$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa File: 8925c97f-3867-318e-826a-c92b028c6985.roa (raw, json) Hash identifier: 2ZjjB4NVoVzyDFjPRUg92jffgRErPfKpgJEtRj/V+j4= Subject key identifier: A6:5A:2F:65:31:49:33:9C:47:CA:46:AE:01:EB:0B:3A:9F:67:66:28 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D0A77A2FD522C2B4F76D4C900 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 216.139.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a2:fd:52:2c:2b:4f:76:d4:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=0b29d119-9f11-455b-9f20-43ca97725aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f0:64:c3:7b:b4:3e:97:f7:7d:cf:79:13:23: 63:8e:8d:57:77:0b:2b:d6:d6:c3:d0:a0:4f:35:9c: fe:1a:79:ca:61:c0:dc:b9:b0:f0:f8:b7:10:4e:0d: 6d:b2:78:27:60:5e:62:48:5d:68:a0:8a:61:16:9f: 92:be:7e:3d:e5:ff:bb:4a:0d:51:d3:ee:51:6c:e5: 7c:87:03:38:b9:b2:ea:ca:8f:08:f6:5c:44:ed:2e: ed:33:26:77:1f:ef:89:69:9b:5c:70:ad:21:cb:6e: 67:57:95:45:da:86:81:a0:ef:d5:ec:7a:44:ad:c5: 4e:ea:57:2e:94:e3:1f:be:7a:b0:99:1c:6c:a5:78: a0:89:68:dc:e7:00:76:1d:f6:36:b1:96:da:17:af: 20:cb:15:d5:70:70:c6:88:df:0c:18:1d:05:24:a7: 9f:7b:b6:d7:16:80:19:1f:26:64:2b:6d:26:36:4d: 67:99:07:ea:27:5a:11:58:b0:74:26:b8:c9:cb:c9: da:1b:de:52:f3:59:99:80:67:54:2d:b5:89:96:1e: 09:96:a4:50:17:6d:17:f4:b0:ad:d9:f0:56:e6:a1: 52:09:ae:c8:7e:56:83:07:14:1d:bc:2d:58:2b:ca: a5:88:18:07:2a:23:4d:f8:98:91:a8:fd:74:41:f4: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5A:2F:65:31:49:33:9C:47:CA:46:AE:01:EB:0B:3A:9F:67:66:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8925c97f-3867-318e-826a-c92b028c6985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:9a:6b:3c:dd:7f:ad:46:6a:d0:cd:a6:a8:44:50:7a:50:56: 42:73:7a:43:7f:0a:73:8b:f2:ea:aa:25:0f:92:3d:bb:86:21: 6e:64:d2:e9:2f:25:94:2d:68:e7:86:b4:db:bc:61:94:94:e6: 1e:26:e9:89:60:ed:35:d4:91:bb:9e:b6:1a:9b:1e:63:e7:37: 51:e5:ba:5c:d6:bb:2b:a0:13:99:d9:40:1e:33:fd:24:20:08: c0:06:cf:66:be:93:75:c8:b4:fc:87:0d:38:7a:10:e1:f4:31: cf:26:cb:52:7f:f9:f5:ff:a1:f7:b0:5e:bc:1b:c9:9c:80:f8: a2:b8:4b:86:c1:8c:b7:93:a8:a5:f0:f4:2b:ab:d4:b4:d7:f1: 7b:51:74:1a:ae:56:eb:ef:8c:df:ed:10:5e:d5:d8:9d:14:53: 3c:e6:9e:2d:0d:a1:45:02:f8:76:7c:f2:5d:1f:a9:d9:c4:38: da:a4:54:42:c5:10:d3:ef:99:fe:cd:c0:9a:ef:86:ba:73:b1: c7:dd:f9:70:d6:23:e8:be:f8:20:97:44:e0:97:97:25:bb:f1: b6:ae:d5:de:da:c0:52:98:8b:eb:7e:ad:45:2d:c4:21:ad:b9: e8:57:95:99:fc:19:62:5a:be:cd:e0:6e:47:3e:a6:b4:c6:4c: ae:7a:90:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6L9UiwrT3bUyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MGIyOWQxMTktOWYxMS00NTViLTlmMjAtNDNjYTk3NzI1YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfBkw3u0Ppf3fc95EyNjjo1Xdwsr1tbD0KBP NZz+GnnKYcDcubDw+LcQTg1tsngnYF5iSF1ooIphFp+Svn495f+7Sg1R0+5RbOV8 hwM4ubLqyo8I9lxE7S7tMyZ3H++JaZtccK0hy25nV5VF2oaBoO/V7HpErcVO6lcu lOMfvnqwmRxspXigiWjc5wB2HfY2sZbaF68gyxXVcHDGiN8MGB0FJKefe7bXFoAZ HyZkK20mNk1nmQfqJ1oRWLB0JrjJy8naG95S81mZgGdULbWJlh4JlqRQF20X9LCt 2fBW5qFSCa7IflaDBxQdvC1YK8qliBgHKiNN+JiRqP10QfTQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZaL2UxSTOcR8pGrgHrCzqfZ2YoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvODkyNWM5N2YtMzg2Ny0z MThlLTgyNmEtYzkyYjAyOGM2OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ItUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWaazzdf61GatDNpqhEUHpQVkJzekN/CnOL8uqqJQ+SPbuGIW5k0ukv JZQtaOeGtNu8YZSU5h4m6Ylg7TXUkbuethqbHmPnN1HlulzWuyugE5nZQB4z/SQg CMAGz2a+k3XItPyHDTh6EOH0Mc8my1J/+fX/ofewXrwbyZyA+KK4S4bBjLeTqKXw 9Cur1LTX8XtRdBquVuvvjN/tEF7V2J0UUzzmni0NoUUC+HZ88l0fqdnEONqkVELF ENPvmf7NwJrvhrpzscfd+XDWI+i++CCXROCXlyW78bau1d7awFKYi+t+rUUtxCGt uehXlZn8GWJavs3gbkc+prTGTK56kO4= -----END CERTIFICATE-----Generated at Thu Mar 19 12:34:07 2026 by rpki-client