$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/4bd87949-f415-39b3-9d62-cda131cadecc.roa File: 4bd87949-f415-39b3-9d62-cda131cadecc.roa (raw, json) Hash identifier: psX3/138cC00b8nzynHBwT5TbdWsq+NNs8BXpqqhC6M= Subject key identifier: 46:B4:B4:D5:3F:E2:CD:C6:93:53:94:90:BC:AF:3C:58:55:79:D1:E5 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584D55BCB7BBD8119FBE87B4D400 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/4bd87949-f415-39b3-9d62-cda131cadecc.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 3359 IP address blocks: 198.73.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b7:bb:d8:11:9f:be:87:b4:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=329e9bc3-ceb0-491c-bb65-246cbfee93af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:aa:4c:e3:f7:b4:68:e5:ed:2f:9e:42:1a: bf:7e:4a:dd:6e:a3:75:d7:6d:8d:f1:80:29:20:b4: 65:79:4b:7d:9b:cc:9f:02:4f:8e:5f:bc:de:be:c9: 0f:04:be:3c:9a:7e:c7:c4:5b:fa:e5:8b:32:a0:1c: dd:31:4a:b9:a3:e2:55:fb:fc:b3:55:c7:57:85:f5: ac:2e:fd:d6:f6:c6:20:af:28:e8:55:c8:2f:45:3f: fa:98:57:8e:ce:84:d6:9b:0a:66:ce:7c:06:9a:ae: 36:3d:38:c7:a1:b2:68:1a:95:86:0d:37:ab:81:07: 06:66:c6:6c:78:59:20:75:5d:43:da:d5:64:4e:43: 00:81:db:62:87:e3:74:9f:40:07:ec:7c:6c:01:f5: 7e:9b:ae:d8:73:83:13:b3:81:0b:78:e3:34:3a:39: 44:9a:7f:00:03:9a:cd:eb:e2:d4:f2:08:ce:38:b0: fc:29:5d:30:74:79:de:9f:b7:7b:16:25:61:c1:55: 5a:3d:a0:58:68:af:50:b3:8f:25:bc:de:59:6a:ec: 1c:ba:56:b5:10:bc:c5:4b:80:a2:3e:14:71:18:ac: e9:42:a5:16:37:80:57:e0:ad:da:76:33:06:4b:89: 59:eb:45:45:33:75:14:e1:ac:60:bb:70:73:9d:9d: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B4:B4:D5:3F:E2:CD:C6:93:53:94:90:BC:AF:3C:58:55:79:D1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/4bd87949-f415-39b3-9d62-cda131cadecc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 198.73.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a6:09:4f:eb:40:28:89:ce:74:f4:6a:d0:65:80:1c:79:14: db:44:4b:42:6a:60:32:eb:26:50:ac:ab:93:d9:01:14:d4:15: 7e:f9:e0:b9:e8:0f:34:e1:7e:6c:d8:f9:7e:d0:68:3f:9e:fc: 1b:a8:bb:70:20:b1:c1:d7:9f:d8:d5:b5:f2:db:3e:ea:df:7d: b5:1a:0f:09:18:29:66:ac:e6:4d:ed:6e:4c:3b:3e:87:ac:88: 82:09:8b:28:df:86:e4:10:3a:d7:de:76:a0:8a:00:5e:d5:10: c7:72:0e:ac:65:d0:24:09:ac:e0:26:16:b0:13:84:fc:8c:27: 85:e7:7a:48:12:91:65:9e:e7:64:31:a3:0e:06:d3:03:ef:c5: 50:d1:0e:66:b5:37:6c:15:d5:df:95:8d:b9:bb:5a:7f:c8:3f: 9e:2b:4f:6c:3d:53:5e:64:17:8a:79:a0:73:04:28:58:34:a6: f2:6d:d4:d1:1e:1d:61:d8:4f:34:68:73:f3:82:2a:0d:b3:e5: ef:31:c3:30:ab:b5:af:71:3a:64:01:b5:71:c6:c5:c5:94:42: e2:b0:e0:a7:3a:11:4a:8a:3a:0d:7a:c7:45:9d:27:ff:82:80: 2d:c9:e5:27:7c:2d:3e:08:c2:73:ad:ee:d3:48:40:f7:35:28: 2c:48:fa:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLe72BGfvoe01AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MzI5ZTliYzMtY2ViMC00OTFjLWJiNjUtMjQ2Y2JmZWU5M2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVOqTOP3tGjl7S+eQhq/fkrdbqN1122N8YAp ILRleUt9m8yfAk+OX7zevskPBL48mn7HxFv65YsyoBzdMUq5o+JV+/yzVcdXhfWs Lv3W9sYgryjoVcgvRT/6mFeOzoTWmwpmznwGmq42PTjHobJoGpWGDTergQcGZsZs eFkgdV1D2tVkTkMAgdtih+N0n0AH7HxsAfV+m67Yc4MTs4ELeOM0OjlEmn8AA5rN 6+LU8gjOOLD8KV0wdHnen7d7FiVhwVVaPaBYaK9Qs48lvN5Zauwcula1ELzFS4Ci PhRxGKzpQqUWN4BX4K3adjMGS4lZ60VFM3UU4axgu3BznZ0v4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa0tNU/4s3Gk1OUkLyvPFhVedHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvNGJkODc5NDktZjQxNS0z OWIzLTlkNjItY2RhMTMxY2FkZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkmxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImmCU/rQCiJznT0atBlgBx5FNtES0JqYDLrJlCsq5PZARTUFX754Lno DzThfmzY+X7QaD+e/Buou3AgscHXn9jVtfLbPurffbUaDwkYKWas5k3tbkw7Poes iIIJiyjfhuQQOtfedqCKAF7VEMdyDqxl0CQJrOAmFrAThPyMJ4XnekgSkWWe52Qx ow4G0wPvxVDRDma1N2wV1d+Vjbm7Wn/IP54rT2w9U15kF4p5oHMEKFg0pvJt1NEe HWHYTzRoc/OCKg2z5e8xwzCrta9xOmQBtXHGxcWUQuKw4Kc6EUqKOg16x0WdJ/+C gC3J5Sd8LT4IwnOt7tNIQPc1KCxI+iQ= -----END CERTIFICATE-----Generated at Fri Apr 17 17:56:01 2026 by rpki-client