$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa File: d1acf045-6547-38ea-ae4b-98388f48d9f8.roa (raw, json) Hash identifier: RUQi6jWeQ5bPSuXIjJhn5IqYRfHMtrGQ0CFmA2kwdfw= Subject key identifier: 1E:F2:41:E3:26:9C:EE:B7:CD:99:91:6F:2E:3F:EC:DE:C5:B0:82:F0 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F4328584D9FB55F1AF5BC6A5A2226EC00 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 8075 IP address blocks: 216.9.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:5f:1a:f5:bc:6a:5a:22:26:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=52562f9c-b214-4e99-a07b-9ee262309f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c8:19:d0:ce:d1:01:71:da:c5:67:7d:51:2e: a9:5c:c7:46:23:0f:72:5e:05:7e:e2:43:e7:07:78: c8:b6:1a:cb:a2:ed:b2:9b:0c:2d:78:e9:57:01:e5: c7:60:2b:06:c1:ad:98:4c:96:7b:eb:f3:7d:c1:b5: 4a:95:55:48:1d:c9:83:bb:9b:65:e4:64:31:98:d8: cd:ee:6a:fa:b3:de:c8:1d:47:90:55:a7:8c:0f:4b: 31:ad:a3:f6:38:f5:ec:6e:4c:6b:f3:be:1f:01:ac: 42:d4:fa:96:b8:56:c3:5a:f6:8d:21:21:5d:ec:56: 07:aa:12:01:5d:6c:35:ec:90:21:77:be:49:79:f8: 6e:c4:e7:ba:18:07:9c:8e:bb:cd:b7:72:30:de:d9: c0:0e:c1:03:ff:9a:fa:91:e2:da:ec:69:8a:df:79: 2d:ac:9a:09:db:0b:cf:5a:f7:f3:c1:6b:56:7d:ba: dd:4f:82:0e:24:33:db:02:45:ea:86:75:85:06:05: 44:c5:9d:40:3c:70:f5:f4:77:66:9f:e4:aa:d8:e2: 84:17:d5:99:3d:d5:b8:36:45:5c:ae:c9:c1:b9:40: 31:9c:b6:ec:40:6c:33:68:3d:db:51:e8:5b:f8:2b: d5:a3:28:30:4e:f3:5e:55:29:d7:d1:dd:ca:22:65: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F2:41:E3:26:9C:EE:B7:CD:99:91:6F:2E:3F:EC:DE:C5:B0:82:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/d1acf045-6547-38ea-ae4b-98388f48d9f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 216.9.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:64:ed:11:40:4a:ec:d3:5b:59:71:d6:8d:e4:ba:f5:4c:8c: f4:a3:73:d2:a4:bf:63:0c:3b:78:07:df:49:b2:6d:b7:bd:18: a1:ac:07:76:cb:ef:c6:f4:2a:cb:5c:9b:8e:df:73:98:cd:a6: 28:d3:81:88:c2:57:42:d6:c6:54:b2:d4:53:ff:87:02:5e:d8: a5:b6:e8:f7:45:3f:25:1d:b1:cf:96:73:6d:83:0a:56:2f:d5: c4:b5:67:6f:f4:6e:ed:bc:03:6d:18:4d:3e:8f:f3:2e:a2:2f: eb:e6:9d:ae:08:57:e0:e7:75:af:33:00:b3:a3:6b:b8:3c:df: 9d:40:f5:51:47:39:6f:99:36:95:48:23:17:f0:7d:93:0b:6b: fb:be:55:ad:15:18:76:37:2f:77:24:95:87:8e:92:bf:4e:89: 44:cf:f1:95:63:6f:c1:7d:1d:25:6b:3d:46:40:4d:6d:29:3e: 69:87:a1:cd:3b:78:62:de:1b:37:b6:bf:9b:66:f1:ed:5c:75: 6a:74:70:5f:d7:fe:1a:4f:9c:e5:10:e9:44:8c:35:84:cf:ea: e0:3a:e5:ce:5a:dd:b1:cf:a8:d8:cc:cf:a9:38:69:50:f4:3d: dc:dd:25:56:45:55:26:67:50:cd:7e:37:d6:1b:b4:bf:da:a9: 4c:70:aa:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftV8a9bxqWiIm7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk NTI1NjJmOWMtYjIxNC00ZTk5LWEwN2ItOWVlMjYyMzA5ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cgZ0M7RAXHaxWd9US6pXMdGIw9yXgV+4kPn B3jIthrLou2ymwwteOlXAeXHYCsGwa2YTJZ76/N9wbVKlVVIHcmDu5tl5GQxmNjN 7mr6s97IHUeQVaeMD0sxraP2OPXsbkxr874fAaxC1PqWuFbDWvaNISFd7FYHqhIB XWw17JAhd75JefhuxOe6GAecjrvNt3Iw3tnADsED/5r6keLa7GmK33ktrJoJ2wvP WvfzwWtWfbrdT4IOJDPbAkXqhnWFBgVExZ1APHD19Hdmn+Sq2OKEF9WZPdW4NkVc rsnBuUAxnLbsQGwzaD3bUehb+CvVoygwTvNeVSnX0d3KImWOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7yQeMmnO63zZmRby4/7N7FsILwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvZDFhY2YwNDUtNjU0Ny0z OGVhLWFlNGItOTgzODhmNDhkOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AnEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhk7RFASuzTW1lx1o3kuvVMjPSjc9Kkv2MMO3gH30mybbe9GKGsB3bL 78b0Kstcm47fc5jNpijTgYjCV0LWxlSy1FP/hwJe2KW26PdFPyUdsc+Wc22DClYv 1cS1Z2/0bu28A20YTT6P8y6iL+vmna4IV+Dnda8zALOja7g8351A9VFHOW+ZNpVI IxfwfZMLa/u+Va0VGHY3L3cklYeOkr9OiUTP8ZVjb8F9HSVrPUZATW0pPmmHoc07 eGLeGze2v5tm8e1cdWp0cF/X/hpPnOUQ6USMNYTP6uA65c5a3bHPqNjMz6k4aVD0 PdzdJVZFVSZnUM1+N9YbtL/aqUxwql4= -----END CERTIFICATE-----Generated at Wed May 13 10:44:50 2026 by rpki-client