$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/baae8174-ee22-3a24-ae5a-1b59b83c4ba3.roa File: baae8174-ee22-3a24-ae5a-1b59b83c4ba3.roa (raw, json) Hash identifier: y36p/+4qNR8kqLWc5d/tIRMd6IMaZ9g4Iq+rGoNSP0c= Subject key identifier: 59:C8:EA:7B:BC:C8:FC:D7:E5:A5:44:B7:E6:1A:9F:1C:73:C6:2C:F7 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D2BDA0CAA9CC3072D6C2A45C0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/baae8174-ee22-3a24-ae5a-1b59b83c4ba3.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 143.244.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:0c:aa:9c:c3:07:2d:6c:2a:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=05a57a67-2cf1-4df2-9087-53823b9fdfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:18:b7:0e:a7:97:30:80:c5:08:65:21:07: 0a:d3:ed:7b:bc:30:40:33:a3:69:2c:bd:6c:59:1c: 9e:fd:97:98:c2:79:08:e0:1f:ed:9b:8b:2d:16:e6: 73:5e:d9:fc:48:32:87:dc:40:18:9b:40:0d:7b:ab: 7f:39:8c:6f:c3:20:0e:2c:56:82:f1:40:db:1f:4d: 46:94:88:c2:de:29:e9:fe:b8:7a:6c:ea:fe:a1:60: ae:fd:be:44:66:bf:7c:bf:9a:30:dc:53:04:aa:94: 1b:83:17:eb:88:e5:9c:32:a8:1b:27:93:f0:e6:40: 3c:69:70:c9:09:9a:82:78:ba:68:c1:b2:1b:fb:a5: d6:22:17:77:e4:5e:aa:b2:64:e5:12:66:99:a7:c3: 21:a4:b7:ef:36:80:57:cc:53:66:c4:66:aa:02:15: 35:7f:aa:f6:aa:17:7d:82:be:7f:e5:c2:1a:88:09: 12:72:d2:53:78:d1:95:c3:21:f3:b7:72:92:5b:5d: bf:84:5b:6f:c5:d7:e9:23:63:22:66:59:43:42:ff: 5a:7b:e8:36:c4:76:28:24:60:2b:a1:aa:1c:a5:4c: cc:3b:79:60:83:1d:0a:a2:45:03:97:11:77:fc:9d: 45:9a:23:7a:5e:c3:34:d7:62:92:ae:09:6f:7c:b5: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C8:EA:7B:BC:C8:FC:D7:E5:A5:44:B7:E6:1A:9F:1C:73:C6:2C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/baae8174-ee22-3a24-ae5a-1b59b83c4ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ed:03:f0:7b:f2:92:2c:8b:46:2a:a0:f5:57:22:bb:6a:29: 90:ce:aa:b5:fe:ee:28:53:f2:12:7c:3a:01:e3:99:7f:1c:7e: 82:16:d7:70:a3:94:5c:bc:c7:1d:32:70:a5:62:dd:a7:a5:d9: 1b:fd:13:64:a3:56:2f:26:5a:d8:56:ba:ad:1c:5f:c0:cc:d7: 26:55:ec:57:0f:26:b6:78:4b:b5:ab:f8:8e:17:33:b9:ec:60: 85:a3:23:18:53:9b:dd:74:27:6e:b5:0d:29:f2:45:d8:0b:08: 3b:90:0c:70:38:e7:28:c5:b0:c3:80:1e:e7:4a:d3:eb:46:a0: 8a:25:dd:62:f1:9d:84:9c:4e:91:ca:d9:6a:76:8d:41:34:56: a5:6d:c3:be:b9:fc:0d:9c:f1:7b:5c:5b:9f:2a:2b:3a:37:0f: 22:62:4f:26:cb:be:61:13:f0:2c:c9:a7:a7:e8:99:93:d1:b6: b4:69:d2:d6:1d:dd:16:07:86:fa:da:72:a2:a2:9b:88:7a:2a: c4:1e:2f:a0:5d:4b:c1:e5:1f:fa:d6:1c:52:41:2f:4d:77:66: 92:30:8b:bc:a8:e0:42:cc:79:17:c4:7f:af:b0:05:25:01:20: 81:1b:33:79:d8:46:b2:ae:ba:44:b6:f3:8a:7d:dc:55:e7:e9: 6c:bf:63:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gyqnMMHLWwqRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MDVhNTdhNjctMmNmMS00ZGYyLTkwODctNTM4MjNiOWZkZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif4Ytw6nlzCAxQhlIQcK0+17vDBAM6NpLL1s WRye/ZeYwnkI4B/tm4stFuZzXtn8SDKH3EAYm0ANe6t/OYxvwyAOLFaC8UDbH01G lIjC3inp/rh6bOr+oWCu/b5EZr98v5ow3FMEqpQbgxfriOWcMqgbJ5Pw5kA8aXDJ CZqCeLpowbIb+6XWIhd35F6qsmTlEmaZp8MhpLfvNoBXzFNmxGaqAhU1f6r2qhd9 gr5/5cIaiAkSctJTeNGVwyHzt3KSW12/hFtvxdfpI2MiZllDQv9ae+g2xHYoJGAr oaocpUzMO3lggx0KokUDlxF3/J1FmiN6XsM012KSrglvfLU75QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnI6nu8yPzX5aVEt+Yanxxzxiz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvYmFhZTgxNzQtZWUyMi0z YTI0LWFlNWEtMWI1OWI4M2M0YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/RRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3tA/B78pIsi0YqoPVXIrtqKZDOqrX+7ihT8hJ8OgHjmX8cfoIW13Cj lFy8xx0ycKVi3ael2Rv9E2SjVi8mWthWuq0cX8DM1yZV7FcPJrZ4S7Wr+I4XM7ns YIWjIxhTm910J261DSnyRdgLCDuQDHA45yjFsMOAHudK0+tGoIol3WLxnYScTpHK 2Wp2jUE0VqVtw765/A2c8XtcW58qKzo3DyJiTybLvmET8CzJp6fomZPRtrRp0tYd 3RYHhvracqKim4h6KsQeL6BdS8HlH/rWHFJBL013ZpIwi7yo4ELMeRfEf6+wBSUB IIEbM3nYRrKuukS284p93FXn6Wy/Y3Q= -----END CERTIFICATE-----Generated at Thu Mar 26 02:05:20 2026 by rpki-client