$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa File: 33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa (raw, json) Hash identifier: q0XLG0mS+Tfb0NKXQ0+YT5KIxT2oWmAIddDYLd2ibXg= Subject key identifier: 83:E3:F2:AC:69:FE:BC:28:3A:80:35:BC:E9:A8:32:20:61:45:72:A9 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584D07ACFED812EB4208222A3080 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 16509 IP address blocks: 108.179.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fe:d8:12:eb:42:08:22:2a:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=d42335b3-26f3-47f0-a0b9-7e7d914a196f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:26:45:de:07:f2:be:e8:2a:69:75:c6:71: c6:ff:9d:5a:73:ad:66:4e:b8:63:8b:a3:6b:0b:36: b2:c6:86:10:05:a7:38:f0:46:6a:72:4b:3f:50:a6: 24:b2:85:50:ea:75:bf:de:ea:3a:e6:96:8e:b5:c2: 7d:8d:d4:38:47:6a:db:d7:0e:9c:a6:a4:d0:50:60: 5c:f3:cc:7a:ac:fc:a9:d0:a3:b8:7b:39:12:53:34: 0c:39:22:25:2a:ad:ad:ba:fb:67:63:f0:40:86:fe: 43:31:dd:fd:9b:62:06:35:49:c9:6b:e5:55:4f:b9: b7:78:a0:8a:5a:06:5d:66:a3:70:f3:aa:8c:8f:09: 34:5f:7a:c1:41:3e:f1:66:54:7e:1d:61:f6:f8:be: d7:94:8b:99:96:d0:65:b1:41:92:73:f1:f2:c9:2a: bb:dd:fe:55:c4:ef:d4:25:03:0f:9d:b2:87:26:fe: 73:60:df:c0:85:ea:05:7b:e3:d2:50:85:6c:00:32: 65:e3:b4:21:f2:f2:6e:47:73:9d:1b:66:84:42:af: bf:e0:65:28:1b:74:a7:6b:c5:01:6b:c4:ef:d2:0e: ec:05:78:45:71:12:7e:1e:ad:36:e2:c8:24:47:6d: 88:05:fb:d7:e2:62:10:2d:aa:84:19:d6:1a:4a:19: f5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E3:F2:AC:69:FE:BC:28:3A:80:35:BC:E9:A8:32:20:61:45:72:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 108.179.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:58:59:dd:68:c4:39:85:32:65:05:a5:01:bf:f9:73:fd:3b: 1f:3b:e2:ef:b7:e4:46:16:f6:9a:20:bb:e5:20:2d:6b:b7:ee: a6:c1:eb:fd:22:95:72:d7:19:5d:6a:37:62:fd:97:1c:d7:29: 0d:92:8a:0b:7e:ec:17:c4:09:96:ee:a7:d2:49:4e:15:4c:95: 23:c0:d1:97:de:77:ca:c1:90:ee:22:17:55:c9:7a:b3:41:06: 88:d5:e5:d3:a2:a1:ed:aa:b1:82:83:f7:b5:15:2a:0e:39:55: 2b:2c:32:f4:6a:e5:1b:44:ca:1e:19:a6:56:77:07:9c:ba:dc: 0b:75:a0:63:06:62:89:2b:fe:04:91:eb:5a:ef:3c:66:30:38: a3:61:17:d4:e5:12:ac:ef:21:db:71:bc:42:5b:8d:3b:f1:53: e7:9d:b1:d9:b1:89:2c:7b:de:67:96:88:b7:a5:3a:73:c6:93: 78:32:ff:b2:c5:00:67:1b:5d:7f:17:83:08:95:ef:f9:1b:59: 5a:03:93:fa:5b:08:08:cf:61:41:24:ae:f2:c1:55:d2:7b:45: 7c:74:64:1f:b5:9c:5f:05:17:45:a6:8f:87:39:c1:35:3b:2e: 76:cf:30:07:09:92:41:92:31:95:e8:37:0b:ea:c1:35:0f:84: c4:7a:be:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrP7YEutCCCIqMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZDQyMzM1YjMtMjZmMy00N2YwLWEwYjktN2U3ZDkxNGExOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy0mRd4H8r7oKml1xnHG/51ac61mTrhji6Nr CzayxoYQBac48EZqcks/UKYksoVQ6nW/3uo65paOtcJ9jdQ4R2rb1w6cpqTQUGBc 88x6rPyp0KO4ezkSUzQMOSIlKq2tuvtnY/BAhv5DMd39m2IGNUnJa+VVT7m3eKCK WgZdZqNw86qMjwk0X3rBQT7xZlR+HWH2+L7XlIuZltBlsUGSc/HyySq73f5VxO/U JQMPnbKHJv5zYN/AheoFe+PSUIVsADJl47Qh8vJuR3OdG2aEQq+/4GUoG3Sna8UB a8Tv0g7sBXhFcRJ+Hq024sgkR22IBfvX4mIQLaqEGdYaShn1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPj8qxp/rwoOoA1vOmoMiBhRXKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMzNjZDNiYTktNWNiZS0z Y2Y1LTk4OWMtMjRmNDAzYzYyZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbLOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxYWd1oxDmFMmUFpQG/+XP9Ox874u+35EYW9pogu+UgLWu37qbB6/0i lXLXGV1qN2L9lxzXKQ2Sigt+7BfECZbup9JJThVMlSPA0Zfed8rBkO4iF1XJerNB BojV5dOioe2qsYKD97UVKg45VSssMvRq5RtEyh4ZplZ3B5y63At1oGMGYokr/gSR 61rvPGYwOKNhF9TlEqzvIdtxvEJbjTvxU+edsdmxiSx73meWiLelOnPGk3gy/7LF AGcbXX8XgwiV7/kbWVoDk/pbCAjPYUEkrvLBVdJ7RXx0ZB+1nF8FF0Wmj4c5wTU7 LnbPMAcJkkGSMZXoNwvqwTUPhMR6voM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:13:28 2026 by rpki-client