$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa File: 33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa (raw, json) Hash identifier: otAHqdWJVZUuvDRTDzOHXckF2g405casxCFUVJW/8zs= Subject key identifier: 8D:49:7A:64:E6:06:44:93:AF:69:F6:D9:34:47:FD:A4:F6:40:02:02 Certificate issuer: /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Certificate serial: 010D0C9F4328584DE84B42F44009F6BE23E72180 Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 16509 IP address blocks: 108.179.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:42:f4:40:09:f6:be:23:e7:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=206e3329-2902-481f-bd1e-91fd882be93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:fc:62:b9:2d:12:81:05:3d:25:f5:06:e0: 23:be:c6:77:b6:b0:c8:21:94:33:8b:19:ed:9a:3d: 7c:3f:b2:c6:1d:91:d2:1f:b3:3a:f9:79:d9:9b:5b: 9e:a1:eb:1b:30:7c:f5:d1:fd:2a:ca:f3:e1:0b:43: ef:72:3e:cd:cf:09:dc:13:aa:d2:5d:e5:bf:bd:f5: 27:3f:b5:cd:43:2b:e2:8f:89:61:e1:e8:91:58:52: 82:da:cd:43:3d:06:8f:7a:bf:31:38:ae:1f:ee:26: 37:26:80:0a:bb:53:46:5b:5e:b3:57:05:3c:07:40: da:f1:b9:86:96:19:16:b7:7b:3e:bf:15:dc:0d:ca: ff:8e:18:58:b0:df:87:93:40:e0:28:b2:ed:0a:fe: c1:4f:70:a6:98:0f:bf:e3:7a:31:bc:eb:28:1a:f8: c7:28:25:c4:e2:89:c0:45:8a:d4:6d:58:86:5b:16: 5a:98:fa:ce:f5:1d:e5:30:d9:ad:a8:b5:9d:dc:33: 4d:bc:46:ec:09:03:45:b4:dd:ea:14:74:a1:4a:66: 9a:a9:d4:ae:33:06:54:6e:b2:ad:1b:7b:61:6a:8e: d8:08:3d:84:c3:a5:97:c9:a9:c0:61:9f:d0:ee:73: a4:00:22:b4:40:a9:b2:a5:55:cb:cf:c2:21:26:8d: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:49:7A:64:E6:06:44:93:AF:69:F6:D9:34:47:FD:A4:F6:40:02:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/33cd3ba9-5cbe-3cf5-989c-24f403c62fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl X509v3 Authority Key Identifier: keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer sbgp-ipAddrBlock: critical IPv4: 108.179.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8a:9a:27:db:14:69:a8:f7:3c:0f:57:e9:3e:1f:e3:b6:18: 74:a8:c4:36:77:1d:82:71:ee:7b:d1:c2:f5:db:dc:86:7f:73: 96:b6:0e:6d:66:48:e6:e9:6b:b6:8f:fc:43:2f:0e:10:76:d9: ab:02:7e:a7:7e:95:ce:89:9a:c8:c4:86:36:db:ac:41:28:bb: 00:cb:11:c5:d5:9d:43:fa:a3:6c:1b:76:ce:5e:20:24:6a:f7: e7:a2:6d:2d:a0:9c:53:4a:a7:85:17:9f:50:33:ee:e7:d0:87: 3b:39:26:03:fc:66:fa:b3:9e:cb:72:2e:e7:68:62:8e:c8:45: b7:38:f9:12:46:2f:83:57:e5:79:37:9d:ca:18:63:f2:fe:5f: de:61:29:4f:c8:81:88:ab:16:f8:31:cb:05:aa:43:87:76:82: d4:99:fa:19:94:19:cb:3d:55:a2:ea:fb:a4:cd:c2:76:f4:48: 84:00:7f:00:5e:03:fb:fa:7d:72:83:a6:0b:74:67:a8:a8:c3: 2d:36:48:b1:ce:0a:a9:a1:f3:46:93:fc:11:00:aa:cf:26:02: ef:2c:ba:cb:e5:76:99:ee:37:14:9e:15:50:23:d0:0e:ab:83: df:42:4b:eb:29:79:0d:85:47:c5:46:f2:d7:0d:72:f7:19:77: 8a:6e:6d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS0L0QAn2viPnIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0 N2ExMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk MjA2ZTMzMjktMjkwMi00ODFmLWJkMWUtOTFmZDg4MmJlOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKv8YrktEoEFPSX1BuAjvsZ3trDIIZQzixnt mj18P7LGHZHSH7M6+XnZm1ueoesbMHz10f0qyvPhC0Pvcj7NzwncE6rSXeW/vfUn P7XNQyvij4lh4eiRWFKC2s1DPQaPer8xOK4f7iY3JoAKu1NGW16zVwU8B0Da8bmG lhkWt3s+vxXcDcr/jhhYsN+Hk0DgKLLtCv7BT3CmmA+/43oxvOsoGvjHKCXE4onA RYrUbViGWxZamPrO9R3lMNmtqLWd3DNNvEbsCQNFtN3qFHShSmaaqdSuMwZUbrKt G3thao7YCD2Ew6WXyanAYZ/Q7nOkACK0QKmypVXLz8IhJo3xfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1JemTmBkSTr2n22TRH/aT2QAICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1 ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMzNjZDNiYTktNWNiZS0z Y2Y1LTk4OWMtMjRmNDAzYzYyZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1 NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbLOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKKmifbFGmo9zwPV+k+H+O2GHSoxDZ3HYJx7nvRwvXb3IZ/c5a2Dm1m SObpa7aP/EMvDhB22asCfqd+lc6JmsjEhjbbrEEouwDLEcXVnUP6o2wbds5eICRq 9+eibS2gnFNKp4UXn1Az7ufQhzs5JgP8ZvqznstyLudoYo7IRbc4+RJGL4NX5Xk3 ncoYY/L+X95hKU/IgYirFvgxywWqQ4d2gtSZ+hmUGcs9VaLq+6TNwnb0SIQAfwBe A/v6fXKDpgt0Z6iowy02SLHOCqmh80aT/BEAqs8mAu8susvldpnuNxSeFVAj0A6r g99CS+speQ2FR8VG8tcNcvcZd4pubQE= -----END CERTIFICATE-----Generated at Sat Jun 13 18:03:35 2026 by rpki-client