$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa File: 0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa (raw, json) Hash identifier: yOUQzTMiiz8Amopjugb1YBDkTTqqP+axxspjU6ax6s4= Subject key identifier: 5C:C4:A9:FD:28:77:F7:9E:4A:B3:E4:F5:57:94:50:D7:15:E6:E2:F3 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584B970CEDF38192CDAFC7798480 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 216.157.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ed:f3:81:92:cd:af:c7:79:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=f7f637a4-35ad-4cb4-9b52-d3d9d8763219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:f3:95:dd:d3:d6:13:ee:c3:e4:0c:2a:2c: a4:33:ae:3a:75:a7:aa:ca:16:70:de:43:40:f2:ff: 24:48:58:a9:06:01:29:f4:cf:56:63:95:ae:fd:89: 26:50:b1:67:58:77:13:12:10:e9:d7:a3:18:bc:54: d0:fe:39:5a:60:b6:e7:9f:0c:62:f8:46:bb:95:5a: e9:d4:d4:6a:72:34:42:e9:40:e8:75:e5:42:1e:dd: 40:f3:bd:35:ec:1f:d3:e0:4d:4d:e8:d6:a7:15:37: dc:a4:16:16:fa:c4:69:8e:e1:da:49:dc:0f:ec:29: d1:6f:5b:97:8d:78:19:20:4a:ed:4b:59:fd:f1:4a: e3:cd:80:56:36:3b:16:74:89:fe:b0:28:57:41:0a: f5:b4:bb:b6:1c:0e:96:b9:5d:a6:fe:69:6b:ea:08: 14:14:8e:cd:3c:e6:28:41:c6:dc:98:a5:4f:2f:86: 11:0b:fd:61:8f:1d:2c:8a:6c:a9:64:d4:b5:62:2c: a3:94:ed:a5:46:a0:b3:3d:ba:dc:e9:ad:52:a4:87: 97:56:17:68:e0:97:6b:14:30:0e:27:4b:a1:85:03: 7b:28:8e:4c:f7:7a:2d:72:83:e2:3e:91:60:d5:5f: cc:5f:4e:9e:23:42:01:0c:c2:91:73:d5:57:64:1b: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C4:A9:FD:28:77:F7:9E:4A:B3:E4:F5:57:94:50:D7:15:E6:E2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:63:58:90:79:38:99:ed:ad:cc:a6:d5:53:2a:d7:c4:8e:14: 38:f9:4f:77:2d:3e:b8:de:5c:7a:c3:dd:93:bd:9a:58:0b:26: e0:b0:43:65:ca:84:e8:ed:ec:cc:54:d6:ff:25:2f:86:87:eb: d7:f7:81:a9:26:66:6f:51:3a:ae:ec:a6:99:14:a5:33:7a:ec: b5:7b:8f:52:fd:36:5e:49:20:da:49:83:58:12:15:d7:3c:27: fe:1e:d0:1b:2f:d1:3b:c6:2e:d6:eb:4c:23:a2:ae:89:db:d5: c4:70:3d:71:70:35:0d:d6:28:80:cd:72:42:e7:8a:c7:22:67: 48:dc:0a:ef:34:0b:02:ce:da:89:09:6a:cd:ce:86:ba:7c:9a: 95:a7:dd:99:5b:d5:5b:48:41:f7:8e:90:61:5f:73:16:e1:28: 5b:62:35:21:2c:8b:e9:b2:a9:a0:66:67:70:30:8f:61:88:2f: c7:5e:97:47:a1:38:d1:21:3a:0d:09:dc:cf:ec:7d:07:e2:f6: f2:a1:f6:8c:9d:02:6a:02:37:4f:d0:ac:9a:df:53:d7:79:8c: af:b8:da:80:7b:ec:d8:f8:f6:3e:ce:66:80:c6:55:46:e1:8e: c9:4c:33:fa:26:1b:23:b2:2c:d8:e5:84:01:f1:c7:94:aa:ca: 9c:17:ef:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO3zgZLNr8d5hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZjdmNjM3YTQtMzVhZC00Y2I0LTliNTItZDNkOWQ4NzYzMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBfzld3T1hPuw+QMKiykM646daeqyhZw3kNA 8v8kSFipBgEp9M9WY5Wu/YkmULFnWHcTEhDp16MYvFTQ/jlaYLbnnwxi+Ea7lVrp 1NRqcjRC6UDodeVCHt1A87017B/T4E1N6NanFTfcpBYW+sRpjuHaSdwP7CnRb1uX jXgZIErtS1n98UrjzYBWNjsWdIn+sChXQQr1tLu2HA6WuV2m/mlr6ggUFI7NPOYo QcbcmKVPL4YRC/1hjx0simypZNS1YiyjlO2lRqCzPbrc6a1SpIeXVhdo4JdrFDAO J0uhhQN7KI5M93otcoPiPpFg1V/MX06eI0IBDMKRc9VXZBt67wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzEqf0od/eeSrPk9VeUUNcV5uLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGMyYmM0YzAtYWU0ZC0z MzA0LWI4MGItODgwOTAzYTczNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNjWJB5OJntrcym1VMq18SOFDj5T3ctPrjeXHrD3ZO9mlgLJuCwQ2XK hOjt7MxU1v8lL4aH69f3gakmZm9ROq7sppkUpTN67LV7j1L9Nl5JINpJg1gSFdc8 J/4e0Bsv0TvGLtbrTCOironb1cRwPXFwNQ3WKIDNckLnisciZ0jcCu80CwLO2okJ as3Ohrp8mpWn3Zlb1VtIQfeOkGFfcxbhKFtiNSEsi+myqaBmZ3Awj2GIL8del0eh ONEhOg0J3M/sfQfi9vKh9oydAmoCN0/QrJrfU9d5jK+42oB77Nj49j7OZoDGVUbh jslMM/omGyOyLNjlhAHxx5SqypwX74E= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:15 2025 by rpki-client