$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa File: 1baebdf9-c73a-3b30-890f-367325e218ba.roa (raw, json) Hash identifier: 1HYpKJbwNOAMKGxiBV2J0MEuZwPNzlY/cethbP11mLc= Subject key identifier: CD:30:61:49:6A:99:F2:35:92:11:D2:8F:2A:5E:CC:0E:D4:7D:26:52 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584F0D6CEC53A7009380C2CE64F0 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 108.179.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ec:53:a7:00:93:80:c2:ce:64:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=a14a0359-8484-4abf-a112-751fc1089750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:18:1c:63:d5:ea:ce:5c:9a:e7:e0:bd:c1: 4f:9c:2e:be:a6:83:07:b7:2e:31:f2:0b:e1:21:fd: d0:b1:9e:61:f4:d4:07:ac:73:58:71:60:30:c3:0c: aa:f9:ed:18:12:f7:8f:0d:e5:69:20:86:1c:58:08: 1d:d4:87:95:b2:68:67:4b:9f:75:dd:4f:df:fb:09: 95:c1:03:36:9b:f7:ce:2b:28:27:bc:a0:c3:b7:95: 25:62:53:2a:7c:66:f2:00:5a:ec:18:6d:91:d6:a9: b0:a9:0d:9c:20:4b:d5:7f:c5:75:f7:da:c1:80:39: fa:4e:e9:50:2c:a0:76:a7:3c:24:94:56:d9:1a:21: 51:b2:62:32:e7:f0:25:5e:f7:64:f0:2d:9c:bd:20: b0:9d:29:af:ad:58:98:a1:c8:f7:b6:7d:36:18:be: f8:52:51:ec:94:e7:b5:02:5c:e0:14:a6:21:46:37: 5c:f7:32:b4:01:b9:d9:a8:ff:d7:03:fc:1a:97:95: 1e:3c:d0:43:02:c1:e1:b1:61:09:38:08:c6:b8:a3: ff:e4:83:bd:86:02:bd:30:40:85:92:f8:3f:d7:1f: a1:db:0c:a2:e1:70:16:8b:84:f6:39:ad:ff:c6:a7: 68:7e:52:44:af:dc:28:f7:68:0b:24:ba:f3:c0:f6: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:30:61:49:6A:99:F2:35:92:11:D2:8F:2A:5E:CC:0E:D4:7D:26:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/1baebdf9-c73a-3b30-890f-367325e218ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 108.179.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e0:0e:9b:cc:f7:fa:8b:3c:73:46:e0:00:5e:5f:0b:b0:35: 9a:0a:cc:c0:e9:f2:03:59:f0:08:ea:7a:e0:64:47:59:12:e1: e5:a8:d3:69:b5:8d:56:2d:f9:9a:5c:bf:c4:87:de:c8:c9:26: 35:ce:60:09:9f:30:bf:ac:04:c1:59:d2:d6:06:54:fe:dc:50: 1b:5e:67:70:17:24:1e:89:c0:21:09:01:f0:6c:07:1b:b1:f8: 14:8a:d2:11:4b:a0:a2:4f:2c:55:1a:a5:9e:21:8f:ec:cd:2f: 3a:2a:85:3a:2f:86:b1:82:e3:1f:be:9d:b9:0b:20:79:75:80: 69:c2:b6:5d:07:29:c6:84:3d:8f:7c:06:18:fe:55:16:8b:70: 25:02:05:ee:e3:d0:55:d4:9e:8a:e1:8f:eb:ab:6b:03:08:06: ed:0c:1a:9b:f8:ca:65:9d:37:88:0b:68:02:7b:0b:dc:3f:6a: 59:88:63:f7:84:d1:78:69:e4:a5:19:51:13:3b:a7:98:0e:aa: 16:df:88:8f:e5:d4:69:44:49:5b:44:33:a6:fb:5b:8a:fe:cc: 05:ea:88:ea:11:6a:a6:f3:a2:f4:00:85:09:b4:70:9a:f2:2a: d8:fa:08:a4:8a:6d:a9:e7:77:a9:4d:50:e5:5b:d4:3e:d4:31: 70:6c:ed:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOxTpwCTgMLOZPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YTE0YTAzNTktODQ4NC00YWJmLWExMTItNzUxZmMxMDg5NzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BkYHGPV6s5cmufgvcFPnC6+poMHty4x8gvh If3QsZ5h9NQHrHNYcWAwwwyq+e0YEvePDeVpIIYcWAgd1IeVsmhnS5913U/f+wmV wQM2m/fOKygnvKDDt5UlYlMqfGbyAFrsGG2R1qmwqQ2cIEvVf8V199rBgDn6TulQ LKB2pzwklFbZGiFRsmIy5/AlXvdk8C2cvSCwnSmvrViYocj3tn02GL74UlHslOe1 AlzgFKYhRjdc9zK0AbnZqP/XA/wal5UePNBDAsHhsWEJOAjGuKP/5IO9hgK9MECF kvg/1x+h2wyi4XAWi4T2Oa3/xqdoflJEr9wo92gLJLrzwPYROQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0wYUlqmfI1khHSjypezA7UfSZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMWJhZWJkZjktYzczYS0z YjMwLTg5MGYtMzY3MzI1ZTIxOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzgDpvM9/qLPHNG4ABeXwuwNZoKzMDp8gNZ8AjqeuBkR1kS4eWo02m1 jVYt+Zpcv8SH3sjJJjXOYAmfML+sBMFZ0tYGVP7cUBteZ3AXJB6JwCEJAfBsBxux +BSK0hFLoKJPLFUapZ4hj+zNLzoqhTovhrGC4x++nbkLIHl1gGnCtl0HKcaEPY98 Bhj+VRaLcCUCBe7j0FXUnorhj+urawMIBu0MGpv4ymWdN4gLaAJ7C9w/almIY/eE 0Xhp5KUZURM7p5gOqhbfiI/l1GlESVtEM6b7W4r+zAXqiOoRaqbzovQAhQm0cJry Ktj6CKSKbannd6lNUOVb1D7UMXBs7Xo= -----END CERTIFICATE-----Generated at Tue Sep 22 18:46:43 2026 by rpki-client