$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa File: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (raw, json) Hash identifier: dMma2x10JqMGhKj7SahZzBW3gyxI6SLeIVTYJ81oBx8= Subject key identifier: 7E:BF:DD:84:00:C8:A3:97:60:C8:1F:B8:FC:AF:06:79:41:E0:50:D4 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584D667A499B2F5D16A87BAB5500 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 3359 IP address blocks: 142.244.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:49:9b:2f:5d:16:a8:7b:ab:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=cc053e3b-99e0-439f-9a72-104d52e62de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:66:24:e4:5e:a3:97:eb:49:12:97:f2:98: 26:8b:e5:bb:54:89:66:9f:a5:56:f3:03:a5:97:90: e8:37:ef:7e:52:a4:c9:15:26:e6:03:ab:08:e5:24: 6a:30:22:fd:48:26:ea:25:7a:90:cf:bb:75:c5:94: c9:79:b3:be:cb:d5:d8:e3:2f:49:53:64:24:29:a1: fe:a1:ca:08:29:36:43:fe:f0:5f:58:10:1d:fd:55: 7f:7e:c1:fc:52:b7:e2:11:d2:97:46:50:5f:15:da: 92:2b:d5:a5:d9:2e:a1:50:f8:5a:b5:c0:31:a3:94: d2:dc:13:11:2a:42:cd:32:f0:ae:54:38:60:95:fc: f3:4e:37:ad:f7:6a:b2:40:fa:81:8e:dc:75:ea:80: 10:61:7b:8f:06:93:0d:a4:71:6c:92:c9:c5:cd:ed: 1e:9b:3e:ab:2a:db:84:04:64:b0:71:9a:b5:fe:1a: 5a:5d:7a:98:49:54:29:7f:04:fe:19:be:6f:a8:15: 05:c7:53:5f:fc:a1:9b:ef:ba:fd:c0:eb:7d:db:f4: b5:4f:dd:f9:9d:0e:e5:b5:1a:64:b9:bf:f9:2e:78: c1:2a:85:44:07:0a:17:a3:75:8c:26:fd:af:7c:66: d0:f5:a1:8c:0e:af:72:10:c1:e5:13:40:00:5f:b4: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BF:DD:84:00:C8:A3:97:60:C8:1F:B8:FC:AF:06:79:41:E0:50:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/86f9e25e-c248-3933-9ce8-4e4b4097a657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 142.244.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:62:a9:97:80:af:5c:9e:fa:83:88:86:52:5d:5e:70:60:64: b6:b7:92:3e:08:9b:59:75:5a:65:ee:f3:17:70:6d:f8:2c:9b: ee:35:34:17:20:79:9b:69:cb:9a:d6:29:f2:4f:6a:6d:b7:ef: b4:52:e6:85:d0:cb:80:86:89:c2:0e:77:4d:27:0b:d1:75:c6: b5:ef:5f:02:77:6c:fc:10:9c:47:2e:2d:72:ae:26:3d:46:b5: e8:d0:13:3d:40:ae:b1:a1:9b:c7:5a:19:0b:ca:6d:2c:d0:f1: 2c:86:31:13:58:1e:33:ef:5e:c1:66:59:72:25:63:30:10:73: 59:cd:bc:ec:8f:fd:18:bd:58:b4:48:f9:c7:26:98:6c:39:6f: 81:79:2e:d4:05:3d:1e:bd:06:1a:cd:c8:ec:0e:4e:71:08:ec: 96:6b:10:a2:bb:bf:3b:61:79:ed:c7:9e:25:00:e9:22:60:98: 19:60:21:f7:d7:e8:07:e2:f2:23:09:a2:0b:cd:19:a1:30:88: dc:9c:e2:f3:1b:bb:26:d0:ef:4d:72:5d:80:44:ae:3e:4e:6e: 3d:b8:68:84:ae:44:6e:5b:0f:f0:dc:7f:f3:6a:bd:a7:bd:d5: bc:f3:a7:7e:60:84:8a:8a:5c:f6:0d:44:b1:87:15:0a:de:d1: 1f:98:e4:61 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1mekmbL10WqHurVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk Y2MwNTNlM2ItOTllMC00MzlmLTlhNzItMTA0ZDUyZTYyZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwBmJOReo5frSRKX8pgmi+W7VIlmn6VW8wOl l5DoN+9+UqTJFSbmA6sI5SRqMCL9SCbqJXqQz7t1xZTJebO+y9XY4y9JU2QkKaH+ ocoIKTZD/vBfWBAd/VV/fsH8UrfiEdKXRlBfFdqSK9Wl2S6hUPhatcAxo5TS3BMR KkLNMvCuVDhglfzzTjet92qyQPqBjtx16oAQYXuPBpMNpHFsksnFze0emz6rKtuE BGSwcZq1/hpaXXqYSVQpfwT+Gb5vqBUFx1Nf/KGb77r9wOt92/S1T935nQ7ltRpk ub/5LnjBKoVEBwoXo3WMJv2vfGbQ9aGMDq9yEMHlE0AAX7SJ7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH6/3YQAyKOXYMgfuPyvBnlB4FDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODZmOWUyNWUtYzI0OC0z OTMzLTljZTgtNGU0YjQwOTdhNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjvQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAGKpl4CvXJ76g4iGUl1ecGBktreSPgibWXVaZe7zF3Bt+Cyb7jU0FyB5 m2nLmtYp8k9qbbfvtFLmhdDLgIaJwg53TScL0XXGte9fAnds/BCcRy4tcq4mPUa1 6NATPUCusaGbx1oZC8ptLNDxLIYxE1geM+9ewWZZciVjMBBzWc287I/9GL1YtEj5 xyaYbDlvgXku1AU9Hr0GGs3I7A5OcQjslmsQoru/O2F57ceeJQDpImCYGWAh99fo B+LyIwmiC80ZoTCI3Jzi8xu7JtDvTXJdgESuPk5uPbhohK5EblsP8Nx/82q9p73V vPOnfmCEiopc9g1EsYcVCt7RH5jkYQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:47:34 2026 by rpki-client