$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/429b64ff-7c09-3bfd-82a0-42f1561a4edf.roa File: 429b64ff-7c09-3bfd-82a0-42f1561a4edf.roa (raw, json) Hash identifier: fLjau9V8kjhtE6heOdVk9rFkmQ/voStZrkE8Dv+8Jsg= Subject key identifier: 23:71:34:62:74:BC:69:85:2C:83:0F:30:50:4D:9C:50:D2:B0:1C:84 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584F4975F306D131D284AF2BA980 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/429b64ff-7c09-3bfd-82a0-42f1561a4edf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 216.139.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:f3:06:d1:31:d2:84:af:2b:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee05ec64-6dc6-4b91-983b-94abec3e4c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:80:26:a7:57:ea:73:35:bf:b4:48:af:f3: 7a:03:ab:d3:58:b8:d8:31:ce:e7:34:0a:e0:34:35: 20:97:77:92:b6:2a:75:e2:e1:45:ad:40:c3:0a:20: 0e:89:b7:06:d9:3e:08:17:54:25:fb:b3:57:af:c9: 98:5a:11:29:18:0a:46:dd:ec:a1:c8:24:f0:81:47: 9e:f0:09:0a:7c:08:e0:13:81:29:fa:af:83:6f:b4: 34:19:34:79:17:62:02:a8:53:8c:f0:93:75:d1:14: ec:5a:2a:00:3f:d6:7f:9d:e5:b6:fa:b9:89:b8:f3: c9:c3:be:bb:44:38:b8:ed:15:73:0e:00:21:b4:18: 2d:0a:11:24:a5:78:d1:81:70:21:fd:aa:9f:31:27: bd:cb:ac:f8:f5:4f:3b:7a:9c:c1:f6:da:0b:29:e9: 23:98:48:1d:37:0d:52:ca:a3:23:ae:22:7c:b9:38: e8:16:92:26:c6:54:46:5b:2f:5b:fc:63:60:44:79: ab:3b:55:d0:91:95:7e:ff:8b:72:0e:04:f5:29:66: 38:19:2a:ee:66:78:f0:08:3a:d4:23:17:c6:1f:6f: 7a:03:85:37:02:28:30:4c:be:bc:fb:f2:98:2f:7c: fe:5d:04:01:3e:53:81:3a:23:19:bb:39:f9:f4:a3: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:71:34:62:74:BC:69:85:2C:83:0F:30:50:4D:9C:50:D2:B0:1C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/429b64ff-7c09-3bfd-82a0-42f1561a4edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:75:21:fe:95:a6:c5:09:04:1d:82:87:04:59:af:f8:19:c3: 7b:60:95:ff:50:57:e7:b8:0a:49:a7:a3:0b:39:11:da:bd:32: ff:7f:64:25:28:67:df:88:ed:f5:b6:7a:82:c9:d7:69:42:02: 3d:6f:4c:e3:4b:3f:61:e9:b4:86:35:4a:ed:bf:72:02:5e:1f: 5f:da:10:c7:97:f5:80:a6:96:62:84:3e:cc:5b:95:26:db:68: c0:ca:8c:0c:04:01:27:23:0e:4d:c6:34:a0:d1:16:77:11:82: 6f:88:18:0c:f8:8e:bc:cf:a6:b7:01:7b:a7:59:fb:df:f0:79: 3c:78:ce:7c:95:5a:68:7d:9c:dd:cf:bd:36:f6:0f:59:c6:4d: 7d:61:8f:cc:3a:52:cc:7b:4b:b0:87:f3:b2:10:34:3a:3c:19: 5b:c7:e8:c7:3e:fa:eb:9f:42:54:d7:5b:87:b2:09:07:cb:99: 0f:1a:35:70:30:e1:21:43:98:8e:39:a0:0c:a4:ba:ff:76:00: e8:08:fa:cb:cf:f6:e0:fb:7b:fe:a8:42:93:57:49:64:8a:f3: 41:e5:88:8b:db:71:29:a7:9e:78:9c:a4:c1:f8:5c:3e:12:aa: 91:34:44:1a:c3:08:49:fe:f8:69:fe:a2:2a:9a:2e:57:12:12: 57:48:e4:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdfMG0THShK8rqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWUwNWVjNjQtNmRjNi00YjkxLTk4M2ItOTRhYmVjM2U0YzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJWAJqdX6nM1v7RIr/N6A6vTWLjYMc7nNArg NDUgl3eStip14uFFrUDDCiAOibcG2T4IF1Ql+7NXr8mYWhEpGApG3eyhyCTwgUee 8AkKfAjgE4Ep+q+Db7Q0GTR5F2ICqFOM8JN10RTsWioAP9Z/neW2+rmJuPPJw767 RDi47RVzDgAhtBgtChEkpXjRgXAh/aqfMSe9y6z49U87epzB9toLKekjmEgdNw1S yqMjriJ8uTjoFpImxlRGWy9b/GNgRHmrO1XQkZV+/4tyDgT1KWY4GSruZnjwCDrU IxfGH296A4U3AigwTL68+/KYL3z+XQQBPlOBOiMZuzn59KMWjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNxNGJ0vGmFLIMPMFBNnFDSsByEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvNDI5YjY0ZmYtN2MwOS0z YmZkLTgyYTAtNDJmMTU2MWE0ZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ItAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx1If6VpsUJBB2ChwRZr/gZw3tglf9QV+e4Ckmnows5Edq9Mv9/ZCUo Z9+I7fW2eoLJ12lCAj1vTONLP2HptIY1Su2/cgJeH1/aEMeX9YCmlmKEPsxblSbb aMDKjAwEAScjDk3GNKDRFncRgm+IGAz4jrzPprcBe6dZ+9/weTx4znyVWmh9nN3P vTb2D1nGTX1hj8w6Usx7S7CH87IQNDo8GVvH6Mc++uufQlTXW4eyCQfLmQ8aNXAw 4SFDmI45oAykuv92AOgI+svP9uD7e/6oQpNXSWSK80HliIvbcSmnnnicpMH4XD4S qpE0RBrDCEn++Gn+oiqaLlcSEldI5IA= -----END CERTIFICATE-----Generated at Sun Sep 27 08:41:08 2026 by rpki-client