$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa File: 33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa (raw, json) Hash identifier: ERD9w2V9RRs0a7GapBRBANO62x09ScVEZDt1gw0Ac40= Subject key identifier: 86:48:3F:90:81:EB:96:27:9B:1F:89:B0:9D:40:FF:5F:B0:B0:E2:55 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584B477C797A800D651D756ED380 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 16509 IP address blocks: 108.179.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:79:7a:80:0d:65:1d:75:6e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=794a3bf4-e69a-40e1-84f2-8b0c8a652bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:06:fe:d9:6e:7d:3c:c2:b1:f0:0e:82:97:d7: a8:90:1a:12:07:60:06:e5:18:b5:ac:34:c1:10:3f: 41:38:fe:57:9a:4f:01:99:c0:32:f1:1a:64:45:7e: ff:34:2f:a0:1a:96:60:84:fb:7f:58:e0:30:ca:d4: 85:27:a1:3d:4b:23:9e:80:98:5c:36:c6:91:94:58: fa:dc:d1:70:c8:79:73:d2:31:05:9e:fc:12:3a:d2: 4d:d7:6b:23:53:2f:d9:c2:51:c8:da:07:11:ba:5f: 3b:f8:6b:bf:8f:4f:23:d8:df:28:da:00:e7:0e:94: 6d:1e:53:18:b3:a4:0a:4e:e6:46:df:3c:b7:e6:19: 47:00:8e:fa:d9:d7:39:fb:15:06:97:3a:48:16:1a: c1:9b:66:92:62:af:a5:71:fa:7d:e6:53:dc:49:e5: 2b:de:91:00:cc:53:b2:df:25:b6:1d:42:c7:fa:95: 12:08:e7:7b:48:b8:03:b3:c9:9a:9f:82:71:1c:f0: 28:6a:d6:6a:c6:5e:c3:82:84:33:96:06:26:54:fb: 2a:fb:98:47:95:83:a9:aa:7d:da:23:d9:7c:55:99: 5d:1e:4a:bb:69:4b:d0:74:64:7e:ef:bd:ac:4f:6c: 55:1c:98:b8:bd:ba:08:ef:21:9c:cb:a5:e5:3d:d1: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:48:3F:90:81:EB:96:27:9B:1F:89:B0:9D:40:FF:5F:B0:B0:E2:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 108.179.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:8f:09:3d:b6:d7:54:3c:08:fe:00:41:2f:06:db:85:8d:25: 8a:43:4a:b0:97:1e:f8:d7:b0:9a:41:f1:c3:a8:87:56:c1:92: ce:1d:8e:54:84:70:38:f3:88:8e:48:97:eb:a4:3f:f9:fd:df: 69:6b:b2:36:c0:62:5d:49:ad:b2:c9:7d:ce:cf:35:0b:f2:42: 8f:33:82:c1:ac:38:b4:70:4d:5f:25:30:b5:fe:3f:42:00:82: 63:0c:a9:ea:81:25:81:3d:70:f7:5e:87:9d:e8:53:fb:77:5c: d3:1f:ad:14:e6:fb:67:b0:66:ed:eb:89:6e:3f:00:1a:99:9a: 9f:ad:65:ad:2f:1d:71:b7:87:39:77:29:e4:5d:a4:2d:1e:09: 50:db:a3:d3:6a:92:4e:46:da:79:4d:62:d7:8a:5d:94:75:e6: b3:93:83:56:21:54:5f:9f:f6:c9:8c:41:ab:9f:cd:40:06:e0: ea:03:58:2e:bb:e9:1b:8b:73:fb:41:57:25:d5:b3:8b:48:91: 7f:b1:e8:9c:33:15:83:78:15:7e:56:e5:bc:2a:e9:67:4b:7e: 02:ad:e3:7c:7a:7d:40:56:c9:e2:9e:9a:18:44:66:e6:f0:da: cd:25:57:82:de:f1:1a:72:56:22:43:30:b3:a2:c6:0b:18:01: 47:63:eb:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHl6gA1lHXVu04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk Nzk0YTNiZjQtZTY5YS00MGUxLTg0ZjItOGIwYzhhNjUyYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAb+2W59PMKx8A6Cl9eokBoSB2AG5Ri1rDTB ED9BOP5Xmk8BmcAy8RpkRX7/NC+gGpZghPt/WOAwytSFJ6E9SyOegJhcNsaRlFj6 3NFwyHlz0jEFnvwSOtJN12sjUy/ZwlHI2gcRul87+Gu/j08j2N8o2gDnDpRtHlMY s6QKTuZG3zy35hlHAI762dc5+xUGlzpIFhrBm2aSYq+lcfp95lPcSeUr3pEAzFOy 3yW2HULH+pUSCOd7SLgDs8man4JxHPAoatZqxl7DgoQzlgYmVPsq+5hHlYOpqn3a I9l8VZldHkq7aUvQdGR+772sT2xVHJi4vboI7yGcy6XlPdFYfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZIP5CB65Ynmx+JsJ1A/1+wsOJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMzNjZDNiYTktNWNiZS0z Y2Y1LTk4OWMtMjRmNDAzYzYyZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbLOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqPCT2211Q8CP4AQS8G24WNJYpDSrCXHvjXsJpB8cOoh1bBks4djlSE cDjziI5Il+ukP/n932lrsjbAYl1JrbLJfc7PNQvyQo8zgsGsOLRwTV8lMLX+P0IA gmMMqeqBJYE9cPdeh53oU/t3XNMfrRTm+2ewZu3riW4/ABqZmp+tZa0vHXG3hzl3 KeRdpC0eCVDbo9Nqkk5G2nlNYteKXZR15rOTg1YhVF+f9smMQaufzUAG4OoDWC67 6RuLc/tBVyXVs4tIkX+x6JwzFYN4FX5W5bwq6WdLfgKt43x6fUBWyeKemhhEZubw 2s0lV4Le8RpyViJDMLOixgsYAUdj61s= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:36 2025 by rpki-client