$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa File: eaf54f35-82ef-3086-948d-7f841dfe1f72.roa (raw, json) Hash identifier: 0W+WmU5kTXJ4+m6nfFODSmoGgHc/PLY7qo8ZzDE1N0g= Subject key identifier: 4F:14:FD:E5:29:F3:A2:11:90:A1:A5:82:50:77:6C:EB:81:32:2B:75 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584B4A471998AFD3B4CE9CDD3380 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 14618 IP address blocks: 216.139.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:19:98:af:d3:b4:ce:9c:dd:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=0df2e495-5123-4a48-b5d4-123480b700a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:83:a9:b3:42:77:10:db:65:85:70:d4:f9: 17:67:93:e8:0e:bd:36:54:1e:a2:5e:3f:ba:7d:42: 50:cb:7c:26:b4:ae:82:76:6d:f8:28:27:7c:c5:a8: ce:e6:26:b3:a5:bf:4c:a9:e8:c4:9d:e9:13:64:e6: a1:b6:62:76:07:03:1b:ee:b9:40:1c:c6:88:cf:c1: 6b:4d:ad:da:c3:a2:12:e8:dc:e2:df:9a:dc:dd:42: 56:81:4f:c1:16:b9:b9:e3:f0:e3:14:15:06:f7:cf: c5:87:82:da:08:c2:16:15:31:44:53:78:ce:69:51: fe:cd:11:fd:2a:44:cf:6e:0a:dc:52:51:f3:22:ca: 91:ac:0f:55:8c:75:18:e3:24:71:a9:db:ec:9f:79: 23:a8:b9:68:f9:b1:82:e6:ff:f4:dc:4b:ee:71:15: dc:19:cf:d8:59:de:bf:3e:a4:3e:6f:84:d0:c8:20: 3f:ae:df:69:3a:c9:a2:af:4e:11:d5:5c:1a:e0:a7: 50:91:11:3f:44:96:16:f2:13:f7:73:d0:fa:77:25: b0:f7:61:9c:d7:71:b7:fb:2d:f7:fa:8a:2a:8f:af: d0:30:16:4f:8c:17:42:fe:cb:c3:35:ff:04:79:83: c7:fe:dd:7e:f6:66:de:3a:58:88:71:73:fc:2d:f3: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:14:FD:E5:29:F3:A2:11:90:A1:A5:82:50:77:6C:EB:81:32:2B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/eaf54f35-82ef-3086-948d-7f841dfe1f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fc:4e:81:a5:b0:6c:b0:9f:b3:02:a2:a3:11:79:cd:79:53: 67:78:45:d2:b4:4d:44:41:23:83:16:5b:f5:61:41:24:59:8e: 4d:74:05:71:12:3d:f8:ec:6e:51:11:b9:a5:00:1a:a8:c4:20: fa:fe:dd:dd:aa:82:2d:28:63:56:df:d9:e4:51:64:5a:99:bf: 29:dc:02:79:df:d3:0a:e8:37:79:ce:da:96:74:21:1b:5d:73: 3a:e0:b6:0e:66:99:04:1a:e3:9c:0d:03:a5:64:a3:c2:44:10: a9:24:57:2f:e9:fd:36:df:35:99:ee:95:48:80:b4:c0:54:9f: f4:bc:03:29:3e:43:4d:91:e6:e1:a4:bf:84:f2:d7:00:63:95: c8:ac:73:aa:28:88:d3:83:56:b3:6d:d0:2f:f1:79:a7:d8:13: 50:e5:d0:da:47:cd:8c:e6:91:c9:e7:1e:bd:ea:09:b4:42:88: 45:e6:f0:a4:18:69:e4:b5:1d:9a:da:f4:d9:8f:15:f5:69:3e: f9:1a:71:9c:60:c9:1a:77:2e:11:b4:c6:58:dc:9f:51:2e:00: 81:42:ef:7a:5d:d0:2f:d4:2e:62:71:f1:02:6d:fe:12:57:57: 99:74:69:c4:96:31:1a:4e:dd:16:8d:19:93:d7:63:d2:61:3d: 58:13:b0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxmYr9O0zpzdM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MGRmMmU0OTUtNTEyMy00YTQ4LWI1ZDQtMTIzNDgwYjcwMGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBSDqbNCdxDbZYVw1PkXZ5PoDr02VB6iXj+6 fUJQy3wmtK6Cdm34KCd8xajO5iazpb9MqejEnekTZOahtmJ2BwMb7rlAHMaIz8Fr Ta3aw6IS6Nzi35rc3UJWgU/BFrm54/DjFBUG98/Fh4LaCMIWFTFEU3jOaVH+zRH9 KkTPbgrcUlHzIsqRrA9VjHUY4yRxqdvsn3kjqLlo+bGC5v/03EvucRXcGc/YWd6/ PqQ+b4TQyCA/rt9pOsmir04R1Vwa4KdQkRE/RJYW8hP3c9D6dyWw92Gc13G3+y33 +ooqj6/QMBZPjBdC/svDNf8EeYPH/t1+9mbeOliIcXP8LfMQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8U/eUp86IRkKGlglB3bOuBMit1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZWFmNTRmMzUtODJlZi0z MDg2LTk0OGQtN2Y4NDFkZmUxZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ItUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr8ToGlsGywn7MCoqMRec15U2d4RdK0TURBI4MWW/VhQSRZjk10BXES PfjsblERuaUAGqjEIPr+3d2qgi0oY1bf2eRRZFqZvyncAnnf0wroN3nO2pZ0IRtd czrgtg5mmQQa45wNA6Vko8JEEKkkVy/p/TbfNZnulUiAtMBUn/S8Ayk+Q02R5uGk v4Ty1wBjlcisc6ooiNODVrNt0C/xeafYE1Dl0NpHzYzmkcnnHr3qCbRCiEXm8KQY aeS1HZra9NmPFfVpPvkacZxgyRp3LhG0xljcn1EuAIFC73pd0C/ULmJx8QJt/hJX V5l0acSWMRpO3RaNGZPXY9JhPVgTsLM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:18 2025 by rpki-client