$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a84c7ae-f614-33a9-91b0-89c2e72c4434.roa File: 0a84c7ae-f614-33a9-91b0-89c2e72c4434.roa (raw, json) Hash identifier: Q47QoGop7dWlasVGQsBC/8QmUkpHfMl/JHcnvIJLkeo= Subject key identifier: 32:A9:0C:3E:B1:C9:6D:E9:20:A8:4C:71:87:44:43:4E:BB:DD:00:CD Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584AEB126C539124AC7A5FB6B800 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a84c7ae-f614-33a9-91b0-89c2e72c4434.roa Signing time: Wed 20 Aug 2025 10:32:51 +0000 ROA not before: Wed 20 Aug 2025 10:32:51 +0000 ROA not after: Tue 18 Nov 2025 11:32:51 +0000 asID: 14618 IP address blocks: 216.139.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:12:6c:53:91:24:ac:7a:5f:b6:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Aug 20 10:32:51 2025 GMT Not After : Nov 18 11:32:51 2025 GMT Subject: CN=6e9a06af-c536-4cac-9594-e5a50539c50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:18:3e:c7:99:f6:58:76:96:b3:c4:b3:fe:ff: 0f:63:c7:83:4d:e4:13:ce:bc:ae:7c:4d:26:51:e1: 94:f6:1d:1c:fa:38:15:18:df:1a:a8:7b:48:6f:6f: e3:51:fd:b7:d9:1a:a2:5d:6a:4d:c1:d5:ec:fb:27: ab:9f:11:89:66:76:6e:3d:0f:a8:4c:54:b8:5e:b6: f9:7f:8c:d2:2d:a9:22:e9:3e:b6:c4:ce:70:2b:8f: 59:7d:6f:61:66:82:ad:0b:56:1d:91:6a:f0:9a:cf: fb:a9:66:f1:f8:70:37:cc:1e:da:47:96:21:b2:20: bc:0f:d2:4e:e5:c4:da:b6:82:a1:01:e0:a3:fd:09: 85:05:68:38:ec:6f:25:b2:e5:a5:8a:f6:89:b3:9e: 3a:e0:8a:5a:77:f8:09:29:ed:26:58:7d:fd:4e:24: 14:66:3d:f2:2d:d5:1f:7d:9e:5c:dd:0e:63:64:59: 26:8c:21:de:0e:5e:bc:4b:5a:ba:e0:59:9a:04:31: 17:77:a0:0b:f6:b0:d2:24:38:2a:4a:59:f9:8f:ee: aa:ac:1d:bf:c2:82:5e:74:9a:fe:50:8a:cb:12:ed: 4d:8a:2d:ca:39:ce:ce:dc:be:e9:97:15:1b:44:23: 7a:d9:aa:14:b8:65:2c:72:c0:b6:81:a7:db:c7:35: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:0C:3E:B1:C9:6D:E9:20:A8:4C:71:87:44:43:4E:BB:DD:00:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0a84c7ae-f614-33a9-91b0-89c2e72c4434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.139.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b3:11:66:7f:94:93:25:a4:09:99:0d:06:37:bb:cf:33:ff: 07:e5:01:7e:4f:cc:df:e7:c5:a1:d0:5d:8a:13:4c:12:64:83: de:d7:14:6e:10:6c:5d:48:9e:82:83:46:0d:34:e2:34:3b:f4: 81:b7:02:c9:b6:0d:45:69:6a:79:5d:17:46:98:c7:b6:9f:d9: bb:14:8c:ed:f3:aa:78:07:f7:c6:55:8b:1b:6f:69:04:79:20: b1:91:88:30:00:37:c7:87:8a:15:52:6f:4e:88:b5:d6:ce:77: 9a:49:bb:ed:46:c7:68:43:7f:45:e9:c1:08:62:d8:af:45:05: 68:1a:b9:36:5e:93:09:c6:60:1d:51:c8:57:be:d0:ec:94:27: 86:1b:7e:9e:aa:7a:93:b6:56:48:5c:20:71:6a:8e:f8:0e:45: 8d:f6:81:6a:dc:e1:d1:44:56:e1:08:2e:dd:ca:75:77:76:18: b5:42:c3:60:c7:ea:01:03:60:0f:d4:1a:41:75:3f:60:e8:9b: fc:02:3f:f7:40:33:4e:ce:ac:0f:ad:4d:21:df:20:d5:03:63: 5f:26:65:29:db:8c:99:31:cf:c1:e1:5d:ae:c2:28:5a:4d:b8: fa:0e:d6:dd:b7:d5:d4:19:77:50:7e:ec:21:87:24:62:90:2c: db:0e:75:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrEmxTkSSsel+2uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MDgyMDEwMzI1MVoXDTI1MTExODExMzI1MVowLzEtMCsGA1UEAxMk NmU5YTA2YWYtYzUzNi00Y2FjLTk1OTQtZTVhNTA1MzljNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhg+x5n2WHaWs8Sz/v8PY8eDTeQTzryufE0m UeGU9h0c+jgVGN8aqHtIb2/jUf232RqiXWpNwdXs+yernxGJZnZuPQ+oTFS4Xrb5 f4zSLaki6T62xM5wK49ZfW9hZoKtC1YdkWrwms/7qWbx+HA3zB7aR5YhsiC8D9JO 5cTatoKhAeCj/QmFBWg47G8lsuWlivaJs5464Ipad/gJKe0mWH39TiQUZj3yLdUf fZ5c3Q5jZFkmjCHeDl68S1q64FmaBDEXd6AL9rDSJDgqSln5j+6qrB2/woJedJr+ UIrLEu1Nii3KOc7O3L7plxUbRCN62aoUuGUscsC2gafbxzXiuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKpDD6xyW3pIKhMcYdEQ0673QDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGE4NGM3YWUtZjYxNC0z M2E5LTkxYjAtODljMmU3MmM0NDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ItbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyzEWZ/lJMlpAmZDQY3u88z/wflAX5PzN/nxaHQXYoTTBJkg97XFG4Q bF1InoKDRg004jQ79IG3Asm2DUVpanldF0aYx7af2bsUjO3zqngH98ZVixtvaQR5 ILGRiDAAN8eHihVSb06ItdbOd5pJu+1Gx2hDf0XpwQhi2K9FBWgauTZekwnGYB1R yFe+0OyUJ4Ybfp6qepO2VkhcIHFqjvgORY32gWrc4dFEVuEILt3KdXd2GLVCw2DH 6gEDYA/UGkF1P2Dom/wCP/dAM07OrA+tTSHfINUDY18mZSnbjJkxz8HhXa7CKFpN uPoO1t231dQZd1B+7CGHJGKQLNsOdaE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:24:43 2025 by rpki-client