$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa File: 2b29125c-eb49-30d5-97db-a44c474b27a9.roa (raw, json) Hash identifier: FOcAisCcqA/4RmsV30PfdRPbcd1SdiCylpmy0e1B9XA= Subject key identifier: 5B:5B:78:82:97:CC:DC:6F:A8:AE:DA:8C:EE:70:CF:68:7A:72:4D:3A Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584F506D47337FF2BC25C8EA9580 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 143.244.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:47:33:7f:f2:bc:25:c8:ea:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=9a02dc83-1cd2-445b-a656-52d1923ee61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:67:d6:3e:a9:9a:f8:30:07:3b:19:a9:e5: 66:7b:5a:77:5a:44:05:6b:1b:19:b4:1a:40:30:84: d2:f6:c7:e4:47:f3:a5:3c:8c:b3:da:28:21:24:5f: 8f:f6:4a:da:07:42:73:67:4a:c8:b1:90:67:fb:2b: a3:8f:c2:9c:d6:b5:66:c7:cd:5b:25:87:4e:5f:3a: 2e:0f:5f:70:55:a3:8e:c6:d1:3a:6c:c0:ac:8c:59: e8:ea:8b:ee:5d:0a:4b:06:02:2e:18:9d:7b:e8:89: 06:8b:bb:31:2d:f9:e4:5d:2b:0c:c6:78:eb:2d:72: 49:95:65:0c:ad:63:d2:e6:25:10:55:e5:92:cd:60: 40:9c:14:a9:72:32:e1:04:a9:be:5f:e7:c6:90:f4: f4:92:3d:f7:2c:e1:5b:e3:ab:cf:34:2e:25:89:1a: 97:cb:b7:be:dc:1a:36:6f:15:d3:8d:7b:f3:01:dd: 13:a3:ed:0d:0f:24:5e:55:51:8d:98:d9:12:53:21: 83:4e:08:91:f7:eb:fb:b2:44:3e:b6:c1:1f:1e:7d: a1:e0:87:5d:6b:55:9b:30:18:6e:ea:f6:0d:7b:3c: 67:67:35:d1:c3:2f:a9:e4:45:28:5f:da:f4:1a:b4: a2:25:8f:c8:8f:46:67:2b:d5:2d:39:a6:2e:8d:a9: ba:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5B:78:82:97:CC:DC:6F:A8:AE:DA:8C:EE:70:CF:68:7A:72:4D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2b29125c-eb49-30d5-97db-a44c474b27a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 143.244.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ad:da:85:92:e9:35:9a:02:80:55:0c:c7:c5:5c:05:6c:fc: 5c:c7:9c:d1:03:35:63:3e:2d:18:65:c2:45:f8:08:40:a3:64: 3b:f5:35:ec:98:09:1d:41:5c:15:32:cf:cf:d6:3c:80:bb:80: e4:db:81:c8:08:83:29:2f:5a:f9:f8:46:ec:d2:46:ab:60:41: 54:73:d4:3c:e7:93:84:07:f7:30:c8:d4:78:0d:8d:a2:3c:32: 38:d2:0a:27:f6:5e:21:78:e7:27:f1:e8:70:ec:9e:cf:85:c8: ad:46:1f:87:d7:d9:34:ab:b9:f8:22:f2:32:52:73:b2:78:d1: 27:4f:17:f2:b9:99:ed:d6:68:b7:2f:5d:cf:ff:10:f4:37:8a: c7:83:c6:45:19:cc:31:80:7b:f7:60:93:59:bc:58:d5:33:26: 02:c2:6a:90:8d:cd:fe:0a:72:41:07:19:fa:fe:24:08:8f:dd: 82:f2:e1:9b:95:c1:f5:85:e1:12:6b:f3:c4:67:36:de:08:8a: 7e:31:68:fc:64:56:a1:42:d0:38:94:58:78:98:33:21:62:67: ac:01:5d:fe:2c:54:96:c8:94:12:7d:d4:19:59:07:87:09:29: 76:3c:a0:f2:0c:92:cd:51:60:16:b9:ba:0e:8d:cb:d5:cd:e5: 40:b2:0e:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUczf/K8JcjqlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk OWEwMmRjODMtMWNkMi00NDViLWE2NTYtNTJkMTkyM2VlNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9xn1j6pmvgwBzsZqeVme1p3WkQFaxsZtBpA MITS9sfkR/OlPIyz2ighJF+P9kraB0JzZ0rIsZBn+yujj8Kc1rVmx81bJYdOXzou D19wVaOOxtE6bMCsjFno6ovuXQpLBgIuGJ176IkGi7sxLfnkXSsMxnjrLXJJlWUM rWPS5iUQVeWSzWBAnBSpcjLhBKm+X+fGkPT0kj33LOFb46vPNC4liRqXy7e+3Bo2 bxXTjXvzAd0To+0NDyReVVGNmNkSUyGDTgiR9+v7skQ+tsEfHn2h4Idda1WbMBhu 6vYNezxnZzXRwy+p5EUoX9r0GrSiJY/Ij0ZnK9UtOaYujam6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtbeIKXzNxvqK7ajO5wz2h6ck06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMmIyOTEyNWMtZWI0OS0z MGQ1LTk3ZGItYTQ0YzQ3NGIyN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/RQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOt2oWS6TWaAoBVDMfFXAVs/FzHnNEDNWM+LRhlwkX4CECjZDv1NeyY CR1BXBUyz8/WPIC7gOTbgcgIgykvWvn4RuzSRqtgQVRz1Dznk4QH9zDI1HgNjaI8 MjjSCif2XiF45yfx6HDsns+FyK1GH4fX2TSrufgi8jJSc7J40SdPF/K5me3WaLcv Xc//EPQ3iseDxkUZzDGAe/dgk1m8WNUzJgLCapCNzf4KckEHGfr+JAiP3YLy4ZuV wfWF4RJr88RnNt4Iin4xaPxkVqFC0DiUWHiYMyFiZ6wBXf4sVJbIlBJ91BlZB4cJ KXY8oPIMks1RYBa5ug6Ny9XN5UCyDuw= -----END CERTIFICATE-----Generated at Mon Sep 28 23:22:46 2026 by rpki-client