$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a8664f5d-8c20-3fed-bfb0-15055b5f7ad6.roa File: a8664f5d-8c20-3fed-bfb0-15055b5f7ad6.roa (raw, json) Hash identifier: l6B0bHa5jviD7VgCwnfuK89x4w6BdPDWc3dxlnvOFS4= Subject key identifier: 41:EE:98:5F:17:D5:FC:0E:1A:A6:62:CF:E3:53:7A:76:2D:5A:AA:79 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584F0D91ADACC8F550397E7D0740 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a8664f5d-8c20-3fed-bfb0-15055b5f7ad6.roa Signing time: Thu 03 Sep 2026 14:14:29 +0000 ROA not before: Thu 03 Sep 2026 14:14:29 +0000 ROA not after: Wed 02 Dec 2026 15:14:29 +0000 asID: 36692 IP address blocks: 162.210.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:91:ad:ac:c8:f5:50:39:7e:7d:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Sep 3 14:14:29 2026 GMT Not After : Dec 2 15:14:29 2026 GMT Subject: CN=86fe3963-7019-423c-9bfa-ac5e0063506f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:fb:40:1c:ba:94:b2:df:d2:9e:9d:3d:71: 7a:f3:30:93:da:48:71:cb:cf:73:ec:01:4d:65:03: 06:77:a8:de:a9:26:fb:73:72:7c:cc:ef:cf:c6:09: 1d:93:db:65:47:98:e2:b4:40:94:ee:d1:9b:86:20: e0:77:5c:29:ad:0a:59:36:fe:2e:47:ec:53:fb:47: c4:d1:3f:49:f1:1b:a4:a4:49:13:68:8c:84:c7:86: 21:e6:ba:d6:33:4d:47:73:01:d5:a2:d8:20:fc:77: f1:7d:08:f7:65:80:be:b9:3b:92:c9:7a:60:b9:25: ba:08:a5:74:3a:35:a2:04:f0:1f:69:c7:0a:28:2d: 74:d1:b9:a0:41:b2:b0:bf:14:3e:5c:52:0f:96:35: 7a:1e:99:ff:c6:28:aa:70:d4:dd:73:88:82:7a:4b: cf:5e:cd:d0:83:5b:19:7b:01:5b:64:58:86:60:ba: 84:d5:68:23:8c:a5:56:13:3d:85:fb:c7:62:3a:6b: 37:cf:d5:ac:7b:e6:6e:1d:1c:29:43:f6:12:4c:77: 56:54:d5:8f:7a:9b:88:3e:a2:a3:a6:94:76:12:3a: 9f:4b:07:59:44:39:70:5d:94:fe:9e:e0:0b:ef:fd: 75:3d:06:e7:ee:e9:30:39:9c:e0:36:57:95:74:67: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EE:98:5F:17:D5:FC:0E:1A:A6:62:CF:E3:53:7A:76:2D:5A:AA:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a8664f5d-8c20-3fed-bfb0-15055b5f7ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 162.210.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:fd:c9:89:3a:9c:e3:de:06:7c:09:93:ee:29:cc:7e:b8:b7: e1:de:4f:8d:63:0c:08:a7:69:74:af:92:31:40:57:29:98:a3: fd:b1:70:e1:33:bf:3f:87:84:aa:2d:ff:cb:49:5c:e2:d6:39: 4a:85:78:3c:6e:22:81:90:4b:d4:06:36:93:7c:d6:17:31:ff: 07:15:cc:b5:27:c7:f9:30:e6:f6:8a:b1:1f:af:6f:8a:76:2d: c3:7c:1c:ba:3b:d6:bb:6e:3b:1f:7c:51:f5:fb:e5:67:7d:1e: 49:ec:9c:33:41:bc:fd:8b:1a:23:1b:bb:81:a7:8b:3e:3d:0f: 84:00:7b:e9:36:b7:20:89:ac:6c:34:bc:02:4e:e8:85:74:08: 03:c2:cb:bb:ee:b5:dc:ae:3a:eb:1a:bd:aa:01:71:a2:e0:df: 30:52:22:95:03:1f:2b:3c:7d:d3:36:32:96:b9:89:26:43:50: 03:e3:ac:c6:48:7e:aa:e0:1b:44:59:4d:fa:14:39:1e:c4:e2: fc:eb:0c:ca:aa:ac:3c:99:e9:41:f7:03:9f:30:c2:da:0d:b7: 2f:d4:e6:fc:7b:d2:aa:21:a3:3f:b9:a9:ff:a7:b9:ba:e2:6e: 10:b5:eb:67:72:ad:67:15:63:59:e7:2b:4e:8e:a5:13:1c:4b: e7:5b:e3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Nka2syPVQOX59B0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDkwMzE0MTQyOVoXDTI2MTIwMjE1MTQyOVowLzEtMCsGA1UEAxMk ODZmZTM5NjMtNzAxOS00MjNjLTliZmEtYWM1ZTAwNjM1MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31j7QBy6lLLf0p6dPXF68zCT2khxy89z7AFN ZQMGd6jeqSb7c3J8zO/Pxgkdk9tlR5jitECU7tGbhiDgd1wprQpZNv4uR+xT+0fE 0T9J8RukpEkTaIyEx4Yh5rrWM01HcwHVotgg/HfxfQj3ZYC+uTuSyXpguSW6CKV0 OjWiBPAfaccKKC100bmgQbKwvxQ+XFIPljV6Hpn/xiiqcNTdc4iCekvPXs3Qg1sZ ewFbZFiGYLqE1WgjjKVWEz2F+8diOms3z9Wse+ZuHRwpQ/YSTHdWVNWPepuIPqKj ppR2EjqfSwdZRDlwXZT+nuAL7/11PQbn7ukwOZzgNleVdGfOIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHumF8X1fwOGqZiz+NTenYtWqp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvYTg2NjRmNWQtOGMyMC0z ZmVkLWJmYjAtMTUwNTViNWY3YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotJXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr9yYk6nOPeBnwJk+4pzH64t+HeT41jDAinaXSvkjFAVymYo/2xcOEz vz+HhKot/8tJXOLWOUqFeDxuIoGQS9QGNpN81hcx/wcVzLUnx/kw5vaKsR+vb4p2 LcN8HLo71rtuOx98UfX75Wd9HknsnDNBvP2LGiMbu4Gniz49D4QAe+k2tyCJrGw0 vAJO6IV0CAPCy7vutdyuOusavaoBcaLg3zBSIpUDHys8fdM2Mpa5iSZDUAPjrMZI fqrgG0RZTfoUOR7E4vzrDMqqrDyZ6UH3A58wwtoNty/U5vx70qohoz+5qf+nubri bhC162dyrWcVY1nnK06OpRMcS+db40A= -----END CERTIFICATE-----Generated at Mon Sep 21 12:38:53 2026 by rpki-client