$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa File: 0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa (raw, json) Hash identifier: neXrFMym9md8mk7w/Ab5lFfsT39NEFMnWRU6GsG2ma0= Subject key identifier: 5D:E1:80:DC:3F:A7:07:90:A9:5C:CB:D2:E7:77:86:54:86:D1:E6:67 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D571FB29CB4176319BEE009C0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 216.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b2:9c:b4:17:63:19:be:e0:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=d9f0f1bf-7ec7-42d1-80e5-92da31afd05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9c:82:54:fd:8b:f1:f5:c4:a2:6b:b9:03:1e: 41:dc:a7:d7:3a:6b:71:74:c8:09:c6:0e:a7:b1:98: c9:0c:35:1c:80:e0:74:07:26:86:87:12:8c:53:1b: 00:8c:d9:63:2d:01:ae:0c:9d:f6:6e:96:d8:f8:0e: 51:99:dd:c3:a2:8b:0d:52:7d:3e:0f:e4:bf:39:78: d1:f6:c2:dd:05:9b:f7:d3:8a:64:cf:19:fc:3e:ea: e5:22:aa:d6:b0:f1:7d:a2:1e:14:ff:f6:71:2d:34: e9:df:b7:22:d5:03:e4:b5:98:da:23:d6:cc:74:8a: 1a:ae:7a:bc:82:20:ef:98:af:34:26:0c:07:2d:3a: 67:ff:7e:2f:ba:d6:27:af:df:9b:ac:cc:b2:41:d0: 0d:8f:8f:10:ac:54:12:86:d7:a9:79:d4:77:5b:71: 5d:8e:57:4a:e3:cb:2f:48:ee:ce:c8:8d:22:f8:50: ee:96:e1:ea:e9:b4:96:35:e3:c7:78:49:cb:fa:93: 22:0d:b2:c9:c1:07:6e:cf:b7:c6:0b:66:9c:10:ba: e3:3c:05:7d:8a:d1:76:c8:36:b9:ac:26:41:a5:c0: 12:e8:bf:1f:4c:ed:57:84:2e:f3:e1:c3:c9:6d:56: 0f:98:40:15:91:03:11:2b:31:80:64:12:67:fa:2e: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E1:80:DC:3F:A7:07:90:A9:5C:CB:D2:E7:77:86:54:86:D1:E6:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9e:c5:84:e3:43:fa:48:0b:19:10:56:f4:62:35:15:5b:fd: f1:b0:fe:46:c7:8f:7f:df:10:3a:e0:7a:cd:b3:52:27:c3:2d: 9b:0c:04:56:dc:cd:97:84:51:a1:40:c2:96:f1:e4:b8:a0:b2: f0:13:17:1d:5c:7f:80:f9:e8:2c:40:96:fb:d7:28:32:49:d4: b8:42:ba:3b:f0:49:27:ad:d8:63:ca:de:ac:57:69:dc:6d:08: 6f:b9:69:56:d6:d2:d5:57:69:d9:71:55:38:d3:d5:dc:90:a6: 0c:39:ba:10:87:d0:b1:05:07:b0:23:6b:2d:e2:83:3a:cf:a6: 1c:67:75:d8:e9:43:3a:32:03:f0:4f:4b:2b:bd:b8:1a:de:ed: d5:35:39:af:4b:7e:04:51:c2:a5:84:31:c4:60:87:23:58:dc: 30:0e:2c:ab:68:f2:2e:53:50:08:21:c1:08:39:a8:b6:f4:99: 12:6a:5b:6c:5c:de:86:53:3c:46:5b:c9:b5:b8:f4:12:6f:f4: 8d:1f:e8:bc:bb:b9:b9:ee:6f:b9:9f:1e:e6:d4:df:e2:b3:a6: 4a:0c:da:53:89:86:6d:0d:3c:c5:9c:0c:4e:5f:5b:d1:82:3c: a0:bf:22:73:ce:72:ab:90:14:88:1e:91:9d:44:62:17:46:80: 7c:03:6a:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7KctBdjGb7gCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ZDlmMGYxYmYtN2VjNy00MmQxLTgwZTUtOTJkYTMxYWZkMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpyCVP2L8fXEomu5Ax5B3KfXOmtxdMgJxg6n sZjJDDUcgOB0ByaGhxKMUxsAjNljLQGuDJ32bpbY+A5Rmd3DoosNUn0+D+S/OXjR 9sLdBZv304pkzxn8PurlIqrWsPF9oh4U//ZxLTTp37ci1QPktZjaI9bMdIoarnq8 giDvmK80JgwHLTpn/34vutYnr9+brMyyQdANj48QrFQShtepedR3W3FdjldK48sv SO7OyI0i+FDuluHq6bSWNePHeEnL+pMiDbLJwQduz7fGC2acELrjPAV9itF2yDa5 rCZBpcAS6L8fTO1XhC7z4cPJbVYPmEAVkQMRKzGAZBJn+i4O/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3hgNw/pweQqVzL0ud3hlSG0eZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGMyYmM0YzAtYWU0ZC0z MzA0LWI4MGItODgwOTAzYTczNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeexYTjQ/pICxkQVvRiNRVb/fGw/kbHj3/fEDrges2zUifDLZsMBFbc zZeEUaFAwpbx5LigsvATFx1cf4D56CxAlvvXKDJJ1LhCujvwSSet2GPK3qxXadxt CG+5aVbW0tVXadlxVTjT1dyQpgw5uhCH0LEFB7Ajay3igzrPphxnddjpQzoyA/BP Syu9uBre7dU1Oa9LfgRRwqWEMcRghyNY3DAOLKto8i5TUAghwQg5qLb0mRJqW2xc 3oZTPEZbybW49BJv9I0f6Ly7ubnub7mfHubU3+KzpkoM2lOJhm0NPMWcDE5fW9GC PKC/InPOcquQFIgekZ1EYhdGgHwDaiE= -----END CERTIFICATE-----Generated at Fri Apr 17 10:47:39 2026 by rpki-client