$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89161c9f-7576-340c-92cc-dae1572d9734.roa File: 89161c9f-7576-340c-92cc-dae1572d9734.roa (raw, json) Hash identifier: J2GWnJMxpcQiRsx6Jx4Kqip4UUb6+HROiWtJ0IH/UKo= Subject key identifier: 49:BF:DD:02:11:4A:69:1D:D8:30:D2:7E:D4:C7:46:2F:76:17:98:CB Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F093CCD6E5C0658C0DE9DF080 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89161c9f-7576-340c-92cc-dae1572d9734.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 150.230.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:cd:6e:5c:06:58:c0:de:9d:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=2d25dcb2-80e6-4794-9168-7e8c0bf23bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:47:e5:e6:c8:b6:80:99:a7:03:dc:72:63: 03:ac:32:aa:92:1b:84:3c:78:e9:1c:8c:9b:22:74: 6c:04:ae:61:99:2d:39:47:79:c5:19:8d:59:ad:f0: 10:6c:71:05:99:b0:52:5b:d8:ee:b3:31:80:a9:a5: 0e:c4:c6:8b:1f:2b:30:a3:e1:26:7c:5b:af:94:f9: cf:f2:14:78:0f:c7:ca:e7:e7:8c:1e:1e:1d:09:09: 60:51:74:df:ca:9d:f6:8c:8a:5d:e5:d8:4e:89:8c: 4c:89:2d:a9:59:51:11:c6:e2:be:ec:b9:dd:e5:0b: b4:f9:15:0b:ad:80:f0:75:33:14:e7:d7:f5:f8:b6: d1:6d:ac:ab:6d:eb:55:45:d4:8a:58:77:e6:ec:61: 66:0e:cc:3c:b5:1a:b2:20:02:d8:d1:75:bf:ff:1d: 8d:bd:bb:28:af:f2:c6:7b:a3:7f:06:94:aa:56:08: 85:6c:6f:a7:af:80:aa:09:0d:e9:93:47:ef:e3:69: e8:15:86:dc:7c:46:81:d6:ac:71:5a:c3:d8:29:fe: c7:e5:fa:12:9a:d1:37:b7:ae:c7:fe:f9:fd:f4:64: d3:9b:59:58:8c:e4:fa:4d:19:ed:c3:17:cf:b8:78: 46:d2:10:25:fd:59:39:25:48:97:20:a1:cc:c5:9c: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BF:DD:02:11:4A:69:1D:D8:30:D2:7E:D4:C7:46:2F:76:17:98:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/89161c9f-7576-340c-92cc-dae1572d9734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 150.230.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:97:07:58:71:e1:a8:98:66:9e:bd:db:b5:3c:cd:76:53:5c: 4f:a5:7f:56:22:34:d7:5e:6b:78:96:99:c5:cb:d8:70:f3:df: 0f:6b:24:ed:35:14:2a:9d:da:e9:b7:5f:5a:ca:65:a6:fb:82: e5:98:6d:57:a0:87:33:bf:20:cb:55:f3:75:70:8c:1b:4c:0b: d8:05:44:c3:f9:7c:81:9f:a5:f6:e3:5f:70:21:3a:89:aa:8d: 2d:22:25:23:12:ab:20:b4:07:1b:0a:3d:1e:8a:82:57:e8:f7: 49:c4:25:be:f0:b1:42:65:d1:fb:95:e3:40:57:37:e8:db:fe: 5b:46:23:6b:d8:39:ed:98:78:82:92:9b:f1:a7:92:74:e7:03: 3a:6d:f9:88:6f:4e:fa:7e:63:9f:70:9f:f1:1e:02:04:4f:4b: 64:18:ad:7f:dc:26:a4:dd:b3:04:e1:12:4c:16:15:2f:b5:17: e3:cb:4a:ec:77:5e:5e:42:e5:d5:b0:d0:ad:9e:d2:9a:58:6b: e8:fc:80:7e:e2:f6:68:8b:ea:18:b2:50:9f:c4:1b:45:2c:57: bd:ee:4b:00:62:0f:66:88:31:e5:7e:d1:57:66:71:97:5f:e2: ec:49:ff:83:20:b7:93:bf:2e:de:30:eb:2c:5b:fe:57:3c:04: 00:01:e7:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPM1uXAZYwN6d8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MmQyNWRjYjItODBlNi00Nzk0LTkxNjgtN2U4YzBiZjIzYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzpH5ebItoCZpwPccmMDrDKqkhuEPHjpHIyb InRsBK5hmS05R3nFGY1ZrfAQbHEFmbBSW9juszGAqaUOxMaLHyswo+EmfFuvlPnP 8hR4D8fK5+eMHh4dCQlgUXTfyp32jIpd5dhOiYxMiS2pWVERxuK+7Lnd5Qu0+RUL rYDwdTMU59f1+LbRbayrbetVRdSKWHfm7GFmDsw8tRqyIALY0XW//x2Nvbsor/LG e6N/BpSqVgiFbG+nr4CqCQ3pk0fv42noFYbcfEaB1qxxWsPYKf7H5foSmtE3t67H /vn99GTTm1lYjOT6TRntwxfPuHhG0hAl/Vk5JUiXIKHMxZwQ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm/3QIRSmkd2DDSftTHRi92F5jLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvODkxNjFjOWYtNzU3Ni0z NDBjLTkyY2MtZGFlMTU3MmQ5NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlubwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2XB1hx4aiYZp6927U8zXZTXE+lf1YiNNdea3iWmcXL2HDz3w9rJO01 FCqd2um3X1rKZab7guWYbVeghzO/IMtV83VwjBtMC9gFRMP5fIGfpfbjX3AhOomq jS0iJSMSqyC0BxsKPR6Kglfo90nEJb7wsUJl0fuV40BXN+jb/ltGI2vYOe2YeIKS m/GnknTnAzpt+YhvTvp+Y59wn/EeAgRPS2QYrX/cJqTdswThEkwWFS+1F+PLSux3 Xl5C5dWw0K2e0ppYa+j8gH7i9miL6hiyUJ/EG0UsV73uSwBiD2aIMeV+0VdmcZdf 4uxJ/4Mgt5O/Lt4w6yxb/lc8BAAB57k= -----END CERTIFICATE-----Generated at Tue Sep 22 20:47:18 2026 by rpki-client