$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/05a16b4b-498c-32d0-9bda-23091b06e97d.roa File: 05a16b4b-498c-32d0-9bda-23091b06e97d.roa (raw, json) Hash identifier: RPh9MmqZ7aH8dxH70DvA37QSjH2ed0GtFDhvTrXtLQI= Subject key identifier: D1:FD:53:9A:7A:2A:F5:4D:7E:E3:A0:1B:EF:7E:7A:1A:76:77:41:26 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584AC9DBB1E3CA674E5A0A1A86C0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/05a16b4b-498c-32d0-9bda-23091b06e97d.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 216.139.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b1:e3:ca:67:4e:5a:0a:1a:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=a0988d94-bd1a-4ebd-978d-8c75f1b4557c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1b:a1:2a:7b:64:12:32:c0:fd:99:de:a5:01: e3:18:5c:62:e9:d2:61:f6:6d:a9:75:74:3b:c6:ed: 9f:0d:f4:45:73:f1:83:7e:c2:62:41:26:3e:b9:b0: 39:e5:c2:53:bd:8e:c2:de:76:0a:a1:59:a8:50:6c: ef:0c:06:24:55:fb:db:f3:e6:67:66:00:e3:3e:81: ea:de:7a:2d:89:c7:00:b4:fd:c6:29:28:ea:bb:9a: 79:a6:35:3e:7a:f6:fb:b0:20:cf:81:50:96:6e:0f: 9e:85:04:db:47:1c:96:85:5e:72:d1:61:38:68:c0: eb:b6:54:91:7a:fb:66:ab:86:fd:1f:e3:5b:f6:ce: ad:a2:ce:88:17:d5:5f:55:b3:1b:ca:41:25:8c:c7: 1d:aa:5a:54:be:8a:50:8d:3d:83:90:d2:14:fc:18: b1:c0:ed:2b:7b:32:09:0b:f8:b5:84:a2:78:aa:8c: 08:f7:6e:59:ae:75:06:15:8e:53:62:e0:ed:d7:e3: 8e:6e:28:6d:5c:ac:5c:8a:b6:c1:57:dd:a1:6c:df: e6:38:39:e9:e2:22:77:84:70:78:20:ae:50:8f:3e: 1f:f1:ad:ab:95:bd:b1:6f:f0:63:83:23:e0:15:0d: f5:81:38:19:b9:e8:49:e8:32:c8:dc:f0:5d:92:8b: 8c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FD:53:9A:7A:2A:F5:4D:7E:E3:A0:1B:EF:7E:7A:1A:76:77:41:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/05a16b4b-498c-32d0-9bda-23091b06e97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:86:8c:8f:c7:50:5b:e4:f2:1d:af:02:36:9c:b4:f0:b2:5b: a0:ab:54:92:89:3f:e0:6f:6e:f5:12:cc:c4:c0:4b:2e:4c:45: 10:8c:25:97:4b:46:a6:77:ca:19:09:85:f0:fd:6c:98:c5:d9: 82:1f:ff:3e:11:fc:71:d4:8f:a3:16:46:bc:10:07:c6:02:ea: 9f:58:e6:fa:a1:82:59:2f:df:1e:1f:7f:16:cc:80:70:a2:7e: b9:3c:21:82:25:09:97:76:9a:f8:c9:f0:c3:46:a2:82:b4:d2: e8:4e:35:91:2b:81:48:7f:b0:c9:45:b1:bb:26:b0:78:12:8f: a9:4a:dd:9d:17:f7:30:e8:30:ff:75:dd:d8:e3:a5:21:68:97: d5:43:c8:4e:84:79:0a:fc:ba:51:07:31:9b:3b:dc:f2:57:46: ed:3f:f0:42:25:e2:3a:46:1f:54:53:ee:58:23:bd:60:ce:2f: f1:45:5b:e6:b7:6c:b2:9c:48:cb:f4:8d:68:a3:aa:57:42:fd: e8:a3:14:f0:21:b1:1d:59:c0:64:20:b9:bb:52:6c:59:36:b9: 88:2f:29:08:1f:cb:d9:f7:5b:de:90:1d:3b:0c:ad:99:7c:6d: 2c:e2:43:0a:c9:29:6a:43:28:97:62:59:37:40:d5:20:56:2c: 82:03:74:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27HjymdOWgoahsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YTA5ODhkOTQtYmQxYS00ZWJkLTk3OGQtOGM3NWYxYjQ1NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRuhKntkEjLA/ZnepQHjGFxi6dJh9m2pdXQ7 xu2fDfRFc/GDfsJiQSY+ubA55cJTvY7C3nYKoVmoUGzvDAYkVfvb8+ZnZgDjPoHq 3noticcAtP3GKSjqu5p5pjU+evb7sCDPgVCWbg+ehQTbRxyWhV5y0WE4aMDrtlSR evtmq4b9H+Nb9s6tos6IF9VfVbMbykEljMcdqlpUvopQjT2DkNIU/BixwO0rezIJ C/i1hKJ4qowI925ZrnUGFY5TYuDt1+OObihtXKxcirbBV92hbN/mODnp4iJ3hHB4 IK5Qjz4f8a2rlb2xb/BjgyPgFQ31gTgZuehJ6DLI3PBdkouM2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH9U5p6KvVNfuOgG+9+ehp2d0EmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMDVhMTZiNGItNDk4Yy0z MmQwLTliZGEtMjMwOTFiMDZlOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ItcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+GjI/HUFvk8h2vAjactPCyW6CrVJKJP+BvbvUSzMTASy5MRRCMJZdL RqZ3yhkJhfD9bJjF2YIf/z4R/HHUj6MWRrwQB8YC6p9Y5vqhglkv3x4ffxbMgHCi frk8IYIlCZd2mvjJ8MNGooK00uhONZErgUh/sMlFsbsmsHgSj6lK3Z0X9zDoMP91 3djjpSFol9VDyE6EeQr8ulEHMZs73PJXRu0/8EIl4jpGH1RT7lgjvWDOL/FFW+a3 bLKcSMv0jWijqldC/eijFPAhsR1ZwGQgubtSbFk2uYgvKQgfy9n3W96QHTsMrZl8 bSziQwrJKWpDKJdiWTdA1SBWLIIDdBg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:36 2025 by rpki-client