$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa File: 0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa (raw, json) Hash identifier: YyX//S0ko8YPpn/2DB/O3XFkSQEr+4VLRCoCafgZBhI= Subject key identifier: CB:6B:55:D4:9F:EF:C6:AD:A5:DE:F8:1B:49:2D:D8:90:5A:FC:92:2B Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584F4972C24B448D14654643F2E0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 216.157.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c2:4b:44:8d:14:65:46:43:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f8b69bd6-0104-46d0-b16f-48768a44736e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:52:3b:b1:d5:2b:02:4d:18:5e:d4:7d:e7: 31:66:a5:be:df:90:81:66:90:82:ce:63:10:a7:c7: 55:a3:34:1f:c8:84:70:ec:eb:77:ea:45:3d:8c:5e: 19:a3:2c:e5:0b:f7:85:11:30:50:54:ad:da:9d:7b: e2:a7:8f:55:91:29:68:2e:eb:e2:b7:18:a9:78:b0: b0:19:a6:79:3f:48:1a:e1:36:98:12:3f:1b:e3:3a: 40:7a:5e:41:89:e9:46:a5:fb:0f:68:77:21:76:09: b0:88:e7:b5:96:48:0f:1a:81:71:9b:37:e8:b1:28: cf:67:6a:5d:c5:f0:62:b7:bb:1c:01:95:87:74:ed: bc:a1:af:2a:05:40:8a:02:ad:79:34:5f:f4:76:fc: 7d:ad:5a:cc:88:5e:86:92:55:e7:18:32:26:9a:f4: a2:09:98:56:19:f7:e5:4c:98:f0:9c:1d:f3:33:38: 3c:cb:78:61:7f:b4:fa:58:ac:f2:f0:71:e3:69:0c: db:9a:21:19:64:78:9b:c4:e4:e6:57:87:70:a5:09: c4:8f:61:2e:a9:97:e5:97:ff:eb:b2:87:1f:56:f0: 6b:0e:68:85:4b:ca:7e:0b:c4:0c:9f:b5:b6:59:14: 03:da:b1:74:6e:7a:b8:96:84:ad:8b:bf:58:af:c4: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6B:55:D4:9F:EF:C6:AD:A5:DE:F8:1B:49:2D:D8:90:5A:FC:92:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2c:4b:2d:97:66:d3:e6:ae:5a:97:44:46:dd:69:1c:22:23: 16:b9:9b:e7:0b:57:46:fb:e2:45:da:e1:d8:39:b3:21:38:7b: e1:00:bc:e3:3c:b4:82:32:c0:74:cf:d0:0d:7a:9c:e2:0d:e7: 3d:20:8f:19:98:da:35:0b:59:de:dd:40:eb:b8:3f:a1:37:b4: 00:a9:a5:80:93:07:f0:2c:a4:ef:c9:4f:88:b8:cc:91:00:92: 19:f1:61:1c:99:a0:0e:21:06:65:b1:5c:88:5b:f2:6a:fd:5e: ae:34:e6:89:93:65:15:a9:88:ee:86:27:85:a2:0e:6f:25:57: 4b:14:95:79:fe:08:71:ee:86:be:6a:df:7c:f2:a8:c1:77:ef: 6b:3c:38:44:d6:cc:fe:8b:dd:52:52:e7:02:e3:6b:f2:1f:02: 48:91:82:58:25:81:20:26:7a:be:fd:99:97:a3:99:38:36:46: c6:12:49:8b:f5:87:50:85:fe:c0:30:f5:d3:d7:2e:4f:2b:5e: a0:ab:6c:ee:d2:07:65:bd:e4:5d:1e:91:05:de:cb:a9:c0:e4: ef:31:a9:6c:eb:9d:0b:75:b0:b8:71:6e:e8:bc:3f:be:5c:45: e0:da:ca:ae:44:b7:3a:64:a8:b3:1c:35:b6:25:68:ef:d0:96: 6d:7f:9a:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsJLRI0UZUZD8uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjhiNjliZDYtMDEwNC00NmQwLWIxNmYtNDg3NjhhNDQ3MzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNlSO7HVKwJNGF7UfecxZqW+35CBZpCCzmMQ p8dVozQfyIRw7Ot36kU9jF4ZoyzlC/eFETBQVK3anXvip49VkSloLuvitxipeLCw GaZ5P0ga4TaYEj8b4zpAel5BielGpfsPaHchdgmwiOe1lkgPGoFxmzfosSjPZ2pd xfBit7scAZWHdO28oa8qBUCKAq15NF/0dvx9rVrMiF6GklXnGDImmvSiCZhWGffl TJjwnB3zMzg8y3hhf7T6WKzy8HHjaQzbmiEZZHibxOTmV4dwpQnEj2EuqZfll//r socfVvBrDmiFS8p+C8QMn7W2WRQD2rF0bnq4loSti79Yr8QX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtrVdSf78atpd74G0kt2JBa/JIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGE5Y2VmNjUtZTU5YS0z ZjA4LTliNGEtZTdhYWY1MmJiNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGksSy2XZtPmrlqXREbdaRwiIxa5m+cLV0b74kXa4dg5syE4e+EAvOM8 tIIywHTP0A16nOIN5z0gjxmY2jULWd7dQOu4P6E3tACppYCTB/AspO/JT4i4zJEA khnxYRyZoA4hBmWxXIhb8mr9Xq405omTZRWpiO6GJ4WiDm8lV0sUlXn+CHHuhr5q 33zyqMF372s8OETWzP6L3VJS5wLja/IfAkiRglglgSAmer79mZejmTg2RsYSSYv1 h1CF/sAw9dPXLk8rXqCrbO7SB2W95F0ekQXey6nA5O8xqWzrnQt1sLhxbui8P75c ReDayq5EtzpkqLMcNbYlaO/Qlm1/mvY= -----END CERTIFICATE-----Generated at Fri Sep 25 17:19:57 2026 by rpki-client