$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dfe64f54-2057-3893-aeb2-24d25179844e.roa File: dfe64f54-2057-3893-aeb2-24d25179844e.roa (raw, json) Hash identifier: iLxY/DBJ3IHkTafbAP9MZY0j4PqMdCKcO/psFsD+FzU= Subject key identifier: DD:D4:A5:85:4E:CC:C6:46:8F:D1:AB:06:D4:B4:C4:F4:62:A4:C4:68 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D8C2AADAF881307F977873C80 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dfe64f54-2057-3893-aeb2-24d25179844e.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 216.139.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:ad:af:88:13:07:f9:77:87:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=966765d2-d80e-449a-bef8-c20d894a5120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ba:ae:00:79:02:32:4f:21:4f:fb:55:30:cd: 4d:0a:a0:54:8d:f5:fb:04:50:5d:31:8c:d6:ff:c3: 43:b0:13:cd:f1:f3:4d:a9:dc:83:00:0f:08:26:3f: bb:38:b7:d9:df:c1:0b:c9:2f:bf:71:a3:82:ca:f3: 1a:80:86:be:a7:66:9c:a7:8b:08:85:13:3c:b8:d2: ce:6d:20:88:e9:2d:68:90:35:2f:22:66:65:b8:5a: 35:52:2c:32:40:63:ee:7a:b1:ec:9d:6a:16:27:8a: 3d:f9:47:31:de:79:de:9a:bb:4e:0b:8f:61:4c:dd: ac:09:d2:2a:51:dd:83:3a:16:2e:f1:81:bc:5a:2f: 37:03:24:f8:c4:47:9d:8e:28:35:b8:c2:bd:59:cb: 1f:70:f7:3e:07:63:ea:6b:70:24:fa:16:ba:f8:b4: 0c:84:b4:5a:f2:3a:ca:fa:be:a6:d6:24:71:dc:74: 08:54:f9:51:6e:27:d2:f4:8b:9e:76:83:b2:58:8f: b6:f0:0f:e5:b1:f8:73:88:de:35:a2:4f:5f:2e:a8: 2c:80:5c:4a:fa:82:08:bd:d8:4e:89:ac:14:9f:b0: 0e:e8:93:d9:4a:6c:0b:5b:15:2d:73:77:07:80:08: 97:89:4e:88:16:60:a0:52:d2:79:24:e2:be:f5:8b: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:A5:85:4E:CC:C6:46:8F:D1:AB:06:D4:B4:C4:F4:62:A4:C4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/dfe64f54-2057-3893-aeb2-24d25179844e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:01:11:b2:9b:6f:ba:90:4f:7f:2c:ac:b4:3b:d3:e0:82:d3: d5:fb:47:28:ff:6f:d0:0b:8a:f7:fb:c1:94:ee:d6:e9:bd:9c: d8:a0:7a:87:2c:34:3b:f4:39:d4:e8:8e:c8:60:93:5f:a9:96: e0:e4:70:35:4a:40:3b:fe:b1:de:f8:15:41:6a:37:36:26:b7: 06:20:cc:52:80:9b:f4:ea:db:25:33:c0:ed:fc:1c:c8:11:9b: 55:11:3c:15:e6:79:5c:0b:d8:88:84:6d:06:e8:a7:4f:a4:0a: c6:ac:b6:27:2b:4e:4a:ee:6a:28:71:88:75:20:a8:36:23:c8: d5:f5:91:0f:27:a6:4f:7f:da:b7:e6:d2:75:99:4d:9c:cb:50: 5b:4a:4c:1a:7b:a6:86:10:13:b0:d4:68:46:16:d2:23:dc:83: d1:a8:96:f3:12:ff:57:72:1b:81:98:89:0f:bc:32:f2:18:b5: 5b:de:32:0e:25:c5:f3:fb:89:ae:f5:c9:d7:3b:a8:cb:3b:3b: 78:c0:bd:ad:09:83:75:18:13:79:6c:c9:a5:ea:bf:49:9b:a0: 1a:0e:65:77:31:a2:a9:50:e6:a8:0d:d7:29:e1:e2:0d:24:30: ab:b2:1d:69:29:0a:6b:82:ed:f3:11:06:bc:c1:5e:35:53:39: 68:2a:95:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKq2viBMH+XeHPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk OTY2NzY1ZDItZDgwZS00NDlhLWJlZjgtYzIwZDg5NGE1MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7quAHkCMk8hT/tVMM1NCqBUjfX7BFBdMYzW /8NDsBPN8fNNqdyDAA8IJj+7OLfZ38ELyS+/caOCyvMagIa+p2acp4sIhRM8uNLO bSCI6S1okDUvImZluFo1UiwyQGPuerHsnWoWJ4o9+Ucx3nnemrtOC49hTN2sCdIq Ud2DOhYu8YG8Wi83AyT4xEedjig1uMK9WcsfcPc+B2Pqa3Ak+ha6+LQMhLRa8jrK +r6m1iRx3HQIVPlRbifS9IuedoOyWI+28A/lsfhziN41ok9fLqgsgFxK+oIIvdhO iawUn7AO6JPZSmwLWxUtc3cHgAiXiU6IFmCgUtJ5JOK+9YtjDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3UpYVOzMZGj9GrBtS0xPRipMRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZGZlNjRmNTQtMjA1Ny0z ODkzLWFlYjItMjRkMjUxNzk4NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ItbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0BEbKbb7qQT38srLQ70+CC09X7Ryj/b9ALivf7wZTu1um9nNigeocs NDv0OdTojshgk1+pluDkcDVKQDv+sd74FUFqNzYmtwYgzFKAm/Tq2yUzwO38HMgR m1URPBXmeVwL2IiEbQbop0+kCsasticrTkruaihxiHUgqDYjyNX1kQ8npk9/2rfm 0nWZTZzLUFtKTBp7poYQE7DUaEYW0iPcg9GolvMS/1dyG4GYiQ+8MvIYtVveMg4l xfP7ia71ydc7qMs7O3jAva0Jg3UYE3lsyaXqv0mboBoOZXcxoqlQ5qgN1ynh4g0k MKuyHWkpCmuC7fMRBrzBXjVTOWgqlX8= -----END CERTIFICATE-----Generated at Sun May 3 16:16:19 2026 by rpki-client