8a:92:e8: 22:57:97:a0:66:f5:2c:77:29:a9:34:13:70:23:91:c9:68:ce: fb:37:42:e0:d3:37:9d:a4:02:77:ee:5b:0b:c2:bd:b2:04:f0: 51:45:7a:4c:ee:f4:94:81:2e:fa:27:6c:6a:45:68:6d:6c:77: ef:f6:2e:62:91:37:c5:82:1a:6d:53:43:1d:40:a8:92:c7:61: 74:83:69:91:ab:28:fd:3d:e1:02:e9:04:37:a3:01:58:91:79: 69:3b:29:13:b8:7c:bf:c1:d9:8b:0c:8e:fe:0a:96:9c:2d:d2: ae:da:db:5c:93:8c:e1:31:b0:0c:bd:9f:ab:6c:be:dc:cb:67: c3:2f:54:4f:45:5c:23:cb:30:f9:e0:42:67:48:96:e3:d9:25: 94:f8:6e:70:07:32:ca:1c:6b:37:ce:e9:31:82:f2:47:70:75: 68:44:a2:80:e5:cf:fd:a0:5d:91:1e:47:7b:f7:ce:3c:67:d8: 23:e3:05:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlgoHYH6v1ySV0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGNjZDJmZjQtM2I4MC00YTUyLWI0ZWUtOTM0NjY5MGQyNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL33afMsE31S9/L0hSAD/zRASyrFGIjUPLUI NeIs1yBMv41LnpxYo2TFVOeyejbZldxyCJeXJFJ+iX9HOPXBscpY5MfUmjc7++Lu wt9PfoPf3UU9c7b21p+eR4ngKLb8Bv8ZEqnLz2/G53fVJO7iQKSGcWNEkFHHXuaj LEuEAExVwTKA4/b2CGPWEubXInbG1aqmjyfybkIvp5zS9kSD40DaLULykagsjkB/ tk12F+Paj1EPXQC+BQNvfhKS7OQgDoMiv/peRBnE3dkZadSt3I/fvZoE6groQrQL coKXKGwJh3LXZSpPF/PSpu90HqrJNL64hf2omxcrnyHIOPUkGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWVOsFyM9gM4/0RCEiQqgumeLBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvZGFmZmY2NzItNTE5YS0z NDdkLTk4MGUtOGFlN2QzMmE2NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9jdV4NMRJ9byfakv7Q3UtoHDZli0Uk8GMPj9lFBUBZNjmiED7ERf31 mmdhZ/7Ve5qbtimINbve8xyrZxeU3/9+kkIMyYqS6CJXl6Bm9Sx3Kak0E3Ajkclo zvs3QuDTN52kAnfuWwvCvbIE8FFFekzu9JSBLvonbGpFaG1sd+/2LmKRN8WCGm1T Qx1AqJLHYXSDaZGrKP094QLpBDejAViReWk7KRO4fL/B2YsMjv4Klpwt0q7a21yT jOExsAy9n6tsvtzLZ8MvVE9FXCPLMPngQmdIluPZJZT4bnAHMsocazfO6TGC8kdw dWhEooDlz/2gXZEeR3v3zjxn2CPjBZ0= -----END CERTIFICATE-----Generated at Sun Sep 20 13:46:25 2026 by rpki-client