$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa File: 0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa (raw, json) Hash identifier: iZh9coBjzLAnu8liu+i4foFgMGSnYQF6Ypx+sqxMnJA= Subject key identifier: 4A:9F:95:85:35:78:6E:E1:0E:93:54:36:71:6C:79:4F:89:33:F4:88 Certificate issuer: /CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Certificate serial: 010D0C9F4328584B5571CCF50D2D96A0A8128F80 Authority key identifier: 2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 14237 IP address blocks: 216.152.248.0/21 maxlen: 24 2606:e580::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:cc:f5:0d:2d:96:a0:a8:12:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89be2efa-3c2f-46d2-b5e7-cb8d95369063 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=46fd9b10-8058-4eee-8be4-30501b54f3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bb:27:0d:60:1b:18:54:4a:79:0c:7c:19:62: b9:7d:6d:91:77:49:f1:6c:53:88:4f:09:1e:b0:c6: 64:18:20:03:8a:f5:2a:71:95:66:60:95:91:dc:fe: 27:64:b7:34:8d:c3:d4:30:e5:16:a2:4f:a4:3d:96: 0a:6e:b2:b9:38:90:56:67:f1:50:71:f8:fc:08:5b: 64:54:38:5f:fa:be:c6:6f:73:e6:cb:2f:12:d0:b4: ab:9f:99:6c:3f:ad:12:08:e5:f7:71:11:08:a8:1c: 03:55:4c:00:d2:1f:e1:4a:7a:43:76:81:c5:6c:43: 69:28:f0:a4:0e:d7:5f:26:bb:18:70:d0:e6:57:fe: 27:c3:fa:de:a2:05:88:d7:25:7b:e7:70:66:ff:33: 24:00:a6:53:bc:21:a4:8a:20:cd:12:95:fd:e1:4c: 89:02:88:ab:b8:f6:3f:8b:ab:9b:3e:91:86:3d:cc: be:52:a6:97:e3:b3:7e:46:82:76:b9:8d:2c:52:d6: 77:c4:ad:27:d7:40:a3:77:1f:3b:00:a1:b3:41:a0: cd:82:25:53:45:c1:ec:90:a9:ab:71:e9:87:c4:ab: d8:d1:96:46:77:0d:59:a2:a2:b2:69:26:82:4d:24: 34:a2:f3:bf:1d:62:72:20:68:12:b3:b0:96:b3:29: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9F:95:85:35:78:6E:E1:0E:93:54:36:71:6C:79:4F:89:33:F4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/0b541ea5-e7ff-3a00-ac39-abab44ea5935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063/89be2efa-3c2f-46d2-b5e7-cb8d95369063.crl X509v3 Authority Key Identifier: keyid:2B:AE:52:79:C2:10:4E:67:05:19:3C:05:4C:B8:27:EE:1C:A5:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89be2efa-3c2f-46d2-b5e7-cb8d95369063.cer sbgp-ipAddrBlock: critical IPv4: 216.152.248.0/21 IPv6: 2606:e580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c8:07:f2:36:2a:a9:6e:39:84:13:5d:b2:66:be:a3:3f:7d: 49:fc:ea:99:1e:e9:bd:3e:3c:dd:fd:94:7e:c9:28:0a:02:98: 64:f1:52:a6:48:de:af:be:14:b6:dc:5c:de:38:a1:59:54:8d: 74:be:8d:ea:9a:df:f2:39:19:fd:77:76:7d:f0:11:4d:62:c9: 96:4a:41:9c:9a:ad:fc:ee:61:c5:21:a0:03:e9:48:b2:e3:6c: 45:94:7e:dd:a7:2d:b8:3b:d1:97:ac:82:c5:5a:b8:35:d0:a0: 29:78:7e:34:cc:79:38:a2:81:6c:f2:43:64:33:b1:19:53:1c: 5f:38:4a:5e:11:ae:57:bb:94:19:04:5c:15:67:5c:e6:15:43: c1:19:e5:0a:4c:7e:49:2d:bf:f5:8d:3d:45:0b:f5:80:f6:e3: b0:a3:ce:85:80:7a:96:87:da:d1:be:df:10:97:16:8d:e7:db: 1a:c6:f7:ce:10:7b:ea:a1:17:4a:d9:3d:0a:bd:f9:6f:35:fe: 26:f1:07:12:fd:3b:93:a3:67:20:10:76:3d:1d:39:f0:55:b0: 85:cc:2b:a0:e0:d0:39:72:3c:97:72:7c:e3:a0:f9:c1:a6:be: a1:5d:0a:8c:d3:46:3d:0c:c5:57:a0:a0:46:d2:09:d9:ba:60: 32:b1:66:d0 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtVccz1DS2WoKgSj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliZTJlZmEtM2MyZi00NmQyLWI1ZTctY2I4ZDk1MzY5 MDYzMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NDZmZDliMTAtODA1OC00ZWVlLThiZTQtMzA1MDFiNTRmM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbsnDWAbGFRKeQx8GWK5fW2Rd0nxbFOITwke sMZkGCADivUqcZVmYJWR3P4nZLc0jcPUMOUWok+kPZYKbrK5OJBWZ/FQcfj8CFtk VDhf+r7Gb3Pmyy8S0LSrn5lsP60SCOX3cREIqBwDVUwA0h/hSnpDdoHFbENpKPCk DtdfJrsYcNDmV/4nw/reogWI1yV753Bm/zMkAKZTvCGkiiDNEpX94UyJAoiruPY/ i6ubPpGGPcy+UqaX47N+RoJ2uY0sUtZ3xK0n10Cjdx87AKGzQaDNgiVTRcHskKmr cemHxKvY0ZZGdw1ZoqKyaSaCTSQ0ovO/HWJyIGgSs7CWsylEuQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEqflYU1eG7hDpNUNnFseU+JM/SIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OWJl MmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhkOTUzNjkwNjMvMGI1NDFlYTUtZTdmZi0z YTAwLWFjMzktYWJhYjQ0ZWE1OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODliZTJlZmEtM2MyZi00NmQyLWI1 ZTctY2I4ZDk1MzY5MDYzLzg5YmUyZWZhLTNjMmYtNDZkMi1iNWU3LWNiOGQ5NTM2 OTA2My5jcmwwHwYDVR0jBBgwFoAUK65SecIQTmcFGTwFTLgn7hyllaswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OWJlMmVmYS0zYzJmLTQ2ZDItYjVlNy1jYjhk OTUzNjkwNjMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD2Jj4MA0E AgACMAcDBQAmBuWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKvIB/I2KqluOYQTXbJmvqM/fUn86pke6b0+ PN39lH7JKAoCmGTxUqZI3q++FLbcXN44oVlUjXS+jeqa3/I5Gf13dn3wEU1iyZZK QZyarfzuYcUhoAPpSLLjbEWUft2nLbg70ZesgsVauDXQoCl4fjTMeTiigWzyQ2Qz sRlTHF84Sl4Rrle7lBkEXBVnXOYVQ8EZ5QpMfkktv/WNPUUL9YD247CjzoWAepaH 2tG+3xCXFo3n2xrG984Qe+qhF0rZPQq9+W81/ibxBxL9O5OjZyAQdj0dOfBVsIXM K6Dg0DlyPJdyfOOg+cGmvqFdCozTRj0MxVegoEbSCdm6YDKxZtA= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:19 2025 by rpki-client