$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa File: 24ff25e6-fb53-31cd-9980-92a2e33cb078.roa (raw, json) Hash identifier: zs2cYyvnfwmbCnxWBVuIM0Om77UazbGbF+m+A3VhAu8= Subject key identifier: 26:05:13:1C:D5:7A:C2:C8:BA:CA:5C:20:4E:87:37:A6:67:DF:B5:06 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584D55BA2D99934D923285A10100 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 3359 IP address blocks: 198.73.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:2d:99:93:4d:92:32:85:a1:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0c193003-9cbd-4ba3-9726-2708f64ace74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:bd:e3:20:83:69:2a:ae:d4:19:93:c0:d3: d1:98:1b:70:aa:62:ea:21:33:b6:27:23:1e:71:7a: 02:9a:a5:7c:a8:90:b5:62:68:9f:eb:3f:aa:ae:6b: 9d:2f:96:ff:7a:41:6e:9c:ed:27:ab:a3:33:fe:85: 20:98:b7:04:7b:36:97:a1:36:86:64:dc:9d:24:a6: f6:88:0c:70:c4:88:f8:a9:fc:5c:74:2a:5f:77:14: cf:7c:38:8b:21:2d:fb:f6:c2:c4:5a:fb:0e:5a:5c: d0:f1:cd:18:6a:b5:7a:18:3b:b5:d0:b8:cf:fc:0c: 47:53:62:e1:ba:1f:e8:d6:4e:db:e9:10:bc:c2:b4: 69:f0:47:65:ea:b9:7a:05:67:a9:dd:00:76:5c:97: e6:22:a4:d6:b4:01:11:4e:c4:31:ca:d1:93:84:2d: 38:2c:ea:13:5d:e4:e5:11:d9:51:e5:2f:26:10:34: ae:91:68:31:76:4d:92:f6:a3:c5:ba:64:be:42:d4: 9c:5e:6f:79:c3:44:70:68:4f:58:9e:40:a3:1a:4d: a8:77:47:0c:2f:4a:45:e9:b6:bc:f5:01:44:ba:73: 87:6e:f9:e6:8b:70:51:56:f3:d1:76:67:34:ff:bc: a4:cc:e7:5c:6e:fa:80:15:21:dd:a2:03:76:4b:8d: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:05:13:1C:D5:7A:C2:C8:BA:CA:5C:20:4E:87:37:A6:67:DF:B5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/24ff25e6-fb53-31cd-9980-92a2e33cb078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 198.73.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d4:35:02:a8:4d:35:9b:59:c5:0e:d4:04:25:4f:aa:d3:59: 72:e0:5c:37:7d:bd:51:dd:58:2f:c3:9a:11:d7:9f:01:18:ec: de:6d:4c:81:f1:89:e6:46:55:de:23:e0:40:e5:dd:ac:3f:8a: 2c:09:55:88:64:a9:d2:4f:d6:fc:c5:03:c6:e0:b5:8a:5f:c5: 2e:90:82:ea:82:b9:c8:cc:6d:b3:7f:62:96:85:a5:ff:05:bd: f7:11:91:b5:02:bf:49:a7:43:d6:bc:17:a1:ad:32:b3:6c:38: b5:8d:9b:ae:04:03:e0:a4:a8:0a:8d:34:c3:a7:cf:88:ac:a9: 7d:cd:f1:fd:69:3c:b3:57:be:45:c5:36:d0:24:32:ad:84:12: 50:45:5f:f9:29:94:fb:10:c4:61:08:b7:ea:21:1f:79:59:80: 5d:c2:84:f6:c1:7b:0d:3f:95:31:5f:5f:f8:ad:6e:be:61:ec: 63:9f:d1:b2:aa:b4:5f:08:e2:4c:cc:2b:78:2b:0b:96:ab:de: 11:6e:2b:c6:7d:a1:85:37:16:5e:88:6c:3b:9f:e3:0c:2d:e8: bb:4f:36:ec:c4:ff:59:a6:00:ae:a1:df:e9:4b:f8:2a:c0:26: 7a:cd:ce:a0:f4:c8:b3:2d:ae:1a:08:4b:38:aa:32:d1:44:f5: 33:09:ee:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vui2Zk02SMoWhAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MGMxOTMwMDMtOWNiZC00YmEzLTk3MjYtMjcwOGY2NGFjZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4+94yCDaSqu1BmTwNPRmBtwqmLqITO2JyMe cXoCmqV8qJC1Ymif6z+qrmudL5b/ekFunO0nq6Mz/oUgmLcEezaXoTaGZNydJKb2 iAxwxIj4qfxcdCpfdxTPfDiLIS379sLEWvsOWlzQ8c0YarV6GDu10LjP/AxHU2Lh uh/o1k7b6RC8wrRp8Edl6rl6BWep3QB2XJfmIqTWtAERTsQxytGThC04LOoTXeTl EdlR5S8mEDSukWgxdk2S9qPFumS+QtScXm95w0RwaE9YnkCjGk2od0cML0pF6ba8 9QFEunOHbvnmi3BRVvPRdmc0/7ykzOdcbvqAFSHdogN2S40o/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYFExzVesLIuspcIE6HN6Zn37UGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvMjRmZjI1ZTYtZmI1My0z MWNkLTk5ODAtOTJhMmUzM2NiMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHUNQKoTTWbWcUO1AQlT6rTWXLgXDd9vVHdWC/DmhHXnwEY7N5tTIHx ieZGVd4j4EDl3aw/iiwJVYhkqdJP1vzFA8bgtYpfxS6QguqCucjMbbN/YpaFpf8F vfcRkbUCv0mnQ9a8F6GtMrNsOLWNm64EA+CkqAqNNMOnz4isqX3N8f1pPLNXvkXF NtAkMq2EElBFX/kplPsQxGEIt+ohH3lZgF3ChPbBew0/lTFfX/itbr5h7GOf0bKq tF8I4kzMK3grC5ar3hFuK8Z9oYU3Fl6IbDuf4wwt6LtPNuzE/1mmAK6h3+lL+CrA JnrNzqD0yLMtrhoISziqMtFE9TMJ7tw= -----END CERTIFICATE-----Generated at Fri Apr 17 17:49:07 2026 by rpki-client