$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa File: e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa (raw, json) Hash identifier: eOq6kUd7ynlW184Mb/gdtlpp0XBMYrj9EkpoHV43MxQ= Subject key identifier: FA:96:3C:E3:52:E5:C2:56:6D:A3:A8:25:75:5C:28:6E:10:63:58:4D Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584F225D090D1869F519B45E3200 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 69.89.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:09:0d:18:69:f5:19:b4:5e:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=11b18677-c206-4a46-9629-40ab1f2f3505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:1e:e6:3b:e8:5e:d2:ee:bf:a8:56:93:8f: 65:f4:a6:32:26:1c:62:74:f2:45:08:5c:37:dd:4f: db:bd:24:c9:ed:39:4c:a0:ab:13:92:7d:d2:c2:04: e8:4b:18:35:a6:1a:21:71:25:11:b0:9e:b4:df:9c: d1:ce:3a:62:a7:b6:bb:65:f5:9b:22:f9:6b:6c:fb: 6e:81:ac:14:27:05:e0:eb:bc:9d:9d:84:5b:35:de: 0c:19:60:a6:db:0d:7b:c4:c5:ae:77:56:70:ab:70: d4:ad:97:c1:c4:81:f0:74:a1:75:4a:cd:1b:b7:1a: a1:c4:94:67:22:97:99:65:83:08:3b:43:65:c8:9a: ce:7d:36:36:e8:bb:88:76:f6:e0:18:64:dd:72:b9: de:49:5b:39:f9:90:21:eb:20:e0:b7:82:2e:92:ae: f7:33:f6:99:d1:b8:1b:99:c0:7b:87:3e:f0:4e:1c: 4d:7f:eb:6b:5d:5a:3b:77:40:2f:1e:da:b0:69:5b: 64:d8:81:af:f1:20:d8:47:12:c3:9b:07:8b:ba:29: d4:3a:6b:42:fb:fc:08:27:75:25:cf:d6:03:f3:33: 38:80:12:62:ce:63:bf:53:58:2f:ec:90:b8:51:0d: 60:ac:e9:15:b8:9c:32:6a:96:84:71:41:5b:e8:21: cd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:96:3C:E3:52:E5:C2:56:6D:A3:A8:25:75:5C:28:6E:10:63:58:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv4: 69.89.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9f:87:63:c9:8a:44:0c:aa:e4:c1:fa:d5:e4:ce:b3:4e:76: a1:ad:4e:bd:78:77:4f:3f:7c:7d:42:4a:8e:d7:33:a8:ce:2d: da:39:1b:a9:e0:58:1b:df:57:2c:d3:72:13:e0:a5:e6:53:f3: 6f:3c:ac:19:4a:4b:79:ce:c0:a4:3f:c8:95:b1:88:dc:b2:d6: 32:11:4d:6d:8c:b9:8a:05:fb:11:eb:17:1f:63:62:75:35:4b: 1c:b3:99:ad:2a:73:74:5b:ee:70:24:d5:43:99:4e:ba:01:48: 13:e8:ba:be:1f:4e:a5:2e:dc:b4:81:cb:26:d3:40:e6:be:e5: bd:9f:86:46:1d:ee:64:5c:cf:e2:7e:9f:05:6a:19:8d:a4:1e: bd:fd:d8:b3:be:9a:6e:08:2f:01:83:42:ea:6c:41:53:a4:c3: d5:21:12:fe:f1:ab:c8:d4:85:a7:8c:55:7c:9d:6d:27:ec:28: 13:8f:87:29:0e:95:ab:13:b7:b8:f6:1e:0c:f1:11:17:c6:ff: 85:04:67:67:dc:1c:6d:98:20:6a:ae:5b:32:d2:4e:ca:48:87: 16:b4:90:3e:3b:c0:38:d8:0b:fd:c7:c5:7e:c4:bc:49:f6:d5: c4:50:70:a3:36:ae:b8:f8:4a:c3:1b:f7:3f:5a:3b:fc:1c:c1: c2:65:2d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQkNGGn1GbReMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MTFiMTg2NzctYzIwNi00YTQ2LTk2MjktNDBhYjFmMmYzNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOAe5jvoXtLuv6hWk49l9KYyJhxidPJFCFw3 3U/bvSTJ7TlMoKsTkn3SwgToSxg1phohcSURsJ6035zRzjpip7a7ZfWbIvlrbPtu gawUJwXg67ydnYRbNd4MGWCm2w17xMWud1Zwq3DUrZfBxIHwdKF1Ss0btxqhxJRn IpeZZYMIO0NlyJrOfTY26LuIdvbgGGTdcrneSVs5+ZAh6yDgt4Iukq73M/aZ0bgb mcB7hz7wThxNf+trXVo7d0AvHtqwaVtk2IGv8SDYRxLDmweLuinUOmtC+/wIJ3Ul z9YD8zM4gBJizmO/U1gv7JC4UQ1grOkVuJwyapaEcUFb6CHNswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqWPONS5cJWbaOoJXVcKG4QY1hNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvZTBhOTliMzctODNjNy0z Zjk1LWFmMmYtZWVmNjA0ZGExZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2fh2PJikQMquTB+tXkzrNOdqGtTr14d08/fH1CSo7XM6jOLdo5G6ng WBvfVyzTchPgpeZT8288rBlKS3nOwKQ/yJWxiNyy1jIRTW2MuYoF+xHrFx9jYnU1 Sxyzma0qc3Rb7nAk1UOZTroBSBPour4fTqUu3LSByybTQOa+5b2fhkYd7mRcz+J+ nwVqGY2kHr392LO+mm4ILwGDQupsQVOkw9UhEv7xq8jUhaeMVXydbSfsKBOPhykO lasTt7j2HgzxERfG/4UEZ2fcHG2YIGquWzLSTspIhxa0kD47wDjYC/3HxX7EvEn2 1cRQcKM2rrj4SsMb9z9aO/wcwcJlLXA= -----END CERTIFICATE-----Generated at Sun Sep 20 13:35:38 2026 by rpki-client