$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa File: 2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa (raw, json) Hash identifier: W1+tGrfT5Bp3btAscjSd2xQyT8LDGNKZNvMvz0Xpolw= Subject key identifier: 00:41:02:A2:AD:95:36:CC:0E:D5:B1:F1:F6:31:D9:2B:8D:C1:3E:9C Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584B970CEE3E4CF20A970EFFAA80 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 216.157.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ee:3e:4c:f2:0a:97:0e:ff:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=7abd6900-3a06-49ff-a29c-62e8f9435bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:b6:42:61:4f:2f:4b:76:b0:88:f7:24:14: 59:af:60:2e:be:60:22:7d:8c:30:5e:d6:d8:17:09: 7a:fb:49:4e:b0:72:c4:fc:ee:e0:53:ac:a6:13:9a: 2c:88:4d:90:20:42:ab:d8:f8:fe:51:ed:41:eb:98: 3e:18:38:1e:10:64:96:33:b4:e5:9a:09:d2:37:91: 9e:4b:8e:01:ea:ba:d5:ac:a7:a6:f3:33:4b:02:53: ec:b9:7a:a8:64:64:d8:98:e8:dc:06:26:43:f5:04: 36:c9:d7:b2:c8:f2:de:92:f1:c7:53:95:cc:59:c5: e9:c2:4c:c8:cc:92:af:04:59:aa:64:af:18:44:9e: 91:e9:3a:68:1a:9e:84:92:25:19:9b:48:a0:af:c8: 5b:d4:9d:42:66:93:49:70:6a:90:b5:fa:a2:56:27: 70:e1:5d:2d:a2:4a:cb:9b:71:bf:57:9a:0d:0c:25: 7f:52:22:f5:7a:b5:06:38:b7:4b:3f:d6:36:58:73: ee:e6:70:95:d0:7e:22:d4:c1:94:e2:dd:c2:13:3a: d5:2e:e0:61:e8:47:69:50:4d:24:89:25:f2:c1:ba: 31:5e:39:f4:5d:4b:36:f7:92:7d:83:51:e0:6e:4a: e9:21:d1:b6:7a:a8:9b:7b:18:c3:5b:5e:54:d1:cb: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:41:02:A2:AD:95:36:CC:0E:D5:B1:F1:F6:31:D9:2B:8D:C1:3E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/2f4c0677-baa4-36b5-8c33-1d2d186f9545.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 216.157.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ff:a6:79:5d:c9:17:0c:a6:54:19:06:4f:62:0d:30:84:04: 80:65:f1:4f:f4:f0:2b:6a:84:5f:f1:e9:2d:a9:50:b9:e3:bf: 75:eb:f5:ca:99:51:c3:bb:c5:47:ce:c9:7b:cc:30:1d:99:ad: 9f:a5:64:fa:ee:25:26:9e:ba:d8:ac:88:34:93:5d:f4:a5:02: fe:11:68:8e:43:93:e1:53:9e:56:1b:8c:74:6e:05:08:b7:7a: 6e:8f:0d:a5:ac:15:f2:f3:dd:49:3f:5e:e2:62:c2:61:94:49: fa:95:06:b0:80:d6:40:56:f2:59:ab:e9:51:9e:a3:71:ab:e3: 91:3f:16:54:3b:7a:c3:5a:45:e5:a9:11:e4:ef:b3:c2:f4:a6: c9:e2:ef:db:ac:14:00:db:cb:74:6e:e0:e2:c7:8e:6a:ad:b1: b7:5a:38:84:60:82:c3:47:de:94:a8:74:6d:c7:7a:26:59:0c: 1f:2a:f3:bc:d6:1d:5d:81:b4:89:51:d6:eb:04:19:ee:c6:63: 7c:9c:0a:58:43:fc:92:13:fb:6f:55:b0:b1:77:47:c6:49:58: fb:6e:9c:2e:c2:ae:60:c9:5d:fd:8e:7d:b9:0a:4e:8c:d4:14: 91:f9:82:5e:80:c0:e4:f7:24:cd:75:2a:a1:35:2c:e7:a8:58: fa:22:55:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO4+TPIKlw7/qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk N2FiZDY5MDAtM2EwNi00OWZmLWEyOWMtNjJlOGY5NDM1YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1+2QmFPL0t2sIj3JBRZr2AuvmAifYwwXtbY Fwl6+0lOsHLE/O7gU6ymE5osiE2QIEKr2Pj+Ue1B65g+GDgeEGSWM7TlmgnSN5Ge S44B6rrVrKem8zNLAlPsuXqoZGTYmOjcBiZD9QQ2ydeyyPLekvHHU5XMWcXpwkzI zJKvBFmqZK8YRJ6R6TpoGp6EkiUZm0igr8hb1J1CZpNJcGqQtfqiVidw4V0tokrL m3G/V5oNDCV/UiL1erUGOLdLP9Y2WHPu5nCV0H4i1MGU4t3CEzrVLuBh6EdpUE0k iSXywboxXjn0XUs295J9g1HgbkrpIdG2eqibexjDW15U0cvgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABBAqKtlTbMDtWx8fYx2SuNwT6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMmY0YzA2NzctYmFhNC0z NmI1LThjMzMtMWQyZDE4NmY5NTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb/pnldyRcMplQZBk9iDTCEBIBl8U/08CtqhF/x6S2pULnjv3Xr9cqZ UcO7xUfOyXvMMB2ZrZ+lZPruJSaeutisiDSTXfSlAv4RaI5Dk+FTnlYbjHRuBQi3 em6PDaWsFfLz3Uk/XuJiwmGUSfqVBrCA1kBW8lmr6VGeo3Gr45E/FlQ7esNaReWp EeTvs8L0psni79usFADby3Ru4OLHjmqtsbdaOIRggsNH3pSodG3HeiZZDB8q87zW HV2BtIlR1usEGe7GY3ycClhD/JIT+29VsLF3R8ZJWPtunC7CrmDJXf2OfbkKTozU FJH5gl6AwOT3JM11KqE1LOeoWPoiVUA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:28:59 2025 by rpki-client