$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa File: d1acf045-6547-38ea-ae4b-98388f48d9f8.roa (raw, json) Hash identifier: Y9RMnHrWlfS6DdY0Z+bL5eU7yztAPCSKgI0Bi58MWVY= Subject key identifier: B9:E4:86:55:F0:3B:8F:8A:54:8C:BB:7C:69:80:2B:46:84:8F:8D:84 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F4328584AFEE699F6DDB8256F887678BC Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 8075 IP address blocks: 216.9.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:99:f6:dd:b8:25:6f:88:76:78:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=a8e1da96-e091-47e2-a2b1-1533435e746f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1a:dd:eb:fb:10:79:c1:3d:33:85:86:3b:b5: b6:0f:d5:17:9f:50:c3:37:b6:a2:07:82:db:74:76: 98:15:da:88:a6:a3:45:b2:3e:75:c1:90:b5:42:26: 6a:0c:f3:b6:98:5f:19:94:85:88:ac:41:e2:9d:ec: b0:76:b9:53:2b:96:5b:dd:56:b2:d7:25:82:5a:78: e0:5f:3d:32:2c:b5:9d:73:0a:a4:42:60:e5:69:bc: 2a:60:f6:bf:40:61:2e:0a:5c:03:03:3b:f6:61:27: 9a:e8:b9:4a:41:fe:c8:6d:f5:e7:c0:57:a3:f7:02: 95:80:c1:f6:82:36:d5:26:a5:27:8b:79:85:1e:21: c7:fa:67:a8:08:07:51:20:9d:50:3d:51:85:17:b1: 15:98:b6:b9:99:7e:c1:31:27:b3:6e:9e:c4:ed:ef: 90:81:15:ed:46:aa:89:bc:68:b3:2d:7b:36:b4:b0: 30:1c:25:dc:61:dc:54:92:c0:ba:55:8f:2b:09:8b: ce:3b:50:ce:a8:e1:8a:66:a2:ae:a5:7a:d6:af:c6: a2:ce:24:61:00:03:0d:49:4b:be:85:b8:49:ed:b5: e7:77:fa:aa:47:83:e5:46:64:c0:38:54:8e:e6:38: 0b:7a:6a:0e:30:5d:c7:b9:b1:bf:8a:b7:b9:7c:5b: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E4:86:55:F0:3B:8F:8A:54:8C:BB:7C:69:80:2B:46:84:8F:8D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 216.9.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:70:d0:59:85:0d:07:6f:a9:4e:c0:f1:c5:a1:50:cb:5a:12: da:b0:f3:f9:71:2e:c4:8c:ed:f2:1f:5b:0c:6c:f0:07:41:cd: 52:40:26:30:31:33:b7:fd:ef:61:1b:01:02:8f:86:98:22:c4: 88:4c:76:15:a2:df:2c:ee:cb:2e:2c:db:a1:49:b0:77:3d:17: 7a:8e:74:0f:83:d5:e5:d0:ec:c8:4b:4d:29:23:39:72:8d:a6: 72:7c:00:0a:d4:a8:9f:bc:c8:32:f7:95:70:58:c4:68:f0:5b: 24:be:4f:c7:cb:f0:75:13:ea:ca:ad:c5:b9:95:a7:de:77:1f: a3:8c:be:24:5e:5d:60:5b:1b:3a:e6:16:2a:45:2e:25:3f:ab: 88:b7:98:62:e9:28:2c:21:2d:a2:d7:22:77:ca:e6:18:06:76: 0d:b7:aa:82:19:38:f6:7d:da:d2:84:0b:64:61:e3:c8:63:04: 68:d0:c2:7c:67:a0:96:00:17:f0:f2:54:0f:8d:36:2e:32:74: 0c:ff:39:08:51:b4:8d:37:fc:3a:a4:48:56:9d:cc:c6:15:ce: 49:42:dc:b1:c4:4f:f9:a1:54:2f:46:a0:7f:d6:84:0a:03:54: a3:1e:97:b1:fe:66:a6:66:33:f6:0b:ae:73:1b:74:98:e8:67: 57:e2:b0:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5pn23bglb4h2eLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YThlMWRhOTYtZTA5MS00N2UyLWEyYjEtMTUzMzQzNWU3NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRrd6/sQecE9M4WGO7W2D9UXn1DDN7aiB4Lb dHaYFdqIpqNFsj51wZC1QiZqDPO2mF8ZlIWIrEHineywdrlTK5Zb3Vay1yWCWnjg Xz0yLLWdcwqkQmDlabwqYPa/QGEuClwDAzv2YSea6LlKQf7IbfXnwFej9wKVgMH2 gjbVJqUni3mFHiHH+meoCAdRIJ1QPVGFF7EVmLa5mX7BMSezbp7E7e+QgRXtRqqJ vGizLXs2tLAwHCXcYdxUksC6VY8rCYvOO1DOqOGKZqKupXrWr8aiziRhAAMNSUu+ hbhJ7bXnd/qqR4PlRmTAOFSO5jgLemoOMF3HubG/ire5fFtXZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnkhlXwO4+KVIy7fGmAK0aEj42EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvZDFhY2YwNDUtNjU0Ny0z OGVhLWFlNGItOTgzODhmNDhkOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhw0FmFDQdvqU7A8cWhUMtaEtqw8/lxLsSM7fIfWwxs8AdBzVJAJjAx M7f972EbAQKPhpgixIhMdhWi3yzuyy4s26FJsHc9F3qOdA+D1eXQ7MhLTSkjOXKN pnJ8AArUqJ+8yDL3lXBYxGjwWyS+T8fL8HUT6sqtxbmVp953H6OMviReXWBbGzrm FipFLiU/q4i3mGLpKCwhLaLXInfK5hgGdg23qoIZOPZ92tKEC2Rh48hjBGjQwnxn oJYAF/DyVA+NNi4ydAz/OQhRtI03/DqkSFadzMYVzklC3LHET/mhVC9GoH/WhAoD VKMel7H+ZqZmM/YLrnMbdJjoZ1fisNo= -----END CERTIFICATE-----Generated at Wed Sep 3 23:59:19 2025 by rpki-client