$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa File: 0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa (raw, json) Hash identifier: XepDZ9hxcwc5lN+Ehb5yOAnEY0k+oG0nIdTFP2yyQ/k= Subject key identifier: 2E:B1:BA:97:09:2E:20:32:C5:80:21:07:CD:59:0D:50:D4:72:C5:F8 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584DD09049953AE953337469E4C0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 16509 IP address blocks: 216.157.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:49:95:3a:e9:53:33:74:69:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=2e02f51e-f332-4f03-be4e-220c63427b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:9c:46:16:41:00:f8:c5:46:af:ed:39:b8: 3e:27:3a:25:5c:3f:c0:0b:92:6d:88:f2:bc:59:a9: bd:03:ab:67:4d:7a:b0:f0:6d:05:8e:d8:6f:5a:75: 9f:fd:6f:b8:c3:fd:4f:bf:ff:c0:a8:a3:e2:98:1c: 71:1c:b4:bf:41:ba:d1:34:f7:da:0c:49:40:04:77: 91:03:c2:61:d6:1b:56:cb:65:fd:dc:14:f8:4e:6b: 32:a6:05:c8:f1:04:d7:39:bc:79:a9:c1:2d:1c:41: 58:75:9f:ab:40:06:53:1b:f7:49:8b:b1:92:e9:18: 2a:ff:fa:ce:4e:a0:b3:bd:54:5a:ad:c2:78:69:e0: 47:30:8f:85:4a:e1:8c:db:aa:b9:98:a0:26:3e:f0: 20:2a:d1:fc:f6:a3:82:4d:0e:f0:3a:55:d6:14:2a: bd:2d:70:52:01:0f:55:d9:1c:d6:08:e8:55:b4:65: b7:56:1c:4f:26:8b:b9:d6:7d:8d:ac:9a:8c:74:2d: 73:99:e2:5e:60:70:c7:bf:71:d7:27:fc:c8:07:92: 9b:f2:c7:72:62:84:8f:b2:ef:e3:43:1b:60:03:9c: c5:3a:57:df:05:dc:ec:dc:35:2b:51:1b:8c:37:51: 90:50:96:b3:a2:bc:3a:42:49:f8:25:0c:72:15:86: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B1:BA:97:09:2E:20:32:C5:80:21:07:CD:59:0D:50:D4:72:C5:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a9cef65-e59a-3f08-9b4a-e7aaf52bb67d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:72:40:75:5a:5d:b6:1d:8c:c7:27:f9:55:aa:c2:5f:d9:b0: b1:92:7f:5a:de:3b:a9:1a:f0:a9:a9:67:e3:e8:5d:6b:4e:6e: ba:fb:84:06:42:26:82:d9:c0:c2:c4:fc:a3:ca:30:6b:17:ba: 5f:8c:c0:0a:c1:d4:bd:4e:f9:0a:64:e1:a2:83:41:33:9e:7d: 5f:b3:77:86:a5:63:d6:b5:3f:e6:73:86:c2:69:4a:3c:a1:09: 49:e2:cd:8b:9c:db:4d:4c:6c:fb:83:09:7f:9d:4e:d7:8d:02: 48:55:29:69:76:ab:f8:87:b3:99:e4:1d:0e:0d:04:a1:5a:fa: ff:e7:90:0b:8d:81:29:cd:f9:42:97:89:f3:05:9b:bd:47:af: 8e:c4:7a:95:5f:c2:fe:ea:2a:25:0e:93:21:c7:3d:ae:f1:1d: 6d:44:1b:d8:e1:a0:25:37:5a:5f:20:ca:15:da:16:4c:8d:2f: 7a:ef:1c:ef:d2:33:6a:df:1b:76:48:47:16:3e:b9:cf:0b:56: 36:8b:45:48:04:ad:07:1d:20:42:7e:6c:ec:5e:ea:a6:fb:14: d3:83:60:16:cc:58:d8:93:a1:93:6c:75:6f:d1:1b:40:9d:07: e6:aa:00:52:14:34:92:48:b6:57:9e:77:43:c6:15:7f:b0:73: fb:9f:c9:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkEmVOulTM3Rp5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk MmUwMmY1MWUtZjMzMi00ZjAzLWJlNGUtMjIwYzYzNDI3YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptycRhZBAPjFRq/tObg+JzolXD/AC5JtiPK8 Wam9A6tnTXqw8G0FjthvWnWf/W+4w/1Pv//AqKPimBxxHLS/QbrRNPfaDElABHeR A8Jh1htWy2X93BT4TmsypgXI8QTXObx5qcEtHEFYdZ+rQAZTG/dJi7GS6Rgq//rO TqCzvVRarcJ4aeBHMI+FSuGM26q5mKAmPvAgKtH89qOCTQ7wOlXWFCq9LXBSAQ9V 2RzWCOhVtGW3VhxPJou51n2NrJqMdC1zmeJeYHDHv3HXJ/zIB5Kb8sdyYoSPsu/j QxtgA5zFOlffBdzs3DUrURuMN1GQUJazorw6Qkn4JQxyFYYcUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6xupcJLiAyxYAhB81ZDVDUcsX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGE5Y2VmNjUtZTU5YS0z ZjA4LTliNGEtZTdhYWY1MmJiNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9yQHVaXbYdjMcn+VWqwl/ZsLGSf1reO6ka8KmpZ+PoXWtObrr7hAZC JoLZwMLE/KPKMGsXul+MwArB1L1O+Qpk4aKDQTOefV+zd4alY9a1P+ZzhsJpSjyh CUnizYuc201MbPuDCX+dTteNAkhVKWl2q/iHs5nkHQ4NBKFa+v/nkAuNgSnN+UKX ifMFm71Hr47EepVfwv7qKiUOkyHHPa7xHW1EG9jhoCU3Wl8gyhXaFkyNL3rvHO/S M2rfG3ZIRxY+uc8LVjaLRUgErQcdIEJ+bOxe6qb7FNODYBbMWNiToZNsdW/RG0Cd B+aqAFIUNJJItleed0PGFX+wc/ufyUc= -----END CERTIFICATE-----Generated at Wed May 13 10:48:01 2026 by rpki-client