$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/12f9cd36-20cc-39ac-a5a5-be19dd29b8c9.roa File: 12f9cd36-20cc-39ac-a5a5-be19dd29b8c9.roa (raw, json) Hash identifier: eFt/NrLBg0dFprI6wXu4BxdKYB7piBjfZoyc7mvEqzM= Subject key identifier: 1A:A9:CE:F5:09:7F:48:67:2D:41:19:D6:9D:20:8A:B4:53:88:AC:4D Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584F1DAC129259437777314B7240 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/12f9cd36-20cc-39ac-a5a5-be19dd29b8c9.roa Signing time: Wed 09 Sep 2026 08:40:36 +0000 ROA not before: Wed 09 Sep 2026 08:40:36 +0000 ROA not after: Tue 08 Dec 2026 09:40:36 +0000 asID: 25605 IP address blocks: 198.41.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1d:ac:12:92:59:43:77:77:31:4b:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Sep 9 08:40:36 2026 GMT Not After : Dec 8 09:40:36 2026 GMT Subject: CN=5d4a70d1-042b-4f8b-ba91-9cb054565d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:82:65:59:6a:b7:0e:1c:54:e9:94:5a:7e: 01:8b:4f:7e:de:4f:0d:96:d9:d3:67:ef:8b:7a:07: 31:d8:2e:d7:8e:08:c9:a7:16:9a:28:0a:11:28:1c: 31:51:1f:1e:d8:83:cf:50:77:c4:dd:49:3e:40:9e: a7:a1:f5:8f:78:d6:47:d2:2a:20:67:02:ea:3d:94: 3c:18:ed:6c:f1:67:3c:0e:35:ac:25:f2:41:ef:39: d2:7e:23:f6:69:5c:6b:62:0b:ae:ce:28:3f:8b:28: df:88:7a:2e:39:a5:f7:1f:34:7b:a7:6c:15:5a:b3: d1:82:be:0d:13:1d:f9:1e:f6:24:05:0e:bf:18:de: 28:6c:ef:6d:92:c1:3e:fb:a4:72:88:b2:87:85:f6: ac:6d:c0:3e:e5:4d:8d:a3:fe:9b:f8:68:e4:cc:49: a7:14:3e:a4:4f:d7:73:a0:57:a8:93:21:4c:c8:03: 9b:92:b0:d6:08:58:68:58:b5:16:e5:b8:96:6d:01: 86:60:b3:98:df:52:2f:32:77:05:37:55:c4:0b:cd: b3:c9:cd:9a:13:f5:23:00:79:cb:bd:6a:40:17:30: 4b:9f:e6:21:1f:eb:61:40:4a:7b:6e:9f:a5:54:30: 18:b8:2e:e1:c6:a4:9c:a3:2a:95:aa:10:62:da:72: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:CE:F5:09:7F:48:67:2D:41:19:D6:9D:20:8A:B4:53:88:AC:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/12f9cd36-20cc-39ac-a5a5-be19dd29b8c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e5:9e:f3:44:9f:2c:59:cd:ac:65:82:74:f9:fb:b0:e6:ad: 7d:27:48:05:d9:90:68:58:cc:7e:5e:23:e0:d0:fd:91:6d:a2: ae:aa:3c:9d:6f:dc:f9:be:2a:3c:bd:59:35:8e:bb:e5:2a:46: 75:24:99:e2:43:ff:ea:ba:a6:7f:03:1c:b1:c7:02:af:9b:f8: ea:9c:64:77:71:73:da:1f:a9:67:be:c0:6a:2c:f7:8f:9d:be: 53:a9:50:a1:4f:94:e1:64:5a:dd:4f:aa:41:00:ae:9b:a5:8d: 22:b1:03:4d:69:35:9c:97:fa:66:1b:e1:90:0b:17:1c:07:bf: fa:8e:1c:c6:96:0a:43:b3:a6:89:bf:23:5c:43:3b:ad:2c:c1: 20:f8:00:0c:36:8c:34:98:51:31:a6:d2:e4:bc:dd:02:16:df: b9:b3:75:48:09:60:cb:f2:ca:65:2c:a6:b0:70:7e:ff:c5:9e: cc:59:18:d7:bb:82:dc:93:58:c0:7c:f8:0d:e7:53:55:79:cd: 17:1a:6a:c2:59:3d:a5:b4:ea:1e:ae:58:6a:03:43:10:d4:31: 2e:4b:60:02:5f:d6:57:57:51:21:63:eb:9e:08:68:63:4b:04: 1c:c0:4a:87:e7:e0:77:7d:75:e9:3d:be:56:d7:14:04:c5:61: 9d:bd:59:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8drBKSWUN3dzFLckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDkwOTA4NDAzNloXDTI2MTIwODA5NDAzNlowLzEtMCsGA1UEAxMk NWQ0YTcwZDEtMDQyYi00ZjhiLWJhOTEtOWNiMDU0NTY1ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOmCZVlqtw4cVOmUWn4Bi09+3k8NltnTZ++L egcx2C7XjgjJpxaaKAoRKBwxUR8e2IPPUHfE3Uk+QJ6nofWPeNZH0iogZwLqPZQ8 GO1s8Wc8DjWsJfJB7znSfiP2aVxrYguuzig/iyjfiHouOaX3HzR7p2wVWrPRgr4N Ex35HvYkBQ6/GN4obO9tksE++6RyiLKHhfasbcA+5U2No/6b+GjkzEmnFD6kT9dz oFeokyFMyAObkrDWCFhoWLUW5biWbQGGYLOY31IvMncFN1XEC82zyc2aE/UjAHnL vWpAFzBLn+YhH+thQEp7bp+lVDAYuC7hxqScoyqVqhBi2nLJMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqpzvUJf0hnLUEZ1p0girRTiKxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMTJmOWNkMzYtMjBjYy0z OWFjLWE1YTUtYmUxOWRkMjliOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxikIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDlnvNEnyxZzaxlgnT5+7DmrX0nSAXZkGhYzH5eI+DQ/ZFtoq6qPJ1v 3Pm+Kjy9WTWOu+UqRnUkmeJD/+q6pn8DHLHHAq+b+OqcZHdxc9ofqWe+wGos94+d vlOpUKFPlOFkWt1PqkEArpuljSKxA01pNZyX+mYb4ZALFxwHv/qOHMaWCkOzpom/ I1xDO60swSD4AAw2jDSYUTGm0uS83QIW37mzdUgJYMvyymUsprBwfv/FnsxZGNe7 gtyTWMB8+A3nU1V5zRcaasJZPaW06h6uWGoDQxDUMS5LYAJf1ldXUSFj654IaGNL BBzASofn4Hd9dek9vlbXFATFYZ29WYM= -----END CERTIFICATE-----Generated at Mon Sep 21 02:26:50 2026 by rpki-client