$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa File: 2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa (raw, json) Hash identifier: B18GdBGIwz5NmtjODKtIEN3SzkqHVz2AiQvDSIhg1TA= Subject key identifier: 85:54:89:8D:1B:12:0C:97:1B:67:73:89:2B:C2:B2:3F:BC:D0:67:75 Certificate issuer: /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Certificate serial: 010D0C9F4328584D44FA4DBB23FBC8977A4F0200 Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 8987 IP address blocks: 173.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4d:bb:23:fb:c8:97:7a:4f:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=8a896e4c-e2d0-423a-9f37-89518bfe9222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:32:5d:9b:47:2a:fd:98:ba:2b:e4:48:65: ee:36:1d:f5:68:f6:08:fb:d7:0b:0f:e9:d2:44:99: d8:9a:c5:67:60:46:79:16:1d:74:90:1f:55:e2:a5: 2c:e0:91:f9:09:9f:d9:0d:89:93:f0:62:79:91:a2: ed:56:b4:1e:db:47:e0:b8:bd:e0:2a:ec:94:a2:99: 13:64:05:d4:8d:a0:02:0f:7f:8c:f0:fa:ec:49:79: 2a:8c:98:17:56:c2:08:6c:1c:14:75:49:de:93:9a: fa:d4:cc:9c:af:a6:c8:15:17:54:5b:ed:ef:4f:76: 5c:8f:fc:f2:d9:50:03:a1:36:84:6a:53:81:12:83: 79:0a:66:cc:9b:ec:c3:eb:d0:32:82:0c:dc:0c:e6: 9e:5a:d8:7c:e4:c6:ed:71:fa:d7:9c:ee:ca:dc:7e: 39:22:bf:00:b0:8f:d7:72:c0:21:f4:74:27:c9:bb: 43:a0:69:33:3c:34:59:41:c1:bc:e2:1e:ab:a9:02: 40:30:c0:b8:9e:4f:b0:40:11:eb:0d:d5:b7:c9:0b: 97:1c:63:5b:9d:b8:87:26:7e:ce:a0:07:9c:d2:96: d2:b0:82:04:77:01:28:c1:2c:6d:38:c3:a4:cb:61: 35:da:e6:19:ac:5e:22:ce:e9:d1:50:ed:24:75:63: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:54:89:8D:1B:12:0C:97:1B:67:73:89:2B:C2:B2:3F:BC:D0:67:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/2e2c0e80-b8a1-3375-a16f-4c3ae64a0562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl X509v3 Authority Key Identifier: keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer sbgp-ipAddrBlock: critical IPv4: 173.252.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f7:c9:7b:ce:31:73:2d:6d:65:b9:84:65:05:ba:30:d4:1b: e2:5e:78:da:e0:02:a8:42:ae:38:3c:04:d0:0f:a6:6f:aa:e2: dd:2e:02:93:b5:a3:85:14:fa:aa:01:59:f0:b0:5f:64:1a:b1: da:a8:db:a5:c1:b4:44:21:3f:dd:be:9a:a8:f6:ab:32:00:4b: d1:95:84:a5:14:73:29:5b:15:18:6b:e6:38:61:4c:66:43:95: 54:4f:35:b2:2b:e6:2a:81:bb:44:e3:dd:0c:a3:ed:03:d1:21: 81:0c:4e:a9:e8:5b:75:ba:19:3c:04:41:16:5e:8d:5c:43:37: 57:92:1f:41:e5:97:f6:f4:06:b4:00:80:eb:bd:51:f3:97:b6: bb:d4:5e:54:b4:80:cf:f8:90:f8:71:67:ec:43:55:0f:c4:49: 97:57:5a:34:16:91:3e:2b:24:66:be:13:e4:d2:0c:17:22:bd: 5b:9e:d9:70:b4:d8:ef:92:df:a5:82:a9:1d:f7:e6:c1:39:a3: 0a:c2:65:ae:4a:c2:cb:30:9a:54:49:4f:31:31:c2:6e:2b:d1: de:0b:65:55:3e:14:f0:be:8e:ff:9e:95:0b:e8:ea:30:ae:d4: 11:f6:b3:ad:35:96:8f:8a:92:7c:8b:39:d6:bb:bd:0f:80:23: de:8b:be:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+k27I/vIl3pPAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUw MGJjMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OGE4OTZlNGMtZTJkMC00MjNhLTlmMzctODk1MThiZmU5MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7IyXZtHKv2YuivkSGXuNh31aPYI+9cLD+nS RJnYmsVnYEZ5Fh10kB9V4qUs4JH5CZ/ZDYmT8GJ5kaLtVrQe20fguL3gKuyUopkT ZAXUjaACD3+M8PrsSXkqjJgXVsIIbBwUdUnek5r61Mycr6bIFRdUW+3vT3Zcj/zy 2VADoTaEalOBEoN5CmbMm+zD69AyggzcDOaeWth85MbtcfrXnO7K3H45Ir8AsI/X csAh9HQnybtDoGkzPDRZQcG84h6rqQJAMMC4nk+wQBHrDdW3yQuXHGNbnbiHJn7O oAec0pbSsIIEdwEowSxtOMOky2E12uYZrF4izunRUO0kdWN1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVUiY0bEgyXG2dziSvCsj+80Gd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OWIw ODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvMmUyYzBlODAtYjhhMS0z Mzc1LWExNmYtNGMzYWU2NGEwNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODliMDg3N2YtZjdhYy00YzEzLTlh MTAtYjAyMzU4ZWUwMGJjLzg5YjA4NzdmLWY3YWMtNGMxMy05YTEwLWIwMjM1OGVl MDBiYy5jcmwwHwYDVR0jBBgwFoAU4qqXMdzDv7nFqcRXYAVtTrwbvKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIz NThlZTAwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv3yXvOMXMtbWW5hGUFujDUG+JeeNrgAqhCrjg8BNAPpm+q4t0uApO1 o4UU+qoBWfCwX2Qasdqo26XBtEQhP92+mqj2qzIAS9GVhKUUcylbFRhr5jhhTGZD lVRPNbIr5iqBu0Tj3Qyj7QPRIYEMTqnoW3W6GTwEQRZejVxDN1eSH0Hll/b0BrQA gOu9UfOXtrvUXlS0gM/4kPhxZ+xDVQ/ESZdXWjQWkT4rJGa+E+TSDBcivVue2XC0 2O+S36WCqR335sE5owrCZa5KwsswmlRJTzExwm4r0d4LZVU+FPC+jv+elQvo6jCu 1BH2s601lo+KknyLOda7vQ+AI96Lvj8= -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:35 2026 by rpki-client